Privacy Policy

Last updated: July 8, 2026

This Privacy Policy explains how Nexus Cloud collects, uses, and protects information when you use our hosted service.

Information we collect

Account data: name, email, company, billing details (via Stripe when enabled).
Service data: conversation transcripts, tickets, analytics, and configuration you store in your workspace.
Technical data: IP address, browser type, logs, and usage metrics for security and reliability.

How we use information

Provide, operate, and improve Nexus Cloud.
Authenticate users and enforce security controls.
Process billing and communicate about your account.
Comply with legal obligations and prevent abuse.

AI processing

When you enable LLM providers (OpenAI, Anthropic, etc.), message content may be sent to those providers under their terms. You control which integrations are configured in your tenant.

Data retention

We retain account and conversation data while your subscription is active. After cancellation, data is deleted within 30 days unless a longer retention period is required by law or your enterprise agreement.

Security

Credentials are stored in an encrypted vault. Transport uses TLS. Production deployments should use strong secrets and SSO where available.

Your rights

Depending on jurisdiction, you may request access, correction, export, or deletion of personal data. Contact us via GitHub issue "Legal — Privacy" or your account representative.

Sub-processors

Hosting (cloud VM), database (Neon Postgres), payment (Stripe), and optional observability providers may process data on our behalf under contractual safeguards.

Changes

We may update this policy; material changes will be posted here with an updated date.