What we keep. What we don't.

TODO: Replace this placeholder with real copy before launch. Account data (email, display name, organization), billing identifiers from Stripe, usage telemetry, and the prompts + images you upload or generate. No third-party tracking pixels.

TODO: Replace this placeholder with real copy before launch. To operate your account, process payments, provide generation services, prevent abuse, and improve the product. We do not sell or rent your data.

TODO: Replace this placeholder with real copy before launch. We share data with subprocessors required to run the service: Supabase (storage, auth), Stripe (billing), WaveSpeed (image generation), and the LLM provider you configure (Anthropic / OpenAI / Google / xAI). Each operates under its own privacy terms.

TODO: Replace this placeholder with real copy before launch. We use essential cookies for authentication and session management. No analytics or advertising cookies are set.

TODO: Replace this placeholder with real copy before launch. Images and prompts live in your workspace until you delete them. Deleted items are soft-held for 30 days then purged. Audit logs are retained for 90 days.

TODO: Replace this placeholder with real copy before launch. You can export or delete your data at any time from settings. If you are in the EEA, UK, or California, you have additional rights under GDPR / CCPA — email us to exercise them.

TODO: Replace this placeholder with real copy before launch. Data is encrypted in transit (TLS) and at rest. API keys and secrets are stored separately from user-facing data. Access is restricted by role-based RLS at the database layer.

TODO: Replace this placeholder with real copy before launch. Nexus is not for anyone under 18. We do not knowingly collect data from minors.

TODO: Replace this placeholder with real copy before launch. Privacy questions? Email privacy@nexus.app.