Who handles your information
Oliver Song operates Nexary as an individual in Chicago, Illinois, and is responsible for the personal information described here. For privacy questions or requests, email nexusystems@gmail.com.
This notice covers the Nexary website, learning beta and limited hiring pilot. It does not cover a separate employer, a website you visit through a link, or the independent privacy practices of your browser or sign-in provider.
Beta accounts are currently available only to United States residents aged 16 or older. International account access is deferred. Users under 18 must have parent or guardian permission.
What we collect
We collect information you provide and technical information needed to run the service:
- Account details: your name, email, verification status, password hash, account dates and any optional profile details you choose to add. We do not store your password in readable form.
- Learning activity: your onboarding choices, progress, quiz answers and results, notes, saved quiz and practice drafts, practice settings and conversation text.
- Support and feedback: messages you send, any context you attach, the page and browser information, and your reply address if you allow a reply. Hiring safety reports include the reporting and reported account identifiers, application identifier, reason, date and notification status.
- Hiring information: optional shared rep profiles, self-described work preferences, business profiles, role listings, applications, application notes and stages, messages, blocks and interview details. Meeting links and scheduling details are saved; Nexary does not host or record interview calls.
- Security information: session identifiers, IP address, browser information and operational logs. If you use an available external sign-in provider, we receive the account details needed to link your sign-in.
- A record that you confirmed United States residency, the learning age requirement and any required parent or guardian permission, and accepted the terms, including the version and date. Hiring has a separate declaration that you are 18 or older. These are declarations; we do not ask for your full birth date or identity documents.
Why we use it
We use account and learning information to provide the service you request: signing you in, saving your work, showing feedback, and managing your account.
When you are signed in, saved drafts sync to your account database and a device cache. Not every unfinished field is saved; some text stays only in the current screen until you submit it.
We use limited security, support and aggregate learning information to prevent abuse, diagnose problems, answer requests and improve the beta. We also use information to meet legal obligations when they apply.
Optional permissions, such as browser microphone access, are separate from accepting the terms. You can revoke microphone access in your browser. We do not use your learning activity for advertising profiles.
Who can see your work
Your notes, answers and practice history are not public profiles and are not automatically sent to businesses. The operator may access stored information to provide support, maintain security or investigate a problem. The founder dashboard also shows aggregate course activity.
Hiring is a limited pilot for adults aged 18 or older and businesses manually approved for access. Sample screens are labelled. When you turn profile sharing on, approved businesses can see your chosen profile fields, best applied quiz score, applied quiz attempt count and practice attempt total. These are self-directed course records, not verified job ability. Raw answers, notes and practice replies are not included.
You can turn profile sharing off in the rep workspace, including through the hiring-access screen. This hides your profile and course totals from the directory. It does not recall messages, application notes or screenshots already received by participants. Applications retain a copy of the role and business details at application time. Applications, messages and interview details are visible to their participants and the operator for support or safety. Businesses decide independently whom to interview or hire.
Please do not enter customer lists, confidential employer information, identity documents, payment information or sensitive personal details in practice replies or feedback. Use information you have permission to share.
Service providers
Nexary uses Railway for hosting and storage, Cloudflare for delivery and security, and Resend for account emails and configured feedback and safety-report notifications. These providers process information needed for their services. Privacy correspondence sent to our contact address is handled through Gmail.
When product analytics is enabled, PostHog US receives page categories, static course identifiers and events such as account verification, onboarding completion and submitted checks. A random identifier connects these events. Names, emails, answers, notes, practice text, full URLs and IP addresses are excluded from these product events. Acquisition source is reduced to a channel such as LinkedIn or email; raw campaign strings and referrer URLs are not stored. This helps us find where people leave the learning flow. See Cookies for the browser opt-out.
External sign-in providers process information under their own policies when you choose them. Browser dictation is optional: your browser or its provider may process microphone audio, while Nexary receives and saves the resulting text. Nexary does not need microphone permission for typed practice.
