Privacy

How Nektr handles your data, and the data your website visitors give you.

What we store about you

• Account: your email address, plus your display name and avatar if you use Google sign-in.
• Your projects: pages, content, uploaded images, brand kits, version history, and the conversation you have with the AI while building.
• Billing: your Stripe customer reference, current plan, and renewal date. Card details are handled entirely by Stripe and never reach our servers.
• Usage: your remaining prompt allowance and when it next resets.

What we store for your visitors

When someone submits a contact form or joins a mailing list on a site you publish, we store what they typed, the address they gave, the page they came from, their browser user-agent, and a one-way hash derived from their IP address (used only to prevent abuse; we don't keep the address itself). That data is yours. We hold it on your behalf so you can read and export it.

This makes you the data controller for your visitors' information. If your business is in the UK or EU, your own privacy notice needs to cover what you collect through your site and why.

AI and your content

• What you type into the builder, along with your site's current structure, is sent to Anthropic to generate and edit pages.
• Your content is not used to train AI models, by us or by Anthropic.
• If you paste a URL as a design reference, we capture a screenshot of that page through Browserless.

What we never do

• Sell or rent your data, or your visitors'.
• Put advertising or third-party tracking on the sites you publish.
• Read your form submissions for any purpose other than delivering them to you.

Who processes data for us

• Supabase: database, authentication, and file storage
• Cloudflare: hosting and delivery of published sites
• Render: hosting for the Nektr application itself
• Anthropic: the AI that generates and edits your pages
• Stripe: payments and subscription billing
• Resend: transactional email (sign-in links, enquiry notifications, invitations, address confirmations)
• Upstash: short-lived state for live editing
• PostHog: product usage analytics (which features are used, not the content of your sites)
• Browserless: screenshots of design-reference URLs you provide

Keeping and deleting data

Delete a project and its pages, versions, content, and form submissions go with it. Ask us to close your account and we'll delete everything associated with it. Backups may retain copies for a short period afterwards.

Your rights

If you're in the UK or EU you can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Email us and we'll respond within 30 days.

Cookies

We use cookies to keep you signed in, and nothing else in your browser. Product analytics runs on our servers, not as a tracker in your browser. We never add analytics, advertising, or tracking of any kind to the sites you publish.

Contact

Questions about any of this: admin@silexdev.com.