Privacy Policy

Last updated: March 11, 2026

Nexa ("we", "our", "us") is a Chrome browser extension that helps users create narrated video tutorials. This policy describes what data we collect, how we use it, and your rights regarding that data.

1. Data We Collect

1.1 Account Information

When you sign in with Google, we receive and store:

Email address
Display name
Profile picture URL

We do not receive or store your Google password.

1.2 Screen and Audio Recordings

When you create a tutorial, the extension captures your browser tab video and microphone audio using standard browser APIs.

      Audio: Sent to our server for transcription (speech-to-text) and narration generation.

      Video: Uploaded to our server for processing, editing, and final compilation of your tutorial.

Recordings are temporarily stored on your device during capture and automatically uploaded when you stop recording. Once uploaded, the local copy is cleaned up.

1.3 Page Interaction Data

During a recording session, the extension captures:

Which elements you click, type into, or scroll
CSS selectors and short text labels of those elements (up to 80 characters)
Mouse cursor positions (for animated cursor replay)
The text you type into form fields
The URL of the page being recorded

This data is used solely to reconstruct your tutorial timeline and is uploaded to our server along with the recording for processing and editing.

      Warning: Avoid demonstrating sensitive forms (passwords, credit cards, personal data)
      during recording, as typed text is captured in full.
    

1.4 Payment Information

Payments are processed entirely by Stripe. We never see, store, or process your credit card number. We only store your Stripe customer ID and purchase history (amounts and timestamps) for credit balance tracking.

1.5 User Preferences

We store your chosen settings: language, TTS voice, speed, pitch, custom logo, and color preferences.

2. How We Use Your Data

Data	Purpose
Email, name, avatar	Account identification and display
Microphone audio	Transcription (speech-to-text) to generate narration
Narration text	AI-assisted text polishing and text-to-speech synthesis
Page interaction data	Building the tutorial timeline and step markers
Stripe customer ID	Processing credit purchases and managing balance
Preferences	Personalizing your experience (voice, language, branding)

3. Third-Party Services

We use the following third-party services to provide our functionality:

Service	Data Shared	Purpose
OpenAI (Whisper)	Audio recordings	Speech-to-text transcription
OpenAI (GPT-4.1)	Narration text	Text polishing and improvement
Google Cloud (Text-to-Speech)	Narration text segments	Generating spoken audio for tutorials
Stripe	Email, name	Payment processing
Google OAuth	Authentication token	Sign-in verification

Each third-party service processes your data according to their own privacy policies. We encourage you to review: OpenAI Privacy Policy, Google Cloud Privacy Notice, and Stripe Privacy Policy.

4. Data Storage and Security

Video and audio recordings are uploaded to our servers for processing and stored using encryption at rest.
Account data and saved tutorials are stored on our servers in a PostgreSQL database.
All communication between the extension and our servers uses HTTPS encryption.
Authentication uses JWT tokens with 7-day expiration.
Third-party API keys are stored server-side only and are never exposed to the extension.

5. Data Retention

Account data: Retained until you delete your account.
Saved tutorials: Retained until you delete them (soft-deleted, then permanently removed after 30 days).
Video and audio recordings: Retained on our servers until you delete the associated tutorial or your account.
Payment history: Retained for accounting and legal requirements.
Audio sent to OpenAI: Subject to OpenAI's API data retention policy (not used for model training).

6. Your Rights

You have the right to:

Access your personal data stored on our servers.
Delete your account and all associated data.
Delete individual tutorials at any time.
Export your tutorials and data.
Withdraw consent by signing out and uninstalling the extension.

To exercise any of these rights, contact us at the email below.

7. What We Do NOT Do

We do not sell your personal data to third parties.
We do not use cookies or web tracking technologies.
We do not collect analytics or telemetry data.
We do not access your data on pages you are not actively recording.
We do not record or capture anything unless you explicitly start a recording session.

8. Children's Privacy

Nexa is not intended for use by children under 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the extension after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this privacy policy or want to exercise your data rights, contact us at:

Email: privacy@nexa.video