Privacy Policy

This Policy applies to: (a) visitors to our marketing website at nexusphere.ai; (b) prospective customers who request a demo, request pricing, or otherwise contact us; and (c) authorized users — the individual employees or contractors of our business customers (“Customers”) who create accounts and log in to use the NexuSphere platform (together, the “Site and Services”).

As explained above, this Policy does not apply to Customer Data, which NexuSphere processes only as a service provider under its agreement with the applicable Customer and the associated Data Processing Addendum.

• Identifiers: name, work email address, phone number, job title, and company name.
• Account credentials: username, hashed password, and authentication tokens (including single sign-on identifiers, if applicable).
• Commercial information: subscription plan, billing address, and payment details (processed on our behalf by Stripe).
• Usage and device data: log-in activity, features used, pages viewed, browser type, device identifiers, and IP address.
• Communications: the content of support requests, emails, and chat messages you send us.
• Marketing information: information submitted through demo requests, newsletter sign-ups, or event registrations.

• To provide, maintain, and secure the Site and Services;
• To create and manage accounts, authenticate users, and process billing;
• To respond to inquiries and provide customer support;
• To improve and develop the Site and Services, including through aggregated usage analytics;
• To send product updates, administrative notices, and, where you have opted in, marketing communications;
• To detect, investigate, and prevent fraud, abuse, and security incidents; and
• To comply with applicable law and enforce our Terms of Service.

The Services include operational intelligence and other AI-assisted platform capabilities enabled under the applicable Order. Personal information processed by these capabilities is generally Customer Data and is governed by our Data Processing Addendum rather than this Policy, except where it also constitutes an authorized user’s own personal information (for example, a prompt an authorized user submits to an AI-assisted feature), which is handled as described here.

NexuSphere does not use Customer Data — including any personal information within it — to train, fine-tune, or evaluate any AI model. Certain features submit document content to Google’s Gemini API to generate outputs for the Customers; such content is not used by Google to train its models, consistent with Google’s enterprise API terms.

• Service providers. We use third-party service providers to host our infrastructure and operate the Site and Services, including Google Cloud Platform and the vendors listed in our Sub-processor List. These providers are contractually restricted to using personal information only to provide services to NexuSphere.
• Your employer. If you are an authorized user, the Customer that administers your account can see your name, email address, and usage activity within its account.
• Professional advisors and legal compliance. We may share personal information with our advisors, or as required by law, subpoena, or other legal process, or to protect the rights, property, or safety of NexuSphere, our Customers, or others.
• Business transfers. We may share personal information in connection with a merger, financing, acquisition, or sale of assets.

NexuSphere does not sell personal information and does not share personal information for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA.

We use cookies and similar technologies on our website for authentication and session management (essential), and, only with your consent, to understand site usage (analytics). Essential cookies cannot be disabled, as they are required for the site to function. You can accept, reject, or customize analytics cookies at any time using the cookie preference tool available on first visit or via the “Cookie Preferences” link in our site footer.

We retain account and billing information for as long as the associated subscription is active and for a reasonable period afterward to satisfy legal, accounting, or dispute-resolution needs. You may request deletion of your account or billing information at any time by contacting us as described in Section 10 and Section 13. NexuSphere does not currently operate an automated deletion or anonymization process for this data; deletion requests are handled manually. Usage logs are retained for a limited period for security and troubleshooting purposes.

We maintain administrative, technical, and physical safeguards designed to protect personal information, as described in our Security Overview. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

NexuSphere is based in the United States and primarily processes personal information in the United States (including on Google Cloud Platform infrastructure located in the U.S.). If we process personal information originating in the European Economic Area, the United Kingdom, or Switzerland, we rely on Standard Contractual Clauses or another approved transfer mechanism.

• California (CCPA/CPRA). If you are a California resident, you have the right to know what personal information we have collected about you, to request deletion or correction of that information, to opt out of the sale or sharing of personal information (which, as noted above, we do not engage in), and to be free from discrimination for exercising these rights. You may also have the right to limit our use of sensitive personal information; we do not use sensitive personal information for purposes requiring an opt-out under the CPRA.
• Other U.S. States. Residents of Virginia, Colorado, Connecticut, Utah, Oregon, and other states with comprehensive privacy laws have similar rights to access, correct, delete, and obtain a copy of their personal information, and to opt out of certain processing. You can exercise these rights using the contact information in Section 13.
• European Economic Area / UK. If GDPR applies to you, you have the right to access, rectify, or erase your personal information, restrict or object to our processing of it, request portability, and lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us using the information in Section 13. We will verify your request and respond within the time required by applicable law.

The Site and Services are business tools intended for use by adults acting on behalf of a company and are not directed to children. We do not knowingly collect personal information from children under 13 (or the relevant age threshold under applicable law).

We may update this Policy from time to time. If we make material changes, we will post the updated Policy with a new effective date and, where appropriate, provide additional notice (such as an email or in-product notice).

If you have questions about this Policy or wish to exercise a privacy right, contact us at privacy@nexusphere.ai.