Privacy Policy

Nasa9 is an academic writing platform for students and researchers. We built it to be simple and focused, and we try to keep the same attitude when it comes to your data: collect what we need, protect it, never sell it.

This policy covers nasa9.com.

What we collect

When you sign up we store your email address and your name. If you use Google to sign in, we also get your profile picture and a confirmation that Google has verified your email. That is it for account data.

The documents and projects you create inside the app are stored so we can show them back to you. We do not read them, train models on them, or share them.

We keep basic server logs (IP address, which page was requested, timestamp) for security and debugging. These are not linked to your account and are deleted after 30 days.

We use a session cookie to keep you signed in. To understand how the site is used, public pages and your account pages load Google Analytics (visits and clicks), Microsoft Clarity (how pages are scrolled and tapped) and Whop's pixel (whether a visit led to a payment). None of them runs on the pages where you write: your thesis is never measured or recorded.

How we use it

We use your email to send you things directly related to your account: email verification, password reset, and occasionally important product updates. We do not send marketing emails without your consent.

Your name is used only to personalise your experience inside the app.

Third parties

We use Cloudflare to serve the site and protect against abuse. Your requests pass through their network. Your data is stored on servers we control. If you sign in with Google, that flow is handled by Google and their privacy policy applies to that step.

Payments go through SofizPay (Edahabia and CIB cards, with SATIM) or Whop (international cards); your card details go to them, never to us. The measurement services above receive the pages you visit, not your documents.

When nobody from the team is available to answer a concierge order, an automatic assistant may reply. To do so, the order's messages are sent to an AI model provider (currently DeepSeek). Your documents are not sent, and the assistant's replies are marked as such.

We do not share your data with any other third party, and we do not sell it.

Your data, your call

You can ask us to delete your account and everything associated with it at any time. You can also ask for a copy of your data, or ask us to correct something that is wrong. Just email us and we will take care of it within 30 days.

Security

All connections are encrypted over HTTPS. Authentication uses signed JWTs with RSA keys. We limit who inside our team can access production data. If something goes wrong and there is a breach that affects you, we will notify you promptly.

Changes

If we make a meaningful change to this policy we will update the date at the top and, if the change affects how we use your data in a significant way, we will send you an email. Small clarifications and typo fixes happen without notice.

Questions

Email us at [email protected]. We read and reply to every message.