Privacy Policy

What Nexec is

Nexec is a job search management platform for senior professionals. It helps you track relationships, manage your pipeline, and organize your search. To do that, it connects to your email and calendar, stores contact data you provide or that we extract from your communications, and uses AI to surface insights.

This policy explains what we collect, how we use it, who can see it, and what control you have.

What we collect

How we use it

We use your data to:

• Operate the platform: display your contacts, pipeline, and activity
• Extract contacts and interactions from your connected email and calendar accounts
• Generate AI-powered suggestions, drafts, and summaries for you
• Send you product emails such as the weekly digest, check-ins, and the monthly retrospective (turn any of them off in Settings or with the unsubscribe link)
• Send phone notifications, only if you turn them on in Settings: a reminder before a meeting with one of your contacts and a prompt afterward to note how it went. They show the meeting's title and the person's name, and are encrypted on the way through your phone's or browser's notification service (such as Apple's or Google's), which can't read them. Turn them off in Settings at any time.
• Improve the product through aggregated, de-identified usage patterns

We do not:

• Sell your data
• Use your data for advertising
• Use your data to train AI models
• Share your personal information with recruiters, employers, or anyone else without your instruction
• Use your email content for any purpose other than powering the features you use

Google user data

Nexec's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, data from your Gmail and Google Calendar:

• Is used only to provide and improve the features you use in Nexec
• Is never sold, and never used for advertising
• Is not transferred to others except as needed to provide those features (for example, AI analysis by Anthropic as our service provider), to comply with law, for security, or as part of a merger or acquisition with notice to you
• Is not read by people, except with your permission, when needed for security or to investigate abuse, to comply with law, or in aggregated, de-identified form for operations
• Is not used to develop, improve, or train generalized AI or machine learning models

We hold mail and calendar data from every other provider to the same standard.

AI and data processing

Nexec uses Claude, from Anthropic, to analyze email content and generate suggestions and drafts. When your content is processed:

• It is sent to Anthropic's API under Anthropic's commercial terms
• Anthropic does not train its models on that content
• Anthropic keeps it only briefly, under its commercial data retention terms

AI-generated suggestions are recommendations only. You control what actions are taken.

To match your writing style, Nexec keeps a short written summary of how you write, generated from your sent emails, and may include excerpts of your recent sent emails when you ask for a draft. This is used only for your own drafts and never to train AI models. You can view the summary or turn style matching off on your profile; turning it off deletes the summary.

Some features look up public information: interview preparation can search the public web for background on a company or the people you are meeting, and target-firm news comes from public news searches. These lookups send company and person names, not your email content.

Who can see your data

Only you see your data in the app; each account can access only its own records. Nexec's operator can access stored data only to run, support, and secure the service, such as diagnosing a problem you report. Our admin tools show counts and statuses rather than your email text, and email text is deleted on the schedule below, so there is little of it to see.

Data storage and security

Your data is stored in Supabase, a managed cloud database provider. We use row-level security so each account can reach only its own data, encrypted connections (HTTPS/TLS) for all data in transit, and secure session management. Sign-in tokens and app-specific passwords for your connected accounts are stored encrypted.

We are a small team and will be direct about our security posture: we take reasonable precautions, but we are not yet SOC 2 certified. If you have specific security requirements, reach out before connecting sensitive accounts.

Data retention

• Email text: message previews are deleted 30 days after we process them, and 90 days after they appear in your activity. Contacts, subjects, dates, and what Nexec derived from them stay with your account.
• Everything else: kept while your account is active.
• Unused accounts: if you don't use Nexec for 60 days, we email you and pause syncing. If you don't sign in or tell us to keep the account within 14 days, we delete it and its data. Paid accounts are never deleted this way.
• When you delete your account: your data is deleted from Nexec right away; copies in our database provider's backups expire within 30 days. We keep only an anonymous record of how long the account existed and how much it was used, with no name, email, or identifier.

Your rights and controls

You can, at any time:

• Export your data: contact us and we'll provide a copy of all data associated with your account
• Delete your account from Settings, which permanently removes your data
• Disconnect any connected account from Settings, which stops all further access. You can also choose to delete the stored email or calendar copies from that connection; contacts and activity already in Nexec stay until you delete them or your account
• Revoke access directly from your Google or Microsoft account settings, or by deleting the app-specific password with your mail provider
• Correct or update any information in your profile, contacts, or pipeline directly in the app
• Turn off product emails and writing-style matching

If you're in the EU or UK, you have additional rights under GDPR/UK GDPR, including the right to restrict processing. Contact us at the address below.

Third-party services

Changes to this policy

If we make material changes, we'll notify you by email and update the date above. Continued use of Nexec after changes constitutes acceptance.

Contact

Questions about this policy or your data: privacy@nexec.ai