Privacy Policy

1. Who we are

NexaTools is a free browser-based tool platform at nexatools.in. We build tools for developers, students, and anyone who needs a quick, reliable utility. When we say "we" or "us" in this document, we mean the NexaTools team. You can contact us at support@nexatools.in.

2. Your files and inputs

This is the most important part so we'll keep it simple:

• Files you open stay local: Whether you're compressing an image, converting a video, or editing a PDF those files live only in your browser's memory. They disappear when you close or refresh the tab.
• Text inputs are never logged: Anything you type into our JSON formatter, markdown editor, or other text utility tools never reaches our servers.
• Calculations happen on your device: Tools like our calculators, converters, and counters do their math in your browser's JavaScript no data is sent anywhere.
• URL Shortener Server Storage: When you shorten a link, the long URL and custom slug you submit are stored securely in our backend server database to allow other users to resolve and redirect to them.
• Microsoft Store Link Generation: When you query a Product ID, the request is routed through our backend server API to communicate with Microsoft Store services. No query data or inputs are permanently stored.
• Secure Share E2EE File Uploads: When you use Secure Share, your file is encrypted locally in your browser using AES-GCM-256 before being uploaded. The decryption key is kept strictly in the URL hash fragment (#key=...) and is never sent to the server. The encrypted file is stored in our secure cloud storage and is permanently deleted after 7 days. Email addresses submitted for OTP verification are processed to prevent abuse and are not stored for marketing purposes.

2.1 Google Drive API & User Data Policy (NexaVault)

When you use our NexaVault tool (nexatools.in/utility-tools/nexavault) to store or backup zero-knowledge encrypted files directly in your personal cloud storage, we request access to the Google Drive API. Our handling of your Google data is governed by the following strict privacy guarantees:

• Google Scopes Requested: NexaVault requests the restricted https://www.googleapis.com/auth/drive.file scope. This grant provides access only to specific files created, uploaded, or explicitly opened by NexaVault. NexaTools has no access to your broader Google Drive, your personal folders, or any documents not created by this app.
• How Data is Used: We use the Google Drive API solely to upload client-side encrypted blobs (.nexa files) directly to your personal Google Drive account upon your explicit request, and to list/download those specific encrypted files back into your browser when you choose to decrypt them.
• Client-Side Zero-Knowledge Encryption: All encryption and decryption operations occur 100% locally in your web browser using the Web Crypto API (AES-256-GCM). Encryption keys are generated locally, provided to you, and are never sent to Google, NexaTools, or any remote server. NexaTools has zero knowledge of your encryption keys or the contents of your encrypted files.
• Token Handling & Security: Google OAuth 2.0 access tokens are held exclusively in volatile browser memory for the duration of your active session. They are transmitted directly and securely to Google's API endpoints via encrypted HTTPS connections. NexaTools never stores, logs, or transmits your Google OAuth tokens or profile information to our servers.
• No Sharing, Selling, or Third-Party Disclosure: We do not sell, rent, disclose, or share Google user data or files with third parties. Google user data is never used for advertising, marketing, or to train artificial intelligence (AI) or machine learning (ML) models.
• Data Retention & Revocation: You may revoke NexaTools's access to your Google Drive at any time through your Google Account Security Permissions. You retain total ownership of all encrypted files in your Drive and may delete them directly from Google Drive at any time.

3. What we do collect

We collect a small amount of non-personal information to keep the site working well:

3.1 Visitor analytics

We use Cloudflare Web Analytics and Google Analytics (GA4) to understand site traffic things like which pages were visited, how long sessions last, what devices people use, and which countries visitors come from. None of this is tied to you personally. We use it to improve the site and decide what to build next. You can opt out of Google Analytics using the Google Analytics Opt-out Add-on.

3.2 Browser storage

We save a few preferences in your browser's localStorage like whether you prefer dark or light mode, or whether you've already seen the cookie notice. This data never leaves your device and you can clear it any time through your browser settings.

4. Cookies we use

The following cookies may be set when you visit NexaTools:

• Cloudflare cookies (__cfduid / Turnstile): Used to identify trusted web traffic, mitigate spam, and protect the site from automated attacks. This does not store personal identifiable information.
• Consent cookie (nt_cookie_consent): Stored in your browser's localStorage to remember your cookie preferences. This is a first-party preference that never leaves your device.
• Google AdSense & DoubleClick Cookies: Google, as a third-party vendor, uses cookies to serve ads on NexaTools. Google's use of advertising cookies enables it and its partners to serve ads to our visitors based on their visit to NexaTools and/or other sites on the Internet. You may opt out of personalized advertising at any time by visiting Google Ads Settings or through www.aboutads.info.

5. Third-party services we use

• Google AdSense: We partner with Google AdSense to serve contextual and interest-based advertisements to help support our free tools. Google may use web beacons and cookies to gather non-personally identifiable usage statistics during ad delivery.
• Google Analytics: Shows us aggregated, anonymous site usage data. You can opt out using the Google Analytics Opt-out Add-on.
• Cloudflare: Our CDN and security layer. Cloudflare sees request metadata (including IP addresses) to protect the site from attacks and speed up page loads. See the Cloudflare Privacy Policy.

6. Your privacy rights

Depending on your location, you may have the following rights:

• Right to know: What personal data is collected about you and how it is used.
• Right to delete: Request deletion of your personal data.
• Right to opt out: Opt out of the sale or sharing of your personal information for targeted advertising.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

Because NexaTools processes most data locally in your browser, we typically do not hold personal data to delete. For analytics and advertising data, you can manage your preferences through Google Ad Settings and your browser's cookie controls.

7. California residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you additional rights. We do not sell your personal information. Third-party advertising partners may use cookies to serve personalized ads, which may be considered a "sharing" of data under California law. You can opt out of this by visiting Google Ads Settings or using the Network Advertising Initiative opt-out page.

8. European visitors (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on your consent to serve personalized advertising cookies. When you first visit NexaTools, you are presented with a cookie consent banner. You may accept or decline personalized advertising. Non-personalized ads will still be shown if you decline personalized cookies, but they will be less relevant to your interests.

9. Security

Since we never receive your files or local inputs, a breach on our end can't expose your documents or private data. For backend operations (such as traffic logs, analytics, and shortened URL databases), we employ standard security practices and host services on secure cloud infrastructure. We do not maintain any database of personal user profiles or user-uploaded files.

10. Children

NexaTools is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has sent us personal information, please contact us at support@nexatools.in and we will address it promptly.

11. Policy updates

We may update this page as the site grows or rules change. The "last updated" date at the top will reflect any changes. Continuing to use NexaTools after a change means you're okay with the updated policy.

12. Get in touch

Privacy questions? Email us at support@nexatools.in. We read every message personally and won't share your contact details with anyone.