Privacy Policy

📋 Introduction

NexusAI ("we", "us", or "our") is committed to protecting the privacy and security of our users. This Privacy Policy describes how we collect, use, process, and share information when you use our platform, APIs, and related services (collectively, the "Services").

By accessing or using the NexusAI Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Services.

🔍 Information We Collect

We collect information to provide, improve, and secure our AI-driven Services. The types of information we collect include:

Account & Personal Data

Name, email address, and job title during account registration.
Billing information and payment details (processed securely by our payment partners).
Company name and organizational role for enterprise accounts.

Usage & Interaction Data

API usage metrics, including request volume, latency, and error rates.
Log data, including IP addresses, device information, browser types, and access timestamps.
Interaction patterns within the NexusAI dashboard and administrative interfaces.

AI Model Inputs & Outputs

Input Data: Text, images, or structured data submitted via API calls to our models for inference.
Output Data: Predictions, classifications, or generated content returned by our models.
Feedback: User-provided feedback on model outputs (e.g., thumbs up/down, corrections).

⚠️ Important Note on AI Inputs

By default, NexusAI does not use your input data to train or improve our foundational models unless you explicitly opt-in or are on a specific enterprise plan that includes this feature. We process your data solely for the purpose of providing the requested inference.

⚙️ How We Use Your Information

We use the collected information for the following purposes:

Service Delivery: To process API requests, generate AI inferences, and maintain your account.
Security & Fraud Prevention: To detect unauthorized access, prevent abuse, and ensure platform integrity.
Improvement: To analyze usage patterns and improve model performance, dashboard usability, and system reliability.
Communication: To send service updates, security alerts, and administrative messages.
Compliance: To meet legal obligations, including data retention laws and audit requirements.

🤝 Data Sharing & Third Parties

We do not sell your personal information. We may share data only in the following circumstances:

Service Providers: With trusted third-party vendors who assist in operating our infrastructure (e.g., cloud hosting, analytics, payment processing) under strict data processing agreements.
Legal Requirements: When required by law, regulation, or legitimate legal process.
Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users.

🛡️ Enterprise Data Isolation

For Enterprise customers, we offer dedicated infrastructure environments where your data is physically and logically isolated from other tenants. Contact your account manager for details.

🔒 Data Security

We implement industry-standard technical and organizational measures to protect your data:

Encryption in transit (TLS 1.3) and at rest (AES-256).
Role-based access control (RBAC) and multi-factor authentication (MFA) for internal systems.
Regular security audits, penetration testing, and vulnerability assessments.
Continuous monitoring and anomaly detection for unauthorized access.

⏳ Data Retention

We retain data only as long as necessary:

Account Data: Retained while your account is active and for a limited period afterward for legal and analytical purposes.
API Logs: Retained for 90 days for debugging and security analysis, unless otherwise configured for enterprise plans.
AI Inputs/Outputs: By default, we do not store inference data beyond the session required for the response. Cached data may be retained temporarily for performance optimization and is purged within 24 hours.

You may request deletion of your data at any time by contacting us (see below).

👤 Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your personal data, subject to legal obligations.
Portability: Request a machine-readable export of your data.
Opt-Out: Opt out of marketing communications and certain data processing activities.

To exercise these rights, please contact our privacy team. We will respond to legitimate requests within 30 days.

🤖 AI-Specific Disclosures

As an AI technology provider, NexusAI adheres to additional transparency standards:

Model Limitations: Our AI models are probabilistic and may produce errors or hallucinations. Users are responsible for validating outputs before production use.
Content Moderation: We employ automated filters to prevent the generation of harmful, illegal, or policy-violating content. Inputs triggering safety mechanisms may be logged for review.
Bias Mitigation: We actively work to reduce bias in training data and model outputs through rigorous evaluation and diverse data sourcing.

🌍 International Transfers

NexusAI operates globally. Your data may be transferred to and processed in countries other than your country of residence, including the United States. We ensure appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place to protect your data in accordance with this policy.

🔄 Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify users of material changes via email or through the dashboard. Continued use of the Services after changes constitutes acceptance of the updated policy.