This policy explains what personal data Nexosport ("we") handles when you use the website, dashboard and API, and what you can ask us to do with it. We collect only what we need to run the service and bill for it.
What we collect
| Data | Why | How long |
|---|---|---|
| Name, email, profile picture and account ID from Google | To create your account and sign you in | Until you delete your account |
| Sign-in session (a cookie holding a random token) | To keep you signed in to the dashboard | 30 days, or until you sign out |
| Text you send for translation | To translate it | Not stored after the response, except as below |
| Translation memory: translated sentences, with numbers and names replaced by placeholders | So repeated sentences cost you nothing and come back identical | 30 days after the sentence was last used; only ever used for your own account |
| Long-document jobs: the text and results | To run the job and let you download the result | Deleted 7 days after the job finishes |
| Glossaries and API key fingerprints (never the keys themselves) | To apply your rules and check your keys | Until you delete them or your account |
| Usage records: time, endpoint, character and credit counts (not the text) | Billing, usage charts, abuse prevention | 400 days |
| Credit history and purchases: pack, amount, currency, status, Stripe customer ID | Billing and accounting | As long as tax and accounting law requires |
We do not use your content to train AI models, we do not sell personal data, and we do not use advertising or analytics cookies.
Who processes it for us
- Cloudflare hosts the website, API, database and file storage.
- Google (Gemini API, paid tier) receives the text to be translated, with numbers and locked terms already replaced by placeholders, and returns the translation. On the paid tier Google does not use it to improve its products.
- Stripe handles payments. Your card details go to Stripe and never reach us.
- Google handles sign-in.
- GoalServe supplies sports data. We send them no personal data.
These providers may process data outside your country. We rely on their contractual and security commitments for those transfers.
Cookies
The dashboard uses one essential cookie, tfl_session, to keep you signed in, and a short-lived cookie during sign-in to protect it from forgery. The public website sets no cookies.
Your choices and rights
- You can delete glossaries and revoke API keys in the dashboard at any time.
- You can ask for a copy of your data, a correction, or deletion of your account by writing to support@nexosport.app from the email on your account. We reply within 30 days. Deleting your account removes your profile, glossaries, keys and translation memory; billing records we must keep by law are kept for the required period.
- Depending on where you live (for example under Thailand's PDPA or the EU GDPR), you may also have the right to object to or restrict processing, and to complain to your data protection authority.
Security
Traffic is encrypted in transit. API keys and session tokens are stored only as one-way hashes. Access to production systems is limited to the people who run the service.
Changes and contact
If we change this policy in a way that matters, we will update the date above and tell account holders by email. Questions or requests: support@nexosport.app.