Privacy Policy
Last updated: April 2026
Overview and GDPR
This Privacy Policy explains how Nexim (nexim.world) processes personal data when you use our website and services. We are committed to protecting your privacy and to compliance with the EU General Data Protection Regulation (GDPR / DSGVO), including lawful processing, data minimisation, and your statutory rights.
Data we collect
We collect questionnaire responses (including profile, preferences, and relocation-related answers), account data such as your email address when you register or pay, technical data typically collected on websites (for example IP address and browser type), and payment-related metadata from our payment processors. We do not store full payment card numbers on our own servers.
Email Collection
We collect your email address when you request to receive your analysis results. Your email is used only to send your results and, with your consent, relocation-related materials. We do not share your email with third parties. You may unsubscribe at any time.
How we use your data (Supabase and Gemini)
Questionnaire data is processed using the Google Gemini API and stored in Supabase. We use it to generate personalized AI analyses and reports. Text and structured answers are sent to Google's Gemini API for analysis; processing is performed server-side so API keys are not exposed in your browser. We do not sell your personal data.
Legal bases (GDPR)
Where GDPR applies, we may rely on: performance of a contract (providing the service you requested); consent where we ask for it; legitimate interests in operating, securing, and improving our services, balanced against your rights; and compliance with legal obligations.
Retention
We keep assessment and account data only as long as needed to provide the service, meet legal requirements, and resolve disputes. You may request deletion where applicable law allows, subject to statutory retention duties.
Your rights
Depending on applicable law, you may have the right to access, rectify, erase, restrict or object to processing, request data portability, and lodge a complaint with a supervisory authority. Contact us through nexim.world to exercise these rights where applicable.
International transfers
Our service providers (such as Supabase and Google) may process data in the European Economic Area, the United States, or other countries. Where required, we use appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.
Contact
For privacy-related requests, please contact us via the channels listed on nexim.world.