Privacy Policy.

Nexura Found ("we", "us", "the Studio") operates the nexura-found.com website and the AI interior visualization Studio. This policy applies to visitors, registered members, and paying customers.

The data controller is Nexura Found Studio. You can reach the privacy team at [email protected] for any request described below.

We only collect what is needed to run the Studio and fulfil your orders:

• Account data — first name, last name, email, password hash.
• Order data — number of credits purchased, currency, payment method, invoice details.
• Studio data — reference photos you upload and the rendered results tied to your account.
• Usage data — pages visited, features used, device and browser type, approximate location derived from IP.
• Support data — messages you send to the Studio and their attachments.

Personal data is processed for the following purposes:

• Provide the Studio, generate renders, and store your project history.
• Process credit purchases, issue invoices, and detect fraud.
• Respond to your support requests.
• Improve the product through aggregated analytics.
• Comply with legal obligations such as tax and accounting rules.

Legal bases under GDPR: performance of contract for account and order data, legitimate interest for security and product analytics, consent for optional cookies and marketing, and legal obligation for invoicing.

We never sell personal data. We rely on a small number of trusted vendors that process data on our behalf under strict contracts: cloud hosting, payment processing, transactional email, and product analytics.

Vendors may operate outside your country. When data leaves the EU or UK, we rely on Standard Contractual Clauses or equivalent safeguards.

Account and Studio data are kept while your account is active. Order and invoicing records are kept for the period required by tax law (typically 7–10 years). Backups are rotated on a rolling 30-day window. You can request deletion at any time.

Depending on where you live, you have the right to:

• Access the data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete your account and related data.
• Object to or restrict certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time for consent-based processing.

Contact [email protected] to exercise any of these rights.

We use encryption in transit (TLS), encryption at rest for backups, role-based access controls, and continuous logging. No system is fully immune, but we work to keep incidents rare and to notify affected users promptly when they occur.

We will update this page when our practices change. Material changes are announced by email or through a notice inside the Studio at least 14 days before they take effect.