Privacy Policy

The controller for this service is Nexus. Privacy and data-protection enquiries can be sent to [email protected].

Additional operator details and a postal address will be provided in the legal notice before public commercial launch.

Depending on how you use Nexus, we process:

• account data such as your name, username, email address, membership status and Google account identifier;
• access-request information, including your production volume, content type, workflow and answers submitted through our application form;
• workspace content such as channel settings, prompts, scripts, uploaded media, generated videos, schedules and production logs;
• billing and subscription references; payment-card details are handled by the relevant payment provider and are not stored by Nexus;
• technical and security data such as IP address, timestamps, session identifiers, error logs and abuse-prevention signals;
• provider credentials that you choose to connect. Secrets are encrypted at rest, access-restricted and are not displayed again in the user interface.

If you choose “Continue with Google”, Google provides your verified email address, basic profile information and a stable account identifier. We use these details only to authenticate you and link the Google identity to an invited Nexus member account.

Nexus does not request access to Gmail, Google Drive, YouTube content or your Google password. Google's own processing is governed by the Google Privacy Policy.

We process data to provide and secure the service, administer invited accounts, execute requested video-production workflows, respond to enquiries, handle subscriptions, prevent misuse and comply with legal obligations.

Where the GDPR applies, processing is based on performance of a contract or pre-contractual steps, our legitimate interests in operating and protecting Nexus, compliance with legal obligations, or consent where specifically requested.

We use hosting, storage, authentication, email, payment and AI/media-production providers where necessary to deliver the service. A production request may send the content required for that task to the selected provider.

Some providers may process data outside the EEA. Where required, we use an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism. We do not sell personal data or use it for third-party behavioural advertising.

We retain account and workspace data for as long as the membership is active and afterwards only as required for legitimate operational, dispute-resolution, accounting or legal purposes. Access-request records are deleted when they are no longer needed.

We use encrypted transport, access controls, tenant separation, restricted administrative access and encrypted secret storage. No online service can guarantee absolute security; suspected incidents can be reported to our contact address.

Nexus uses essential cookies for login sessions, OAuth security and preferences. These cookies are necessary for the requested service. We do not currently use third-party advertising cookies on the members website.

Subject to applicable law, you may request access, correction, deletion, restriction, portability or object to processing. You may withdraw consent for future processing at any time.

You also have the right to lodge a complaint with a competent data-protection supervisory authority. To exercise a right, contact [email protected]. We may need to verify your identity before fulfilling a request.

We may update this policy as Nexus and its providers develop. The current version and its effective date will remain available on this page.