Privacy Policy

Draft — pending legal review. This page is placeholder content and has not been reviewed by legal counsel. It is not indexed by search engines.

Last updated: September 19, 2026

1. Information We Collect

We collect your email address when you sign up for Nixify. We also collect usage data (OTP requests, verification attempts) and technical data (IP address, user agent) for security and abuse prevention.

2. How We Use Your Data

Your email is used to deliver OTP codes and communicate account-related information. Usage data is used to monitor for abuse, rate-limit requests, and improve our service. We never sell your data.

3. Data Retention

OTP codes become invalid after 10 minutes and are single-use. Stored OTP records are retained according to current operational retention processes. Activity log retention limits are defined per plan (Free, Pro, Max). Automated enforcement of these limits is pending configuration. Contact us for current retention practices.

4. Your Rights

Self-service data management is not currently available. The request/contact process will be published after legal review.

5. Security

All passwords are hashed with bcrypt (cost factor 12). OTP codes are protected with HMAC-SHA256 using a server-side pepper and never stored in plaintext. All traffic is encrypted via HTTPS. Sessions use httpOnly cookies.

6. Contact

Questions about this policy? Contact details are pending legal review and will be published here once finalized.