The paid AI voice-call service is not active in this beta. A separate optional text practice coach is being prepared. Where enabled, it asks for agreement before sending your selected role, offer details and practice conversation to OpenAI to generate buyer replies and feedback. These attempts and your feedback rating are saved privately to your account, included in account export and removed from the active database when you delete them or your account. Do not enter confidential or sensitive information. Requests use the provider’s store:false setting; this does not promise that the provider keeps no operational or abuse-monitoring records.
Optional product events for the text coach record starts, saved replies, reviews, retries and whether feedback was useful. They use categorical role, skill and difficulty values and a reply count, not your words, offer details or feedback quotes. The same analytics opt-out applies, and practice pages are excluded from session replay.
We do not sell personal information or share it for cross-context behavioural advertising. We may disclose information where required by law or necessary to protect people, investigate abuse or defend legal rights.
Where information is processed
This is a United States-only account beta. Our service providers may still process information in the United States and other countries as part of hosting, security and email delivery.
Limiting account eligibility to United States residents does not mean every provider stores data only in the United States. Contact nexusystems@gmail.com with questions about processing locations. We will review requirements and update the notices before opening accounts internationally.
Keeping and deleting information
The local analytics delivery queue is kept for up to 30 days. PostHog may retain product events for up to one year. Account deletion removes the local analytics link and queue; contact us before deleting your account if you also want previously delivered analytics events removed, so we can locate them using the random identifier.
We keep your account and saved learning work while your account is active so you can return to it. Session cookies can last up to 30 days; the short session cache lasts up to five minutes. Verification codes expire after ten minutes. The Cookies notice explains device storage.
You can delete your account in Settings. This removes the account, its sessions, saved learning state, linked feedback, shared hiring profile, owned roles and applications or conversations involving it from the active database. Deleting either participant removes the associated application conversation for both. Export anything you need first. Limited safety reports are handled separately as described below. Any usage ledger is kept without its account link. Copies already delivered by email, operational logs and restricted backups may remain separately until removed or replaced; deletion is not an immediate erasure of every backup or email copy.
Safety reports are kept separately from account and conversation deletion so a reported person cannot erase a complaint by deleting an account. They contain the submitted reason and account/application identifiers, not a copied conversation. Reports older than 90 days are removed on the next database access. Report notifications sent by email contain a report identifier only, without report text or account details; email and backup copies have separate retention. Contact us about a report or deletion request.
There is not yet a fixed automatic deletion schedule for all logs, feedback or backups. If you request deletion, we review these remaining copies and any limited information needed for security, a legal obligation or a dispute, and explain any lawful exception. We do not treat indefinite retention as permission to reuse deleted account data.
Your choices and rights
Use Settings to edit your profile, manage sessions, export available account data or delete your account. You can also email nexusystems@gmail.com for a copy, correction or deletion, or to ask about other privacy rights available under applicable law.
We may ask for proportionate information to verify that a request concerns your account. Do not email a password or verification code. We will follow applicable response deadlines and explain any lawful exception.
Your state may provide additional rights depending on the law and whether it applies to Nexary. This notice does not claim certification under any state privacy law. You can contact the relevant regulator about a concern, and exercising an applicable privacy right does not result in a penalty.
Users aged 16 and 17
Nexary beta accounts are for United States residents aged 16 or older. If you are 16 or 17, obtain parent or guardian permission before creating or continuing an account. A declaration is not verified parental consent. Learning access does not establish that you can enter an employment or commercial contract.
Learning work stays private by default. We do not sell young users’ data, use advertising profiles or require a public profile. If you believe a person under 16 has an account, contact us so we can investigate and remove it where appropriate.
Changes and contact
We will update this notice when our practices change and provide notice of material changes before they take effect where required. Questions, security reports and privacy requests can be sent to nexusystems@gmail.com.