Legal

Privacy Policy

Plain language. What we collect, why we collect it, and what you can do about it.

What we collect

When you register, we store your username, display name, email address, and a hashed version of your password. Your email is used only for account access and transactional messages — password resets, email verification. It is never shared with third parties for marketing.

Messages you send in text channels and files you upload are stored on our servers so that other members of the same channel can read them. Direct messages between friends are end-to-end encrypted — we store the ciphertext, but we cannot read the content.

When you join or leave a voice or video channel, we store a timestamp and channel reference for presence and stability purposes. Voice and video audio is routed through LiveKit infrastructure and is not recorded by Nexkord unless a community owner explicitly enables live streaming, which is opt-in.

We store community memberships, roles, and presence state (online, idle, offline) as necessary for the platform to function.

What we do not collect

We do not ask for your real name, date of birth, phone number, location, or any government-issued identification. We do not require you to submit a photo of yourself for any purpose.

We use Microsoft Application Insights to collect anonymised usage telemetry — things like feature usage patterns, error rates, and performance metrics. This data is used to improve the platform. No personally identifiable information is attached to these events. You can opt out of this telemetry at any time by declining analytics in the cookie consent settings. We do not run advertising networks, sell your data to third parties, or build behavioral profiles for targeting purposes.

End-to-end encrypted direct messages

Direct messages are encrypted on your device before being sent. The server receives and stores only the encrypted ciphertext. Only you and the recipient hold the keys needed to decrypt the content.

If you choose to enable the optional key backup feature, your encryption keys are encrypted client-side before being sent to our servers. We store the encrypted blob only. We do not have access to your private keys.

Third-party services

Voice and video channels run on self-hosted LiveKit infrastructure operated by Nexkord. Media is routed through our own servers and is not shared with any third party. Media is not recorded unless a community owner explicitly enables live streaming.

Transactional email (account verification, password reset) is sent through an email delivery provider. Only your email address and the content of the transactional email are shared for this purpose.

Anonymised usage telemetry is sent to Microsoft Application Insights. No personally identifiable data is included in these events.

No other third-party services have access to your data.

Data retention

Your account data is retained for as long as your account exists. Messages and files you have sent are retained until you or a community administrator deletes them.

When you delete your account, your profile, email, and direct message keys are removed. Community messages may remain as deleted-user content depending on community settings.

Your rights

You have the right to access a copy of the data we hold about you. You can request a data export from your account settings.

You have the right to delete your account and the personal data associated with it. An account erasure request can be submitted from your account settings. We process erasure requests without requiring justification.

Under GDPR and equivalent legislation, you also have the right to correct inaccurate data, restrict processing, and object to processing. For any of these requests, contact us at support@nexkord.com.

Cookies and local storage

The web app uses local storage and session tokens to keep you signed in. No tracking cookies are set. No cookies are shared with advertising networks or analytics providers.

When you first open the app, you will be shown a cookie consent prompt. Accepting analytics allows Application Insights telemetry to run. Declining it disables telemetry entirely. You can change your preference at any time from the app settings.

Changes to this policy

If we make material changes to this policy, we will post a notice in the app and update the date below. Continued use of the platform after a policy change constitutes acceptance of the updated terms.

Last updated: March 2026.

Contact

Questions or requests related to this policy can be sent to support@nexkord.com.