We wrote this ourselves in plain English. No buried clauses, no hidden trackers. If anything here is unclear, email us — there's a link at the bottom.
This Privacy Policy explains what Nexcor ("we," "us") collects from you, how we use it, who else sees it, and your rights over your own data.
Who we are
Nexcor is an AI character chat platform operated by Kurai Kvekveskirielene, an individual based in Georgia, for the purposes of this policy. We are a very small team (two people: Kurai and Big G). You can reach us via our contact form.
Because we offer services to people worldwide, this policy is written to respect your rights under the GDPR (European Union), CCPA (California), and similar privacy laws wherever you live.
Minimum age
Nexcor is for users 18 years of age or older. We do not knowingly collect data from people under 18. If we discover that a minor has created an account, we delete it and any associated data within a reasonable time. If you believe a minor is using Nexcor, please contact us.
What we collect
Information you give us
- Account info — email, username, password (hashed, we never see it in plain text), and optionally a display name and avatar.
- Characters you create — name, description, greeting, long-term memory text, avatar image, gender/pronouns, visibility setting, NSFW flag.
- Conversations — every message you send and every reply the AI generates, stored so characters can remember what you've discussed.
- Signal Feed content — text posts, images, NSFW flags, and tags you publish to the Feed. Feed posts and comments are publicly visible to all logged-in Nexcor users. Do not post anything in the Feed you wish to keep private.
- Comments — text you write in response to Feed posts, including nested replies. Publicly visible.
- Social interactions — likes (“Resonates”) on Feed posts, who you follow, and who follows you. Follow relationships are visible on your public profile. Like counts are visible on posts.
- Uploaded images — photos you attach to Feed posts are uploaded to Supabase Storage and served via a public URL. If you delete a post, the image is removed from storage within 30 days.
- Payment info — when you buy Marks or subscribe, Stripe handles your card details. We only receive your Stripe customer ID, purchase amount, and transaction timestamp. We never see your card number.
- Support messages — when you contact us, we see your message plus some diagnostic info (username, page URL, browser) to help us help you.
Information collected automatically
- Session cookies — required for login. We don't use tracking cookies.
- Server logs — basic information like IP address and timestamp, kept for 30 days for security and debugging.
- Browser and OS — collected only when you contact support, to help diagnose bugs.
What we do NOT collect
- We do not use third-party advertising trackers.
- We do not sell your data — to anyone, ever.
- We do not use analytics services that profile you across the web.
How the AI works (the honest version)
Nexcor is powered by Anthropic's Claude models. When you send a message, here is exactly what happens:
- Your message is saved to our database (Supabase).
- We assemble a "system prompt" containing: the character's description, their long-term memory (written by whoever created the character), and some context about you (your username and any facts you've told the character earlier in conversation).
- We send this prompt plus the last 20 messages in the conversation to Anthropic's API.
- Anthropic generates a reply and sends it back to us.
- We save the reply to our database and stream it to your screen.
Anthropic does not use your API-sent data to train their models, per their standard API terms. They retain data temporarily for safety monitoring (typically 30 days) and then delete it. You can read their policy at anthropic.com/legal.
Important: AI characters are not real people. They do not have feelings or consciousness, and their replies are generated by statistical models. Please do not use them for medical, legal, financial, or crisis-related advice.
How memory works
Each character has a long_term_memory text field written by its creator when the character is made. This memory is included in every AI request, so the character stays consistent.
Separately, your conversation history (up to the last 20 messages) is included in each request, so the character remembers what you just said. We do not train a model on your messages. We do not share your messages with other users or other characters. Your chat with Sistra stays private to you.
Third parties we use
We use a small number of service providers to run Nexcor. Each one is a "data processor" under GDPR terms, which means they handle data on our behalf under strict contracts.
- Supabase — stores your account, characters, conversations, Feed posts, and comments in a PostgreSQL database hosted in the EU. Supabase Storage is also used to host images you attach to Feed posts (served via public URL). Privacy policy.
- Anthropic — provides the Claude AI models. Processes messages in real time, does not train on API data. Privacy policy.
- PayPal — handles payments. Receives your card details and PayPal account data directly; we never see or store card numbers. Privacy policy.
- Vercel — hosts the website. Receives basic request data (IP, user agent). Privacy policy.
How long we keep your data
- Account & profile: As long as your account exists.
- Characters you create: As long as your account exists, unless you delete them.
- Conversations: Stored indefinitely by default so characters can remember you. You can delete individual conversations anytime from the chat menu.
- Signal Feed posts & comments: Kept until you delete them or your account is deleted. When you delete a post, it is removed from active systems within 30 days.
- Uploaded images: Stored in Supabase Storage. When you delete the associated Feed post, the image file is removed from storage within 30 days.
- Payment records: Kept for 7 years for tax and accounting reasons.
- Support messages: Kept for 2 years so we can reference past issues.
- Server logs: 30 days.
When you delete your account, we remove your profile, characters, conversations, Feed posts, comments, and messages from our active systems within 30 days. Associated image files in Supabase Storage are also deleted within this window. Backup copies may persist for up to 90 days before being fully purged.
Your rights
You have the right to:
- Access your data — email us and we'll send you a copy.
- Correct your data — most fields are editable in Settings.
- Delete your data — delete individual conversations in the chat menu, or delete your entire account in Settings.
- Export your data — email us and we'll provide a machine-readable export.
- Object to our processing — email us.
- Lodge a complaint with your local data protection authority if you feel we've mishandled your data.
For California residents: you have additional rights under the CCPA including the right to know, delete, and opt out of "sales" (we do not sell data). Exercise these rights by emailing us.
Security
We take reasonable steps to protect your data:
- All traffic is encrypted in transit (HTTPS/TLS).
- Passwords are hashed with industry-standard algorithms — we never see them.
- Database access is restricted by row-level security (RLS), meaning you can only read your own private data.
- Payment information never touches our servers.
No system is perfectly secure. If we ever experience a data breach affecting you, we will notify you within 72 hours as required by GDPR.
Cookies and local storage
We use only essential cookies required for you to stay logged in. We do not use third-party advertising, analytics, or tracking cookies. If that ever changes, we will update this policy and notify you.
We also store a small timestamp in your browser's localStorageto track when your Signal Feed was last refreshed (so the feed can automatically reload after 24 hours). This value is stored only on your device, is never sent to our servers, and contains no personal information.
Changes to this policy
We may update this policy as Nexcor evolves. When we make material changes, we'll notify you by email and update the "Last updated" date at the top. Continued use after changes means you accept the new terms.
Contact us
Privacy questions, data requests, or concerns? Use our contact form — we read every message personally.