Privacy Policy

NexPane is a Windows desktop application ("we", "us", "our" refers to NexPane and its developer). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

We are committed to transparency and minimal data collection. NexPane is a local-first application — your files, your terminal sessions, and your workflow stay on your machine.

1. Information the Application Collects

1.1 No Telemetry or Tracking

NexPane does not collect usage analytics, crash reports, or behavioral data of any kind. There are no tracking pixels, no fingerprinting, and no phone-home mechanisms. The application does not transmit any data about how you use it.

1.2 Local Log Files

NexPane creates diagnostic log files stored locally on your computer at %LOCALAPPDATA%\NexPane\logs\. These logs may contain:

• Operating system version
• RAM and CPU information
• WebView2 runtime version
• Application error messages and diagnostic information

Log files are retained for a maximum of 20 sessions and are automatically rotated. These logs are never transmitted to us or any third party. They exist solely for your own troubleshooting purposes.

1.3 License Activation

When you activate your license, the application sends the following information to our license server:

• Your license key
• A machine identifier (hardware-derived ID unique to your device)
• Your device name

Our server also records your IP address at the time of activation. This data is used solely to manage license activations and enforce the 3-device limit per license.

1.4 Optional AI Integrations

NexPane supports optional AI integrations with Anthropic Claude, OpenAI, and GitHub Copilot. If you choose to use these features:

• You provide your own API keys, which are stored locally on your device in Windows Credential Manager, encrypted via the Windows Data Protection API (DPAPI).
• API calls are made directly from your machine to the respective AI provider. Your prompts and responses travel directly between your device and the provider.
• NexPane servers never receive, store, or have access to your API keys or the content of your AI interactions.

Your use of these AI services is governed by the respective provider's terms and privacy policies.

2. Information the Website and Services Collect

2.1 Purchase Information

When you purchase NexPane, your transaction is processed by Paddle, which acts as the Merchant of Record. Paddle collects and processes your payment information (including name, email address, billing address, and payment method). We do not directly collect or store your payment card details.

Paddle shares your name and email address with us for the purpose of license delivery and customer support. For details on how Paddle handles your data, see Paddle's Privacy Policy.

2.2 License Data

Our license management system stores the following information:

• Customer email address and name (as provided by Paddle)
• License key
• Machine identifiers and device names for activated devices
• IP addresses recorded at activation
• Activation and deactivation timestamps

This data is stored in a Cloudflare D1 database and is used exclusively for license management.

2.3 Email Communications

License delivery emails are sent through Resend, an email delivery service. Your email address is shared with Resend solely for the purpose of delivering your license key. We do not send marketing emails.

2.4 Website Analytics

Our website is hosted behind Cloudflare, which provides anonymized, privacy-focused analytics. These analytics do not use cookies, do not track individual visitors, and do not collect personally identifiable information.

3. How We Use Your Information

We use the information we collect for the following purposes:

• License management: To issue, activate, deactivate, and validate your software license.
• License delivery: To send you your license key after purchase.
• Customer support: To assist you with technical issues or license questions.
• Fraud prevention: To detect and prevent license abuse.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Third-Party Services

We use the following third-party services in the operation of NexPane and its website:

If you opt to use AI integrations, your interactions are sent directly to the respective provider (Anthropic, OpenAI, or GitHub) from your device. We are not a party to those interactions.

5. Data Storage and Security

License and customer data is stored in a Cloudflare D1 database. Cloudflare provides enterprise-grade infrastructure security, including encryption at rest and in transit.

On your local device, any sensitive credentials (such as AI API keys) are stored in Windows Credential Manager using DPAPI encryption, which ties the encrypted data to your Windows user account.

While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Your Rights

You have the right to:

• Access your data: Request a copy of the personal information we hold about you.
• Delete your data: Request deletion of your personal information from our systems. Note that this will deactivate your license.
• Export your data: Request your data in a portable format.
• Correct your data: Request correction of inaccurate information.

To exercise any of these rights, contact us at support@nexpane.app. We will respond to your request within 30 days.

7. Cookies

The NexPane website does not use cookies for analytics or tracking. During the Paddle checkout process, Paddle may set cookies necessary for payment processing and fraud prevention. These are governed by Paddle's cookie policy.

8. Children's Privacy

NexPane is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at support@nexpane.app and we will promptly delete it.

9. Data Retention

We retain your license and customer data for as long as your license is active. If you request deletion of your data, we will remove it from our systems within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes).

Local log files on your device are automatically limited to the most recent 20 sessions. You may delete these files at any time.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of NexPane after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

NexPane
support@nexpane.app