Nexora Intel
Get started

Privacy Policy

Last updated: June 2026

This Privacy Policy explains how Nexora Technologies ("Nexora", "we", "us") collects, uses, stores, and protects information in connection with the Nexora Intel platform (the "Service"), including data accessed through the Google Ads API and Google OAuth. By using the Service you agree to the practices described here.

1. Our role — controller vs. processor

Nexora Intel is sold to digital marketing agencies and consultants who use it to manage their own and their clients' accounts. For the personal data you bring into the Service about your clients, their advertising accounts, and the people in those accounts, you are the data controller and Nexora acts as a data processor that processes that data only on your instructions. For the account you create with us (your sign-in identity and billing/activation status), Nexora is the controller.

2. Who we are

Nexora Technologies is an independent third-party software provider. Nexora Intel is a campaign-management and SEO tool used by digital marketing agencies and consultants to manage their clients' Google Ads accounts and search performance. We are not affiliated with, endorsed by, or sponsored by Google LLC.

3. Information we collect

3.1 Account & authentication data

  • Authentication identifiers (such as your email address) used to sign in to the Service via Google.
  • Google OAuth tokens (access and refresh tokens) that you grant when you connect a Google Ads account.
  • Your account status (such as whether your subscription is active) used to gate access.

3.2 Google Ads data

  • Campaign, ad group, keyword, ad, and search-term performance metrics (impressions, clicks, cost, conversions, etc.) retrieved from accounts you authorize.
  • Account and customer identifiers required to make Google Ads API requests on your behalf.

3.3 Workspace data you create

  • Projects, tracked keywords, audits, content drafts, and other records you generate while using the Service.
  • AI provider API keys you choose to add ("bring your own key"), stored encrypted.

3.4 Technical data

  • Basic operational logs needed to run and secure the Service.

4. How we use information & our legal bases

  • To authenticate you and operate the Service (legal basis: performance of our contract with you).
  • To read performance data and to make changes (campaigns, keywords, bids, negative keywords) in Google Ads accounts only as directed and approved by the authorized operator (legal basis: your instructions / contract).
  • To provide AI-assisted optimization recommendations, which are always presented for explicit human approval before any change is applied.
  • To secure the Service, prevent abuse, and meet legal obligations (legal bases: our legitimate interests and legal compliance).

For users in the UK and European Economic Area, the legal bases above (contract, legitimate interests, consent where applicable, and legal obligation) govern our processing of personal data.

5. Google API Services User Data Policy & Limited Use

Nexora Intel's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We use Google user data only to provide and improve the user-facing features that are visible and prominent in the Service.
  • We do not sell Google user data.
  • We do not transfer or use Google user data for advertising, including retargeting or personalized/interest-based advertising.
  • We do not allow humans to read Google user data unless: (a) you give explicit consent for specific data; (b) it is necessary for security purposes (e.g., investigating abuse); (c) it is required to comply with applicable law; or (d) the data is aggregated and anonymized for internal operations.

6. We do not sell or share your personal information

We do not sell your personal data, and we do not share it for cross-context behavioural advertising. We do not use third-party advertising cookies or trackers.

7. Sharing & sub-processors; international transfers

We share data only with infrastructure and service providers acting on our instructions to operate the Service, to comply with law, or with your explicit consent. Our sub-processors include:

  • Supabase — managed Postgres database and authentication.
  • Google — Google Ads API and Google OAuth (only for accounts you connect).
  • The hosting provider that runs our application servers.
  • AI providers you choose (e.g., Anthropic, OpenAI, Google) — invoked with your own API keys when you use AI features; prompts you submit are sent to the provider you configured.
  • An email delivery provider, used only to send you Service notifications you have enabled.

These providers may process data in regions outside your own. Where personal data is transferred internationally, we rely on appropriate safeguards (such as the providers' standard contractual clauses and equivalent mechanisms).

8. Storage & security

  • Tenant data is isolated at the database level using row-level security so one customer cannot access another's data.
  • OAuth refresh tokens, connection credentials, and your AI provider keys are stored encrypted using AES-256 with per-tenant derived keys.
  • Performance data is retrieved on demand to render dashboards and is not used for any purpose beyond operating the Service.
  • Access tokens are refreshed server-side and are never exposed to client browsers.
  • Data is transmitted over HTTPS, and we apply reasonable administrative, technical, and physical safeguards.

9. Data retention & deletion

We retain account and workspace data for as long as your account is active. You may disconnect a Google Ads account at any time, which removes the stored credentials for that account. When you close your account or request deletion, we delete or anonymize your personal data within a reasonable period, except where we are legally required to retain it. To request deletion, email us at the address below.

10. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal data, and to object to certain processing or withdraw consent.

  • United Kingdom & European Economic Area: rights under the UK GDPR and EU GDPR, including the right to lodge a complaint with your supervisory authority.
  • India: rights under applicable Indian data-protection law.
  • United States (incl. California): rights to know, delete, and opt out of sale/sharing (we do not sell or share).

Because Nexora often acts as a processor on your behalf, requests about your clients' data may be directed to you as the controller. To exercise your rights, contact us using the details below.

11. Revoking Google access

You can revoke Nexora Intel's access to your Google account at any time via your Google Account permissions page.

12. Cookies & local storage

We use only essential cookies and local storage required to keep you signed in and operate the Service. We do not use third-party advertising or analytics trackers.

13. Children

The Service is intended for businesses and is not directed to individuals under 18, and we do not knowingly collect their data.

14. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by the "Last updated" date above.

15. Contact & Grievance Officer

For privacy questions, data requests, or grievances, contact us at developer@nexoratechnologies.cloud. We aim to respond within a reasonable time and in accordance with applicable law.