Privacy Policy

Effective 5 November 2026

This Privacy Policy explains how Nexology Sdn. Bhd. (“Nexology”, “we”, “us”) collects, uses and protects personal data when you use Nexy, including nexy.click, app.nexy.click and short links on nexy.be (together, the “Service”). We process personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Information we collect

Account information

When you sign up we collect your full name, email address and password. Your password is handled by our authentication provider and stored only in hashed form; we never see it.

Content you create

For each link you create we store its title, destination URL, the short code we assign, whether you asked for a QR code, and when it was created and updated. We also keep an activity history of actions on your links (created, updated, deleted, QR code downloaded) along with the name or email of the account that took them.

People who open short links

When someone opens a nexy.be link, we record information about that visit so the link's owner can see their analytics:

the date and time of the visit
the browser's user agent, and the device type, browser and operating system we derive from it
the referring page, if the browser sends one
approximate location (country, region and city), determined from the IP address by our content delivery network
the IP address with its last part removed (for example, 203.0.113.0 instead of 203.0.113.42), which we use to count unique visitors
whether the request came from an automated source, such as a chat app building a link preview or a search engine crawler

We do not set cookies on people who open short links, and we do not combine visits across different links to build profiles of individuals.

Cookies

The Nexy website does not use advertising or third-party analytics cookies. When you sign in, the app uses cookies that are needed to keep you signed in, and one cookie that remembers whether you collapsed the sidebar.

2. How we use information

to provide the Service: creating, redirecting and managing links
to show link owners analytics about visits to their links
to send account emails, such as verification codes and password resets
to keep the Service secure, including detecting abuse, malicious links and automated traffic
to comply with legal obligations

We do not sell personal data, and we do not use it for advertising.

3. Who can see your information

Analytics for a link are visible to the account that owns it. Authorised Nexology Sdn. Bhd. staff may view account data, including links and analytics, when needed for support, security or investigating abuse, and each such access is recorded. We share personal data outside Nexology Sdn. Bhd. only with:

Service providers who process it on our behalf to run the Service. We are hosted on Amazon Web Services, which provides our servers, database, sign-in system, email delivery and content delivery network.
Authorities, when we are required to by law or need to protect the rights, property or safety of Nexology Sdn. Bhd., our users or others.
A successor business, if Nexology Sdn. Bhd. is involved in a merger, acquisition or sale of assets, subject to this policy.

4. Where your data is stored

Your data is stored on Amazon Web Services in the Asia Pacific (Singapore) region. Short-link redirects are served through Amazon's global network, so a visit may be processed at a location near the visitor. By using the Service you consent to your data being transferred to and processed outside Malaysia for these purposes.

5. How long we keep it

We keep account information, links and click data for as long as your account is active.

When you delete your account in Settings, your links stop working straight away and you are signed out. For the next 30 days you can restore your account, with all its links and analytics, by signing in again. After 30 days we permanently delete your account, links, click data and activity history, except where we must keep information to meet a legal obligation.

6. Your rights

Under the PDPA you may:

request access to the personal data we hold about you
ask us to correct data that is inaccurate or incomplete
withdraw your consent to our processing, or ask us to delete your data, which may mean we can no longer provide the Service to you

To make a request, email kcng@nexology.solutions from the address on your account. We will respond within 21 days.

7. If you share Nexy links

If you use Nexy links to reach your own audience, you decide what those links are for and are responsible for telling your audience, where the law requires it, that visits are measured.

8. Security

We protect data with encryption in transit, access controls that limit each account to its own links and analytics, and by shortening IP addresses before storing them. No service is completely secure, so please use a strong, unique password.

9. Children

The Service is not intended for children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. We will change the effective date above, and for significant changes we will let account holders know by email or in the app.

11. Contact us

Nexology Sdn. Bhd. (202301017389 (1511311-V))
Email: kcng@nexology.solutions