What we collect, why, and the one thing we architecturally cannot do: keep your code.
Last updated: August 2026
1. Overview
This Privacy Policy explains what data Nexdge collects, why, how we use it, and your rights over it. We aim for plain English. If something's unclear, email support@nexdge.com.
Nexdge is operated by Mieux Demain Private Limited, Delhi, India. We comply with the General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and India's Digital Personal Data Protection Act, 2023 (DPDP Act).
2. Code You Submit
Code you submit for review is never written to a database. It is loaded into an ephemeral compute process, analysed by our AI specialists in memory, and permanently deleted when the review completes. The review result (findings, score, rewrite) is stored under your account so you can access your history. The original submitted code is not.
Running the review means sending your code to the AI providers listed in section 7, who process it on our behalf. Beyond those providers, we do not share your code with anyone, we never use it to train or evaluate any model of ours, and our team cannot access it after the review completes.
3. Account Data
When you create an account, we collect your email address to authenticate you, send transactional emails (password resets, review notifications if enabled), and communicate service updates. We do not use your email for marketing without your explicit consent, and any marketing email includes a one-click unsubscribe.
4. Usage Data
We collect anonymised usage data (review counts, language distribution, credit usage patterns, feature engagement) to understand how the Service is used and improve it. This does not include your submitted code or review findings in identifiable form.
5. Billing Data
Payments are processed by Dodo Payments, which acts as merchant of record. We receive confirmation of successful payments and your plan status; we do not store card numbers. Billing records (amounts, dates, plan tiers) are retained for 7 years as required by applicable financial regulations.
7. Data Sharing and Sub-processors
We do not sell your personal data or run advertising. We share data only with service providers processing it on our behalf:
- Vercel: application hosting, and cookieless traffic and performance measurement on the public pages only (US)
- Supabase: database and authentication (EU and US servers)
- Anthropic: AI processing of submitted code, business logic review (US)
- DeepSeek: AI processing of submitted code, security, reliability, performance and quality review, rewrites and summaries (China)
- Dodo Payments: payment processing, acting as merchant of record
- Resend: transactional email delivery (US)
- Upstash: rate-limiting infrastructure (US)
Each provider processes data under its own published terms and security commitments, which you can review directly. We are putting data processing agreements in place with each of them; where one is signed, it governs. Where the Service links to third-party sites, their own privacy practices apply, and we're not responsible for them.
8. Data Retention
Review results (findings, scores) are retained for as long as your account is active. Account data is retained for 90 days after account deletion, then permanently purged. Billing records are retained for 7 years. Submitted code is never retained beyond the duration of the review.
9. Security Measures
Submitted code is processed in an ephemeral compute environment and never persisted. Data in transit is encrypted (TLS). Access to production systems and stored account data is restricted to the engineers who need it to operate the Service, and API keys are stored as one-way hashes, never in plaintext. No system is unbreakable. If you discover a vulnerability, email security@nexdge.com.
10. Automated Processing
Review scores and findings are generated by automated AI analysis of the code you submit. This automated processing is applied to your code, not to you as a person. We do not use it to profile you or make automated decisions about your access, pricing, or account status. A human is always reachable at support@nexdge.com if you want context behind a specific finding.
11. Data Breach Notification
If we become aware of a breach affecting your personal data, we will notify affected users without undue delay, and notify the relevant supervisory authorities where legally required, describing the nature of the breach and the steps we're taking in response.
12. Your Rights
Under GDPR, the UK Data Protection Act, and India's DPDP Act, you (as a "data subject" or "Data Principal") have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your account and associated data, object to or restrict certain processing, and receive a portable copy of your data.
To exercise any of these rights, email support@nexdge.com and we respond within 30 days. You can also delete your account directly from Settings in your dashboard, which triggers immediate profile deletion and starts the 90-day purge cycle.
13. Grievance Officer
As required under India's Digital Personal Data Protection Act, 2023, our designated Grievance Officer is:
Anuvrat Singh Mussania, CEO
Mieux Demain Private Limited
Third Floor, Mr. Balraj Singh Lohiya House
House No. 170, Kh No. 393, G/F, L/S.
Vill. Ghitorni, Near 100 Feeta Road
New Delhi 110030, India
support@nexdge.com
Grievances are acknowledged and resolved within the timelines prescribed by applicable law.
14. International Transfers
Our service providers are based in the United States, the EU, and China. Code you submit for review is processed by AI providers in the United States (Anthropic) and China (DeepSeek); the full list is in section 7.
When data is transferred outside India or the EU, we rely on Standard Contractual Clauses (SCCs) or adequacy decisions where applicable. There is no EU adequacy decision for China, so transfers to that provider rest on contractual safeguards rather than adequacy. If your organisation cannot accept processing in China, contact us before submitting code: support@nexdge.com.
15. Children
Nexdge is not intended for users under 16. We do not knowingly collect personal data from anyone under 16. If we become aware that a user under 16 has provided personal data, we will delete it promptly.
16. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date above and, for material changes, notify you by email. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
17. Contact
Privacy questions and rights requests:
Mieux Demain Private Limited
Third Floor, Mr. Balraj Singh Lohiya House
House No. 170, Kh No. 393, G/F, L/S.
Vill. Ghitorni, Near 100 Feeta Road
New Delhi 110030, India
support@nexdge.com
We respond to all privacy requests within 30 days.