NxLayer ("we", "us", or "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use NxLayer Copilot, NxLayer Immersion, and related services.
1. Information We Collect
Account Data — When you create an account, we collect your email address, display name, and authentication credentials. If you sign in via a third-party provider (e.g., Google), we receive basic profile information from that provider.
Usage Data — We collect anonymised, aggregated data about how you use our products: feature interactions, session frequency, extension activation events, and platform usage statistics. This data does not include the content of your messages or rewrites.
Message Content — When you use NxLayer Copilot to rewrite or explain a message, the selected text is sent to our AI processing pipeline to generate a response. We do not store the content of individual messages beyond the duration of the request. Content is never used to train AI models.
Technical Data — We collect standard browser and device information including browser type, operating system, IP address (anonymised), and extension version for debugging and performance monitoring.
2. Authentication
NxLayer uses secure authentication services to manage user accounts. Passwords are hashed and never stored in plain text. We support OAuth 2.0 sign-in with major providers. Session tokens are stored securely in browser storage and expire after periods of inactivity.
3. Payment Processing
All payments are processed by Paddle, our authorised merchant of record. NxLayer does not collect, store, or process credit card numbers or financial details directly. Paddle handles all billing, invoicing, and payment security in compliance with PCI DSS standards.
By subscribing, you agree to Paddle's terms and privacy policy in addition to ours. Subscription status (active/inactive, plan tier) is shared with us so we can provision your account correctly.
4. How We Use Your Information
We use your information to:
- Provide, operate, and improve NxLayer services
- Process AI requests and return results to you
- Manage your account and subscription
- Send transactional emails (receipts, subscription confirmations)
- Monitor for abuse and ensure fair use compliance
- Improve extension performance and reliability
- Respond to support requests
We do not sell your personal data to third parties. We do not use your message content for advertising or profiling.
5. Data Sharing
We share data only with the following categories of service providers, under data processing agreements:
- AI inference providers — to process rewrite and explanation requests
- Paddle — payment processing and subscription management
- Analytics providers — for anonymised product analytics
- Infrastructure providers — for hosting and cloud services
We may disclose data if required by law, court order, or to protect the rights and safety of NxLayer or our users.
6. Data Retention
Account data is retained for as long as your account is active. If you delete your account, your personal data is removed within 30 days, except where retention is required for legal or financial compliance.
Message content processed through the AI pipeline is not retained beyond the duration of the request (typically a few seconds). Usage analytics data is retained in anonymised, aggregated form.
7. Browser Extension & Permissions
NxLayer Copilot requests permissions to read and modify content on specific web pages to detect and rewrite selected text. The extension:
- Only activates on supported platforms (X, LinkedIn, Gmail, Discord, Slack, YouTube)
- Does not read your full browsing history
- Does not capture keystrokes or monitor background activity
- Only sends text to our servers when you explicitly trigger a rewrite or explanation
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access, correct, or delete your personal data
- Request data portability
- Withdraw consent for data processing
- Lodge a complaint with a data protection authority
To exercise these rights, contact us at [email protected].
9. Cookies & Tracking
Our website uses essential cookies for session management and authentication. We use privacy-respecting analytics that do not set third-party tracking cookies. You can control cookie preferences through your browser settings.
10. Security
We implement industry-standard security measures including TLS encryption in transit, encrypted storage at rest, access controls, and regular security reviews. Despite our efforts, no system is completely secure. We encourage you to use a strong, unique password and enable any available two-factor authentication.
11. Children's Privacy
NxLayer services are not directed to children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, contact us and we will promptly delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or via in-product notices. Continued use of our services after changes take effect constitutes your acceptance of the updated policy.
13. Contact Us
For privacy-related questions or requests, contact us at: