Privacy Policy
Last updated: February 22, 2026
1. Introduction
NexFlow Inc. ("NexFlow," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our engineering intelligence platform and related services (collectively, the "Services"). By accessing or using our Services, you consent to the practices described in this Privacy Policy.
2. Information We Collect
We collect information you provide directly (account details, payment information, communications), information from connected services you authorize (GitHub, Slack, Linear, Jira, calendar data, repository activity, project management data), and information collected automatically (usage data, device information, cookies). We only access third-party data based on permissions you explicitly grant.
3. How We Use Your Information
We use collected information to: operate and deliver our platform features; analyze engineering patterns and generate health reports; provide predictive analytics and risk detection; improve our services; send service-related communications; respond to support inquiries; detect and prevent security issues; and comply with applicable laws.
4. How We Share Your Information
We may share information with: trusted service providers who assist in operating our Services (cloud hosting, analytics); connected third-party applications you choose to integrate; in connection with a merger, acquisition, or sale of assets; when required by law; or with your explicit consent. We do not sell your personal information to third parties.
5. Data Security
We implement robust security measures including: encryption at rest (AES-256) and in transit (TLS 1.3); strict role-based access controls; secure cloud infrastructure; continuous security monitoring and vulnerability assessments; and established incident response procedures. While we strive to protect your information, no method of transmission is 100% secure.
6. Data Retention
Account data is retained while your account is active and for 30 days after deletion. Connected service data is processed in real-time and retained according to your configured settings (default: 90 days). Usage logs are retained for up to 12 months. Certain data may be retained longer if required by law.
7. Your Rights
Depending on your location, you may have rights to: access a copy of your personal information; correct inaccurate data; request deletion of your data; obtain a portable copy; opt out of marketing communications; restrict or object to certain processing. To exercise these rights, contact us at privacy@nexflowinc.com. We will respond within 30 days.
8. California Privacy Rights (CCPA)
California residents have additional rights under the CCPA: right to know what personal information is collected, used, or shared; right to delete personal information; right to opt out of data sales (we do not sell personal information); and right to non-discrimination for exercising CCPA rights.
9. European Privacy Rights (GDPR)
If you are in the EEA, UK, or Switzerland, our legal bases for processing include: contract performance, legitimate business interests, explicit consent, and legal obligation. You may also contact your local data protection authority. International data transfers are protected by Standard Contractual Clauses.
10. Cookies
We use essential cookies (required for platform functionality), analytics cookies (to understand usage patterns), and preference cookies (to remember your settings). You can control cookies through your browser settings. Disabling certain cookies may affect functionality.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and changing the "Last updated" date. Continued use of the Services after changes constitutes acceptance.
12. Contact Us
NexFlow Inc. Email: privacy@nexflowinc.com General inquiries: arjundixit@nexflowinc.com Website: nexflowinc.com