Privacy Policy

Effective date: May 6, 2026  ·  Last updated: May 6, 2026

Nestly ("we", "our", or "us") is a Chrome extension that helps teams track tasks in real time and generate AI-powered standups. This Privacy Policy explains what data we collect, how we store it, and what we do (and don't do) with it.

1. What data we collect

When you create an account and use Nestly, we collect:

• Account information — your email address, used for authentication.
• Task data — the tasks you create, edit, assign, and complete inside the extension.
• Team membership — the team(s) you belong to and your display name within each team.
• Usage activity — timestamps of task updates, completion events, and standup generations, used to power real-time sync and AI features.
• Payment records — if you subscribe to a paid plan, we store a record of your subscription status. We do not store full card numbers; payment processing is handled by Razorpay.

We do not collect browsing history, page content, keystrokes, or any data from websites you visit.

2. How we store your data

All user data — accounts, tasks, team records, and subscription status — is stored in Supabase, a managed PostgreSQL database service. Data is encrypted in transit (TLS) and at rest. Supabase infrastructure is hosted on AWS in the us-east-1 region.

AI features (standup generation, smart suggestions) send your task descriptions to our backend server at worktray-api.vercel.app, which proxies requests to DeepSeek's API. Your task data is used solely to generate the AI response and is not stored by our server or by DeepSeek beyond the duration of the request.

3. How we use your data

• To provide real-time task syncing across your team.
• To authenticate you and enforce your subscription plan.
• To generate AI-powered standup summaries and task suggestions.
• To send in-extension notifications about task updates and handoffs.

We do not sell your data to advertisers or any third parties. We do not use your data to train AI models.

4. Third-party services

• Supabase — database and authentication (Supabase Privacy Policy)
• Razorpay — payment processing (Razorpay Privacy Policy)
• DeepSeek — AI inference for standup and suggestion features (DeepSeek Privacy Policy)
• Vercel — backend server hosting (Vercel Privacy Policy)

5. Data retention

We retain your data for as long as your account is active. If you delete your account, your personal data and tasks are permanently deleted from our database within 30 days. Anonymised aggregate analytics (e.g. total active teams) may be retained indefinitely.

6. Your rights

You may at any time:

• Request a copy of the data we hold about you.
• Ask us to correct inaccurate data.
• Request deletion of your account and all associated data.

To exercise any of these rights, email us at nestlyq.ai@gmail.com.

7. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. Continued use of Nestly after any changes constitutes your acceptance of the updated policy.