Trust
Security
What we do to protect your account and your data, in plain words. We only list things that are true today. We do not claim any security certification.
Your API keys
We show a new API key once, when you create it. We store only a one-way hash of it (SHA-256), a short prefix and your label, so we cannot read your key back and nobody who sees our database can use it. You can revoke a key in the dashboard at any time; a revoked key stops working straight away.
Your own AI keys
If you connect your own AI key, we store it encrypted (AES-256-GCM). The dashboard shows only its last 4 characters and never shows the key again. The facts you add to knowledge checks are also encrypted at rest.
What we store
For each check we keep the result, the rules that failed, the rules used, a fingerprint of the reply and the first 60 characters of it, for the history period of your plan. We do not keep the full reply. The complete list is on our Privacy Policy.
Our AI provider
Knowledge checks that use our AI run on Ollama Cloud. Ollama states that prompt and response data is never logged or used for training (source: ollama.com/cloud). If you connect your own AI key, your AI provider’s terms apply to that data.
Hard monthly caps
Every plan has a hard monthly limit on checks and a per-second request limit. When the limit is reached, further checks are refused until the next month or until you upgrade. You are never charged extra for going over.
Payments
Payments are handled by Stripe. Your card details go straight to Stripe and we never see or store card numbers.
Your control
You can download all of your data (profile, plan, usage, rule sets, key details and check history) from your account settings, and you can delete your account there too. Deleting your account cancels your subscription and removes your data as described in the Privacy Policy. Our website and API are served over HTTPS only.
Backups
We take backups of our database and test that we can restore them.
Report a problem
If you think you found a security problem, email support@nexxtool.ai. Please include what you saw and how to repeat it. For current service health, see the status page.