Privacy

NEXO Spain is operated by WP Media LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA. For any privacy question, or to exercise the rights described below, write to hola@nexospain.com. The operating company is registered in the United States; the application and its database run on servers in the European Union, in Amsterdam.

For an account: your email address, your language preference, and the case you build up — the questions you ask, the answers given, and the facts you enter in a guided procedure. For a purchase: the transaction record from our payment provider. We never ask for, and you must never enter, your Cl@ve or digital-certificate credentials, banking passwords or one-time codes.

Answers are generated by OpenAI models — currently gpt-4o-mini for text and text-embedding-3-small for search — working against a knowledge base of official sources that a human has verified. Your question text is sent to OpenAI to produce the answer. Your data is not used to train any model. A data-processing agreement with the AI provider is being put in place; until it is signed this is an interim arrangement, disclosed here rather than left unsaid.

The first questions can be asked without signing in, and those are deliberately built to identify nobody. No raw IP address and no cookie token is ever stored. Instead the service keeps a one-way, purpose-separated cryptographic pseudonym, and an IPv6 address is generalised to a /64 block before that pseudonym is derived. Those rows expire by themselves — thirty days for a session, twenty-four hours for the rate-limit bucket — and no conversation is saved.

Saved conversations are kept for thirty days and then deleted. Account and case data are kept while the account exists. You can ask for deletion at any time and it is carried out immediately, with no waiting period. Payment records are kept for as long as tax law requires.

Railway hosts the application and database in the European Union. OpenAI generates answers and search embeddings. Tavily runs the web search behind unverified answers, and receives a redacted query with contact details such as email addresses stripped out before it is sent. Resend delivers sign-in emails. Stripe processes payments and shows its own checkout page, so card details never reach us. Cloudflare measures visitor numbers, and receives the page address, your IP address and your browser's user agent in order to do it. Transfers outside the European Economic Area rely on standard contractual clauses or an adequacy decision.

You may request access to your data, correction, erasure, restriction, portability, and you may object to processing or withdraw consent where consent is the basis for it. Write to hola@nexospain.com. If you are in Spain you may also complain to the Agencia Española de Protección de Datos (aepd.es), and elsewhere in the European Union to your national supervisory authority.

Only strictly necessary cookies are used: one to keep you signed in, one to remember your language, and one that carries the anonymous-question session. There is no advertising cookie. Visitor numbers are measured with Cloudflare Web Analytics, which sets no cookie and stores nothing on your device.

This service is not directed at children under 14 and their data is not knowingly processed.

This policy will change as the product does. The date at the top of this page always shows when it last changed, and registered users are told about material changes.