Nexus
Sign inStart building
Legal

Privacy Policy

Last updated September 21, 2026

1. Who we are

Nexusbuild AI Private Limited ("Nexus", "we", "our" or "us"), a company incorporated in India, operates nexusbuild.in, the Nexus web app and Nexus Desktop. This policy explains what personal data we collect, why, who we share it with, how long we keep it and the rights you have over it. For the purposes of India's Digital Personal Data Protection Act, 2023, and similar laws elsewhere, we are the data fiduciary (controller) for the data described here.

2. What we collect

Your account

  • Email address, and your name and profile picture if you sign in with Google or GitHub
  • Sign-in and session tokens, so you stay signed in
  • Your plan, subscription status and payment history (card details are handled by Razorpay, not us)

Using Nexus

  • The prompts and messages you send, and the responses, so the service can answer them
  • Chat history you choose to save, and projects you choose to share or deploy
  • Token usage, so we can apply plan limits
  • If you use Nexus Remote, the names of the computers you connect and the chats you share by link. The work itself runs on your computer; its files are not uploaded to us.

Forms you send us

  • Feedback: your message, the type of feedback, the page it was sent from, and your email address if you give one
  • Contact and enterprise inquiries: your name, work email, company, team size and message
  • Job applications: your name, phone number, email, country, city, experience and anything you tell us about yourself
  • Waitlists: your email address and which product you asked to hear about

With each form we also record which version of our privacy notice you were shown and when. We do not store your IP address or browser details with form submissions.

Technical data

  • Your IP address, processed to protect the service from abuse. For rate limiting we store only a one-way keyed hash of it, not the address itself.
  • Browser type, device type and error reports needed to keep the service working
  • Cookies needed to sign you in and remember your settings (see section 9)

3. Why we use it

  • To provide the service you asked for: running your prompts, saving your work, signing you in
  • To process payments and manage your plan
  • To apply usage limits and protect Nexus and its users from abuse and fraud
  • To reply to your feedback, inquiry or application
  • To email you about the product you joined a waitlist for
  • To send essential service messages, such as security or billing notices
  • To find and fix problems and improve how Nexus works
  • To meet our legal obligations

We do not sell your personal data, and we do not use your prompts, files or chats to train AI models. The AI providers listed in section 5 handle your prompts under their own terms for API customers.

4. Our basis for using it

We process your data because you asked us to provide a service (your account, your prompts, your subscription), because you gave consent (forms and waitlists, which you can withdraw at any time), or because we have a legitimate need to keep Nexus secure and meet legal obligations. Withdrawing consent does not affect processing that happened before you withdrew it.

5. Who we share it with

We share personal data only with service providers that process it for us, under contract:

  • Supabase: database and authentication
  • Vercel: website hosting
  • Razorpay: payment processing
  • Google and GitHub: sign-in, if you choose them
  • AI model providers (such as Inception Labs, Anthropic, OpenAI, Google, Mistral and DeepSeek, depending on the model you pick): your prompts and the context you provide, to generate a response
  • Netlify, Vercel and GitHub: only if you choose to deploy or publish a project

We may also disclose data when required by law, to protect the rights and safety of our users or others, or as part of a merger or acquisition, in which case this policy continues to apply.

6. Where it is stored and how it is protected

Our providers may store and process data outside India, including in the United States and the European Union. Where they do, we rely on their contractual safeguards. Data is encrypted in transit (TLS) and at rest, access to production data is limited to people who need it, and form tables can only be written by our own servers.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires, including the Data Protection Board of India and, for people in the EU or UK, the relevant supervisory authority within 72 hours where the law requires it.

For personal data of people in the EU, EEA, UK or Switzerland that is transferred to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) in our providers' data processing terms. India's DPDP Act allows transfers to any country the government has not restricted.

7. How long we keep it

  • Account data: while your account is open, then deleted within 90 days of closing it
  • Payment records: as long as tax and accounting law requires
  • Feedback and inquiries: as long as needed to act on them and follow up
  • Job applications: for the hiring process, and afterwards only if you agree we may consider you for future roles
  • Waitlist emails: until the product launches and we have told you, or until you unsubscribe

After that, we delete the data or remove anything that identifies you.

8. Your rights

You can ask us to:

  • Tell you what personal data we hold about you and give you a copy
  • Correct or complete data that is wrong
  • Delete your data, including form submissions and waitlist entries
  • Stop using your data for a purpose you consented to
  • Nominate someone to exercise these rights for you if you are unable to
  • If you are in the EU, EEA, UK or Switzerland: restrict or object to processing, receive your data in a portable format, and complain to your supervisory authority (for example the ICO in the UK)
  • If you are in California or another US state with a privacy law: know, delete and correct your personal information, and not be treated differently for using these rights

Write to [email protected] from the email address involved. We may ask you to confirm it is you before we act. We reply within 30 days (45 days for California requests, with notice if we need longer). To close your account and delete its data, write to the same address. You can also ask an authorized agent to write on your behalf.

We do not sell personal data or share it for cross-context behavioral advertising, and we do not use or disclose sensitive personal information for anything beyond providing the service. Because we do not track you across sites, there is nothing to opt out of, and we treat a Global Privacy Control signal as honored by default.

We do not make decisions that have legal or similarly significant effects on you solely by automated means. AI output is generated from your prompts to answer you and is not used to profile you.

9. Cookies

We use cookies that are needed for Nexus to work: keeping you signed in, protecting forms and remembering preferences such as your chosen model. We do not use advertising, analytics or cross-site tracking cookies, so we do not show a cookie banner. If that ever changes, we will ask for your consent first.

10. Children

Nexus is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

11. Grievances

If you have a concern about how we handle your personal data, contact our Grievance Officer at [email protected]. We acknowledge complaints within 24 hours and resolve them within 15 days. Please raise your concern with us first; if you are not satisfied with our answer, you may complain to the Data Protection Board of India or your local data protection authority. For EU and UK residents, Nexusbuild AI Private Limited is the controller; you may write to the same address for privacy questions.

12. Changes to this policy

When we change this policy we update the date at the top of this page. If a change materially affects how we use your data, we will tell you by email or in the product before it takes effect. See also our Terms of Service.