1. Who we are
Neoxra is a service operated by Meridian Global LLC, a New York limited liability company. This policy explains what personal data we collect, why we collect it, and how we use it.
Last updated: 2026-09-28
Neoxra is a service operated by Meridian Global LLC, a New York limited liability company. This policy explains what personal data we collect, why we collect it, and how we use it.
When you create an account, we collect your name, email, and Google account ID (via OAuth). When you subscribe, Stripe collects your payment details on our behalf; we never see or store your full card number. When you use the Service, we log your generation requests, outputs, and basic usage metadata (timestamps, IP, browser type) for product reliability and abuse prevention. When you connect an Instagram professional account, we receive and store your Instagram account ID, username, and an access token issued by Meta. The access token is encrypted at rest and scoped to your organization; we use it solely to publish content you create in Neoxra to your own account, at your explicit instruction, and we delete it immediately when you disconnect the integration.
We use your data to: (a) operate, maintain, and improve the Service; (b) authenticate you and gate paid features; (c) communicate with you about your subscription, product updates, or security issues; (d) generate aggregate, de-identified analytics that inform product decisions; (e) detect and prevent fraud and abuse.
Neoxra requests access to your Google account only for the features you explicitly connect. We request the following OAuth scopes:
• openid, email, profile — used solely to create and authenticate your Neoxra account. We store your email, display name, and Google account ID.
• https://www.googleapis.com/auth/webmasters.readonly — read-only access to Google Search Console. Neoxra reads your verified site list, search query impressions, clicks, average position, and page-level performance, and uses them to show you which pages and keywords to improve. Neoxra never writes to, modifies, or submits anything in Search Console.
• https://www.googleapis.com/auth/analytics.readonly — read-only access to Google Analytics 4. Neoxra reads your property list and aggregate traffic metrics (sessions, users, channel, landing page) to report on the traffic your published content earns. Neoxra never writes to or modifies your GA4 configuration.
• https://www.googleapis.com/auth/youtube.readonly and youtube.upload — used only if you connect a YouTube channel. Neoxra reads your channel and video list, and uploads only the videos you explicitly choose to publish from Neoxra. Neoxra never deletes or modifies existing videos.
Storage and retention: OAuth access and refresh tokens are encrypted at rest, scoped to your organization, and never shared between organizations. Metrics retrieved from Google are cached for up to 90 days to render historical charts, and are deleted when you disconnect the integration. Disconnecting an integration at /account/integrations immediately and permanently deletes the stored tokens.
Sharing: Neoxra does not sell, rent, or transfer Google user data to any third party. Google user data is never sent to our AI model providers (Anthropic, Google Gemini) and is never used to train any model.
Neoxra's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: (a) we use Google user data only to provide or improve user-facing features that are prominent in the Neoxra interface; (b) we do not transfer Google user data to third parties except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger or acquisition; (c) we do not use Google user data for serving advertisements; (d) we do not allow humans to read Google user data unless we have your affirmative consent for a specific message, it is necessary for security purposes such as investigating abuse, to comply with applicable law, or the data is aggregated and de-identified. The Google API Services User Data Policy is available at https://developers.google.com/terms/api-services-user-data-policy.
Generation requests are processed through third-party large language model providers including Anthropic (Claude) and Google (Gemini). Your prompt and any reference material you supply are transmitted to these providers under their respective data-processing terms. We do not allow these providers to train their models on your inputs where opt-out is supported by their API tier.
We use the following sub-processors to operate the Service: Stripe (payments), Anthropic (AI generation), Google LLC — OAuth authentication, Gemini (AI generation), Search Console and Analytics data retrieval, and YouTube publishing. Google user data retrieved via these APIs is handled under Sections 4 and 5 above. Render (backend hosting), Vercel (frontend hosting), and Resend or similar transactional email providers (planned). Each is bound by its own data-processing terms.
Account data is retained for as long as your account is active. Generation history is retained for up to 24 months unless you request earlier deletion. Payment records are retained for 7 years to comply with US tax and accounting requirements.
You may request a copy of your personal data, correction of inaccuracies, or deletion of your account at any time by emailing support@neoxra.com. We will respond within 30 days. Deletion of your account removes your generation history and authentication records; financial records may be retained to meet legal obligations.
We use industry-standard practices to protect your data: HTTPS in transit, encrypted database storage at rest (managed by Render), session tokens with rotation, and least-privilege internal access. No system is perfectly secure; we will notify affected users without undue delay in the event of a breach involving personal data.
Our infrastructure is hosted in the United States. By using the Service from outside the US, you consent to your data being transferred to and processed in the US.
The Service is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe we have, contact us and we will delete it.
We may update this policy from time to time. Material changes will be announced via email or a notice on the Service at least 30 days before taking effect.
Questions about this policy or your data? Email support@neoxra.com. Meridian Global LLC, New York, NY.