NexorAIQ Privacy Policy

1. Information We Collect

We process two primary categories of information: Customer Account Data (contact information, company details, billing info processed securely) and End-User Search Data (product titles, descriptions, catalog structures, session identifiers, click event metadata, and queries).

We do not collect sensitive personal identifying information (SPII) from end shoppers on client storefronts. Search query parameters are sanitized to remove any accidental personal identifiers before vector indexing.

2. How We Use Information

We use the information collected solely to provide, secure, and improve our Search SaaS platform. Specifically, we process data to compile merchandising insights, optimize AI semantic models, suggest synonyms, authenticate API tokens, and prevent denial-of-service (DoS) attacks.

Your store search data is strictly used to serve your customer queries and train model weights exclusive to your tenant environment. We do not sell customer data or share search insights across competing merchants.

3. Data Storage & Tenant Isolation

All search indexes are strictly isolated per tenant using unique storeViewId and tenant keys. Data is encrypted in transit using TLS 1.3 and at rest using AES-256 standards.

Primary data residency deployment regions include North America (us-east-1), Europe (eu-west-1), and Asia-Pacific (ap-south-1), ensuring low network latency and local regulatory compliance.

4. Integrations & Sub-Processors

We maintain data protection agreements (DPAs) with each verified sub-processor ensuring robust security compliance, including cloud hosting infrastructure providers, billing processors, and edge network providers.

5. Security Safeguards

NexorAIQ employs enterprise-grade security protocols. Our security posture includes continuous vulnerability monitoring, automated threat protection, role-based access control (RBAC), and strict data hygiene standards. Learn more on our Security Hub.

6. Data Retention & Deletion

We retain account data and catalog indexes as long as your subscription is active. Upon account cancellation, all associated search indices and product data are completely purged and deleted from production servers within 30 days.

7. Global Privacy Rights (GDPR & CCPA)

We comply with major international privacy frameworks, including the EU General Data Protection Regulation (GDPR), UK GDPR, and California Consumer Privacy Act (CCPA). You can request access, correction, or deletion of your personal data by emailing [email protected].

8. Updates to this Policy

We may update this Privacy Policy periodically to reflect changes in legal or regulatory compliance. Any revisions will be published on this page with an updated "Effective Date".