Privacy Policy

1. Introduction

Nexus ("we", "our", or "us") is an AI-powered enterprise team collaboration platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services (collectively, the "Service"). Please read this policy carefully. By accessing or using the Service, you agree to the terms of this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you register for an account, we collect your name, email address, and password. If you sign up using Google OAuth, we receive your name, email address, and profile picture from Google.
• Profile Information: Any additional information you add to your profile, such as a display name or avatar.
• Content: Messages, files, and other content you create, upload, or share through the Service, including within workspaces, channels, and direct messages.
• Communications: Information you provide when contacting us for support or feedback.

2.2 Information Collected Automatically

• Usage Data: We collect information about how you interact with the Service, including pages visited, features used, and actions taken.
• Device Information: Browser type, operating system, device type, and screen resolution.
• Log Data: IP address, access times, and referring URLs.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to maintain your session and preferences.

2.3 Information from Third-Party Services

When you authenticate using Google OAuth, we receive basic profile information (name, email address, and profile picture) from Google in accordance with your Google account privacy settings. We only request the minimum scopes necessary for authentication. We do not access your Google contacts, calendar, drive files, or any other Google services data.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Create and manage your account
• Enable collaboration features including workspaces, channels, and messaging
• Power AI-assisted features such as message drafting, summarization, and smart replies
• Send you service-related notifications and updates
• Monitor and analyze usage trends to improve the Service
• Detect, prevent, and address technical issues and security threats
• Respond to your inquiries and support requests
• Comply with legal obligations

4. AI Features and Data Processing

Nexus integrates AI capabilities to enhance your collaboration experience. When you use AI features (such as message drafting, summarization, or smart replies), relevant content may be processed by our AI service providers to generate responses. We do not use your content to train AI models. AI-generated content is processed in real-time and is not stored separately from the context in which it was created.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• With Workspace Members: Content you share in workspaces and channels is visible to other members of those spaces.
• Service Providers: We share information with third-party service providers who help us operate the Service, including hosting (Vercel), database (Supabase), analytics (Vercel Analytics), error monitoring (Sentry), and AI processing providers. These providers are bound by contractual obligations to protect your data.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid legal processes.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS/SSL), secure authentication mechanisms, and access controls. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or legitimate business purposes.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information.
• Data Portability: Request a copy of your data in a portable format.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
• Google Account Permissions: You can revoke Nexus's access to your Google account at any time through your Google Account settings.

To exercise any of these rights, please contact us at the email address provided below.

9. Cookies

We use essential cookies to maintain your authentication session and preferences. We also use analytics cookies (via Vercel Analytics) to understand how the Service is used. You can control cookie preferences through your browser settings.

10. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@nexus-app.com