← Back to home

Privacy Policy

Last updated: 8/18/2026

Personal data controller

The personal data controller for SamoDaPrasham.mk and all platforms within the Nexa ecosystem is:

  • Legal entity: Company for Services NEKSA AMD DOOEL Skopje
  • Address: Bulevar Partizanski Odredi 102/2-14, Skopje – Karposh
  • Phone: +389 78 534 258
  • Email: info@nexa.mk
  • Data Protection Officer (DPO): Martin Boshkoski — info@nexa.mk

SamoDaPrasham.mk is part of the Nexa ecosystem (nexa.mk). If your message is forwarded to a verified partner within the ecosystem, this is done on the basis of your explicit consent given when submitting the form, and you may withdraw it at any time at the email address above.

1. Introduction

Welcome to SamoDaPrasham.mk. We are committed to protecting your privacy and personal data. This policy explains what data we collect, how we use it, and how we protect it.

2. Data We Collect

2.1 Information from Google sign-in

When you sign in via Google, we collect:

  • Your name
  • Email address
  • Profile picture (optional)
  • Google User ID (for identification)

2.2 Usage data

We track:

  • The number of questions asked to the AI assistant (weekly, for the limit)
  • Conversation history (only for signed-in users)
  • Date and time of activity

2.3 AI Conversations

Your questions and answers from the AI assistant are stored to:

  • Improve the quality of the service
  • Enable access to your history
  • Track weekly usage limits

3. How We Use Your Data

We use your data to:

  • Authenticate and manage your profile
  • Provide access to the AI legal assistant
  • Store your conversation history
  • Enforce usage limits (10 questions per week)
  • Improve the quality of the service
  • Communicate with you about important changes

4. Data Protection

We use:

  • MongoDB Atlas with encryption for data storage
  • Google OAuth 2.0 for secure authentication
  • HTTPS encryption for all communications
  • Regular security audits

5. Data Sharing

We do NOT sell or share your personal data with third parties, except:

  • Google (for authentication)
  • OpenAI (for AI processing of questions — anonymized)
  • MongoDB Atlas (for storage — encrypted)
  • Qdrant (for the vector database — question content only)

6. Your Rights

You have the right to:

  • Access your data
  • Correct inaccurate data
  • Delete your profile and all data
  • Export your conversation history
  • Revoke access to the service at any time

To exercise these rights, contact us at: info@nexa.mk

7. Cookies

We use only essential cookies for:

  • Maintaining your session (next-auth.session-token)
  • Authentication security (CSRF tokens)

We do not use cookies for advertising or tracking.

8. AI and OpenAI

Your questions are processed through the OpenAI API. OpenAI has its own privacy policy, which you can read at: openai.com/privacy

Important: OpenAI does not use API data to train models (in accordance with their Enterprise policy).

9. Children

Our service is not intended for children under 13 years of age. We do not knowingly collect data from children under 13.

10. Changes to the Policy

We may update this policy from time to time. We will notify you of significant changes via email or a banner on the website.

11. Contact

For privacy questions, contact us:

12. GDPR Compliance

If you are a user from the EU, your data is processed in accordance with the GDPR. Your rights include the right to access, rectification, erasure, restriction, portability, and objection to processing.