Your data,
plainly explained.

1. Scope and responsibility

NxtAtlas is an independent team and studio founded and operated by Arsen Shahverdyan (nxt_am). NxtAtlas AI is its first product. This policy covers the NxtAtlas websites, NxtAtlas accounts, NxtAtlas AI, the iPhone and Mac applications, and @NxtAtlasAI_bot.

NxtAtlas determines why and how personal data is processed for these services. Questions or requests can be sent to [email protected].

2. Data we process

Account and sign-in data

• Your name, email address, avatar, provider identifier and verified-email status when you sign in with Google or GitHub.
• Passkey public credentials, device type, backup state and last-used time. NxtAtlas never receives the private passkey held by your device.
• Session identifiers stored as hashes, sign-in method, IP address, browser or app information, security events and access-grant status.

Content and product activity

• Messages, conversations, uploaded files, selected models, custom persona, memories you enable, feedback and usage totals.
• Prompts and results for images, video, music, documents and games, plus queue and delivery metadata needed to complete those jobs.
• Audio, images or screen content you choose to send to live voice or vision features. Live media may be transmitted in real time to the selected provider; the service does not use it for advertising.
• Telegram user and chat identifiers, messages sent to the bot, language choice and account-link state when you connect Telegram.

Website and device data

NxtAtlas receives normal request data such as IP address, user agent, requested URL, timestamps, errors and performance signals. Cloudflare Turnstile also processes browser and network signals when you complete the human check on the login page.

3. How and why we use data

• To create and secure one NxtAtlas account, authenticate you and keep sessions in sync across devices.
• To provide the feature you requested, preserve conversation history, deliver generated files and remember preferences you choose.
• To enforce invite-only access, product tiers, rate limits and abuse controls.
• To diagnose failures, measure reliability, prevent fraud and protect NxtAtlas, its users and providers.
• To send transactional messages such as access, security or completion notices when that feature is enabled.

Depending on the context and applicable law, processing is based on providing the service you request, your consent for optional features, compliance with law, and NxtAtlas's legitimate need to keep a private service secure and reliable.

4. Who receives data

NxtAtlas sends only the data needed for a feature to the provider that performs it. Depending on what you use, recipients may include:

• Third-party AI providers for selected AI, generation, transcription or live voice features. Which provider handles a given request depends on the model you choose.
• Cloudflare for DNS, network delivery, security, Turnstile and live voice infrastructure.
• Google and GitHub when you choose their sign-in method.
• Telegram when you link or use the bot.
• Backblaze and Resend for generated-file storage and transactional email. Queues run on NxtAtlas’s own server and involve no third party.

Providers may operate in other countries and process data under their own terms and privacy policies. NxtAtlas may also disclose information where required by law, to protect rights or safety, or as part of a reorganisation with appropriate safeguards.

5. Retention

Account data is kept while your account exists. Conversations, memories and generated content remain until you remove them or ask NxtAtlas to do so, unless a shorter product limit applies. Temporary challenges and queue records expire automatically.

Security events, operational logs and backups can remain for a limited additional period so incidents can be investigated and the service recovered. Data is deleted or anonymised when it is no longer needed, unless law requires it to be kept.

6. Your choices and rights

• You can sign out one device, every device of the same kind, or every NxtAtlas session and Telegram link.
• You can disable optional memories, clear local app data, remove passkeys and unlink Telegram from the product controls.
• You may ask to access, correct, export, restrict or delete personal data, and may withdraw consent for optional processing.
• You may complain to the competent data-protection authority, including Armenia's Personal Data Protection Agency where applicable.

Send a request from the email connected to your account to [email protected]. NxtAtlas may ask for enough information to verify that the account is yours.

7. Security and cookies

NxtAtlas uses encrypted transport, hashed session records, signed tokens, passkeys, access controls, rate limits, service isolation and backups. No online service can promise absolute security, so suspected issues should be reported promptly.

Strictly necessary cookies keep your account signed in, protect OAuth flows and remember a short-lived successful Turnstile human check. The applications and web console also use local storage for settings, cached conversations and device state. NxtAtlas does not place advertising cookies.

8. Changes to this policy

The policy may change as NxtAtlas adds products, providers or legal requirements. The effective date above will change, and material changes will be announced in the service where practical.

9. Contact

NxtAtlas
Yerevan, Armenia
[email protected]

For the rules governing use of NxtAtlas products, read the Terms of Use.