Privacy Policy

Last updated: September 2026

What we collect

• Email address for account login and billing notifications
• Encrypted password, never stored as plain text
• Public post text, quoted text, links, card text, and images from the conversation you actively ask NurAi to process
• Daily usage count for billing and quota enforcement
• Crypto payment metadata such as wallet address, network, asset, amount, transaction ID, and the plan purchased
• Referral codes, referral attribution, wallet ledger entries, and withdrawal requests
• BEP-20 USDT withdrawal address if you request a referral payout
• Dashboard announcements and global chat messages you send or read

What we do not collect

• Your X/Twitter login credentials
• Your DMs or private messages
• Your browsing history
• Tweets you did not actively reply to
• Your IP address or location beyond standard server logs

How we use your data

Selected public context is sent through our AI gateway to generate reply suggestions. We do not store the raw public context and we do not store generated reply text. Email is used for login, account recovery, and important service announcements. Announcements and global chat are stored so users can read updates and community messages inside the dashboard. Referral and withdrawal records are used to calculate bonuses, prevent duplicate credits, process manual payouts, and keep an audit trail.

Third-party services

• Render - hosts our application and API.
• Vercel AI Gateway - routes generation requests to AI model providers.
• Resend - delivers transactional email such as login codes and billing notices.
• Turso - provides our managed database.
• OxaPay - processes crypto subscription payments.

Data retention

Account data and usage counters are retained as long as your account exists. Payment records and receipts may be retained for billing, security, and support. You may request deletion at any time. Personal data is removed within 30 days except records we must retain for security or legal reasons and immutable transaction data already published on a public blockchain.

Your rights

You can request access to, correction of, or deletion of your data by emailing support@nurxai.xyz.

Security

All data is transmitted over HTTPS. Passwords are hashed with bcrypt. JWT tokens have 30-day expiry. Database access is restricted to our backend only.

Contact

Questions? Email support@nurxai.xyz or message us on Telegram @Nur_Xai.