Privacy Policy

1. Data we collect

• Account data: username, email address and password (stored hashed — we cannot read it), plus two-factor authentication data if you enable it.
• Profile: avatar, colours, bio and status, and your birthday month and day if you add them (shown to others only if you choose).
• Content: your messages in servers and direct messages, the attachments, files and voice messages you upload, reactions, polls, reminders, private notes and saved messages, and the servers and settings you create.
• Technical data: IP address, browser/device type and operating system, approximate country (provided by Cloudflare), sign-in times and session activity, browser-notification subscription data if you enable it, and operational logs for security and abuse prevention.
• On your device: the app stores your session token, preferences (language, theme, audio devices) and drafts locally.

2. Voice and video calls

We do not record or store calls or screen sharing. They mostly run directly between participants and may be relayed through servers (Cloudflare) when a direct connection is not possible; relayed media is encrypted in transit. Voice messages you send in chat are stored as files like any other attachment.

3. How we use your data

• To operate the platform and provide its features (messaging, friends, servers, calls, search…).
• To protect accounts and the platform: sign-in and two-factor authentication, device management, abuse, spam and fraud prevention, and investigating violations.
• To send account messages: password recovery, new-device sign-in alerts, and browser notifications if you enable them.
• To comply with laws and legal requests, improve performance and fix faults.

4. Who we share it with

• Other Nexord users: as the features work — your messages are visible to the people you send them to, and your name and profile are visible to your friends and members of shared servers.
• Service providers: Cloudflare (network protection, routing and call relaying) and an email-delivery service for account messages. They process data only to perform the service.
• YouTube/Google: when you use "Watch Together", the YouTube player loads from their servers and is subject to their policies.
• Authorities: where required by law or court order, or to protect the safety of users and the platform.

We do not sell or rent your personal data to anyone.

5. Encryption and security

Connections to the platform are encrypted (HTTPS/TLS), passwords are hashed, and we offer two-factor authentication and session management. Direct messages are not end-to-end encrypted, and no system is perfectly secure, so use a strong password and enable two-factor authentication.

6. Retention and deletion

• We keep your data while your account exists.
• When you delete your account (Settings → My Account) the account data, its messages and relationships are removed, and one-to-one direct-message conversations are deleted for both people. Your messages inside other people's servers are removed with the account.
• Temporary backups may remain for a limited period, and removal of uploaded files linked to the account from storage may be delayed.
• Management may delete any account at any time under the Terms of Service, and such deletion is handled the same way.

7. Your rights and choices

• Access and export: Settings → My Account → "Export my data" (JSON file).
• Correction: edit your profile, email, status and birthday at any time.
• Deletion: Settings → My Account → "Delete my account permanently".
• Devices and security: end device sessions, enable two-factor authentication, turn off notifications.

8. Children

The platform is not directed at children under 13. If we learn of an account belonging to a child under that age we will delete it.

9. Data transfers

Your data may be processed in the country of the platform's operator and across Cloudflare's global network, which can be outside your own country.

10. Changes to this policy

We may update this policy; the last-updated date appears at the top. Continuing to use the platform after a change means you accept it.

11. Contact

For any question about your privacy or a request about your data: [email protected]