Privacy Policy

This policy explains how Denema Technologies, based in United Republic of Tanzania, processes personal data when you use NuruXplore.

1. Data we collect

• Account and contact data: name, email, country, phone number, password hash, account status, preferences, and acceptance of legal terms.
• Research content: project titles, prompts, proposals, theses, sections, chat messages, research profiles, uploaded papers, datasets, references, supervisor notes, and extracted text.
• Billing data: selected plan, purchase amount, currency, credits, transaction status, Pesapal references, confirmation code, and masked payment-account details. NuruXplore does not store full card or mobile-money credentials.
• Usage and technical data: credit activity, generation status, token and model-usage metadata, feedback, error information, login/activity timestamps, IP address and browser information contained in security/session logs.
• Device storage: essential session/security cookies, an authentication token, and interface preferences such as theme. See our Cookie Notice.

2. How and why we use data

We process data to perform our contract with you by creating your account, generating and editing research documents, maintaining project history, providing exports, allocating credits, and processing payments. We also process limited data for legitimate interests such as security, fraud prevention, troubleshooting, service measurement, and enforcing our terms. We use consent for optional research-tip emails and optional anonymized product-improvement feedback, and you can withdraw those choices in My Account.

We may process or retain information where required to comply with law, respond to lawful requests, resolve payment disputes, or establish and defend legal claims.

3. AI and academic-content processing

NuruXplore sends the instructions and relevant project context needed to fulfil an AI request to configured AI infrastructure. The system may process uploaded or generated content to extract text, build a research profile, generate drafts, edit requested sections, and maintain conversational context. Do not upload personal data about research participants unless you have a lawful basis and have removed unnecessary identifiers.

NuruXplore does not make decisions that produce legal or similarly significant effects about you. AI output is probabilistic and must be reviewed by the user. Optional feedback may be used by authorized personnel to improve NuruXplore prompts only where your account preference permits it or after content has been appropriately de-identified.

4. When data is shared

We disclose only what is reasonably necessary to service providers acting for us, including hosting and storage providers, AI-processing providers, email and support services, and Pesapal for payment processing. Providers may process data under their own legally required notices where they act independently, particularly for payment services.

We may disclose information to professional advisers, regulators, courts, law-enforcement bodies, or another company involved in a lawful merger or acquisition. We do not sell or rent personal data to advertisers.

5. Retention and deletion

We keep account and research data while your account is active and for a reasonable period needed to provide recovery, resolve disputes, prevent abuse, and meet legal obligations. Payment, tax, fraud-prevention, audit, and security records may be retained after account deletion where the law requires or permits it. When retention is no longer necessary, data is deleted, anonymized, or securely isolated.

You can export your data or request deletion in My Account. Deletion requests are reviewed to prevent unauthorized loss and may not remove information we are legally required to retain.

6. Your data-protection rights

Depending on applicable law, you may have rights to be informed, access data, correct inaccurate data, request deletion, restrict or object to processing, obtain portable data, withdraw consent, and complain. NuruXplore provides profile correction, preference controls, data export, and deletion requests in My Account. We may need to verify your identity before completing a request.

7. Security

We use access controls, password hashing, encrypted HTTPS transport, authorization checks, credential separation, payment-status verification, audit records, and operational monitoring. No online system is completely secure; keep your password confidential and notify us promptly if you suspect unauthorized access.

8. International data transfers

NuruXplore is operated from Tanzania but may use infrastructure and service providers in other countries. Where required, we use contractual, organizational, or other lawful safeguards for cross-border processing. Users should ensure their own upload and research activities comply with applicable institutional and national transfer restrictions.

9. Younger users

NuruXplore is intended for university students, researchers, and other users able to enter a binding agreement. A person below the age of legal capacity in their location must use the service only with authorization from a parent, guardian, or institution where required.

10. Contact, changes, and complaints

Questions or rights requests can be sent to support@nuruxplore.com. Tanzania users may also complain to the Personal Data Protection Commission. Users elsewhere may contact their local data-protection authority.

We may update this policy when the service or law changes. Material changes will be communicated through the service or by email where appropriate, and the effective date above will be updated.