Privacy policy

NexaQora is operated by Madhusudan Kallur Purushothaman. For any privacy question, or to ask what data we hold about you, email writetomadhusudan@gmail.com.

Account data: your name, work email address and the organization you belong to.

Content you create: source files and target metadata you upload, mappings, validation results, plans and generated files.

Operational records: sign-in times, the IP address a session was created from, and an audit trail of actions in your organization. The audit trail records identifiers and decisions, not HR record values.

Stored SAP credentials are encrypted per organization, are write-only and are never shown, logged or sent to the browser or to an AI model. We do not store card details. There is no third-party analytics or advertising tracking on this site or in the product.

Source files may contain personal data about your employees. You decide what to upload and you are the controller of that data; we process it only to provide the service. Please use synthetic or masked data in the free demo. Columns that look sensitive (national identifiers, pay, bank and similar) are masked in the interface and excluded from logs, finding samples, rejected-record files and AI prompts.

Language-model help is optional and off unless enabled. When enabled it receives only column statistics and short code-like values from non-sensitive columns; it never receives dates, numbers, names, identifiers or pay data, and your data is not used to train any model.

Data is held on servers we operate, in separate databases and storage for the demo and for production, with each organization’s data isolated at the database level. Email is sent through an email provider we will name here once configured. We do not sell or share your data.

Demo data is deleted 7 days after the 24-hour trial ends. Production data is kept until you ask us to delete it or your agreement ends; automated deletion for production is not implemented yet and is handled on request. Backups are kept for a limited period.

You can ask us to access, correct or delete your account data, and to delete your organization’s data, by emailing us. If you are an employee whose data was uploaded by your employer, please contact your employer first, as they control that data.

We hold no security certification, and some controls (single sign-on, multi-factor authentication, customer-managed keys, automated production retention) are not implemented yet. See the Security page for the current position.