Privacy Policy

01 Introduction

This Privacy Policy explains how Nexus Marketing Agency, operated by Lokesh Kumar (Proprietor), trading as Nexus (“Nexus,” “we,” “us,” or “our”), collects, uses, discloses, stores, and protects personal information when individuals:

• Download, install, access, or use the Nexus mobile application;
• Visit our websites, dashboards, or other online properties;
• Purchase or use our digital marketing services;
• Create, manage, or participate in marketing campaigns;
• Communicate with our support, sales, or account-management teams; or
• Otherwise interact with services that link to this Privacy Policy.

Our mobile application, websites, dashboards, integrations, marketing tools, and related services are collectively referred to as the “Platform.”

Data controller information

02 Scope and Roles

This Privacy Policy applies to personal information that Nexus processes for its own business purposes, including account administration, billing, analytics, support, security, and service improvement.

When a business customer uploads, imports, or connects information about its customers, leads, subscribers, employees, or other individuals to the Platform, the business customer generally acts as the data controller or “business,” while Nexus acts as its data processor or “service provider.”

In those circumstances:

• The customer determines why and how that information is processed;
• Nexus processes the information according to the customer’s documented instructions and applicable agreement;
• Individuals should normally direct requests concerning customer-controlled data to the relevant customer; and
• Nexus will reasonably assist the customer in responding to valid privacy requests.

A separate Data Processing Addendum may apply to customer-controlled data.

03 Information We Collect

The information collected depends on how you use the Platform.

3.1 Information you provide directly

We may collect:

• Account information: Name, email address, phone number, username, password, organization, role, and profile details.
• Business information: Company name, industry, business address, tax information, brand information, marketing objectives, and campaign preferences.
• Billing information: Billing name, billing address, transaction information, subscription details, invoices, and payment status. Complete payment-card details may be processed directly by our payment providers rather than stored by Nexus.
• Campaign content: Advertisements, copy, images, videos, designs, logos, audience criteria, landing-page content, keywords, and campaign instructions.
• Customer and lead data: Contact lists, audience data, customer records, lead information, or other data uploaded or connected by a customer.
• Communications: Support requests, feedback, survey responses, call recordings where legally permitted, and correspondence with Nexus.
• Verification information: Information used to verify identity, business ownership, authority, or payment legitimacy.
• Job application information: Résumés, employment history, contact information, and other recruitment materials.

3.2 Information collected automatically

When you use the Platform, we may automatically collect:

• Device type, operating system, device identifiers, language, and application version;
• IP address and approximate location derived from it;
• Browser type and settings;
• Login dates, session duration, pages viewed, buttons selected, and feature usage;
• Referring URLs and campaign attribution information;
• Crash reports, diagnostics, performance data, and error logs;
• Security events, suspected fraud indicators, and authentication activity; and
• Cookie, software development kit (“SDK”), pixel, local-storage, or similar technology data.

We do not collect precise geolocation, contacts, photos, microphone data, or camera data unless the relevant feature requires it and you grant the appropriate device permission.

3.3 Information from third parties

We may receive information from:

• Advertising and social-media platforms;
• Analytics, attribution, and measurement providers;
• Payment processors and app stores;
• Customer relationship management and marketing integrations;
• Identity, security, and fraud-prevention services;
• Business partners, affiliates, and referral partners;
• Publicly available sources; and
• Customers who provide information about authorized users, team members, leads, or campaign audiences.

Your use of a third-party integration may also be governed by that third party’s privacy policy and terms.

04 How We Use Personal Information

We may use personal information to:

1. Provide the Platform

• Create and administer accounts;
• Deliver marketing services and campaigns;
• Enable collaboration, reporting, integrations, and account features;
• Process transactions and maintain subscription status.

2. Operate and improve our services

• Analyze Platform performance and usage;
• Develop, test, and improve features;
• Personalize dashboards, recommendations, and user experience;
• Troubleshoot technical issues.

3. Communicate with users

• Send service notices, security alerts, invoices, and administrative messages;
• Respond to support requests;
• Provide onboarding, account-management, and training services;
• Send marketing communications where permitted by law.

4. Maintain security and prevent misuse

• Authenticate users;
• Protect accounts and systems;
• Detect fraud, abuse, unauthorized access, spam, and policy violations;
• Enforce our agreements.

5. Comply with legal obligations

• Maintain financial, tax, and transaction records;
• Respond to lawful requests;
• Establish, exercise, or defend legal claims;
• Meet regulatory and compliance requirements.

6. Facilitate corporate transactions

• Evaluate or complete a merger, acquisition, financing, restructuring, sale of assets, or similar transaction.

We will not use customer-controlled data to independently contact a customer’s leads or end users except as instructed, authorized, or legally required.

05 Legal Bases Under the GDPR and UK GDPR

Where the General Data Protection Regulation or UK GDPR applies, Nexus processes personal data under one or more of the following legal bases:

Where we rely on legitimate interests, we consider whether our interests are proportionate and whether your rights and interests override them.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.

06 Cookies, SDKs, Analytics, and Advertising Technologies

We and our service providers may use cookies, mobile SDKs, pixels, APIs, and similar technologies to:

• Keep users signed in;
• Remember settings and preferences;
• Secure the Platform;
• Measure performance and diagnose errors;
• Understand feature usage;
• Attribute installations or conversions;
• Measure marketing campaign effectiveness; and
• Deliver or measure advertising where permitted.

Categories of tools

Only tools actually used are listed. The current third-party provider list may be made available at [subprocessor URL].

You may manage non-essential technologies through [cookie preference center URL], device settings, browser controls, or app privacy settings. Blocking some technologies may affect Platform functionality.

Where legally required, non-essential tracking will not be activated until consent is obtained.

07 How We Disclose Information

We may disclose personal information to:

7.1 Service providers and processors

Vendors that provide hosting, analytics, communications, payments, customer support, security, authentication, storage, professional services, and technical infrastructure. These providers are permitted to process information only for contracted purposes and subject to appropriate confidentiality and security obligations.

7.2 Advertising and integration partners

If you connect the Platform to an advertising network, social-media account, analytics service, CRM, or other external platform, we may exchange information with that provider to perform the requested integration. The third party may process information under its own terms and privacy policy.

7.3 Authorized users and customer organizations

If your account belongs to an organization, account administrators may access or control:

• Your profile and work contact information;
• Campaign activity and content;
• Usage and audit information;
• Permissions, integrations, and account settings.

7.4 Professional advisers

We may disclose information to attorneys, auditors, accountants, insurers, consultants, and other professional advisers where reasonably necessary.

7.5 Legal and safety purposes

We may disclose information where we reasonably believe disclosure is necessary to:

• Comply with law, regulation, court order, or lawful government request;
• Protect the rights, property, safety, or security of Nexus, users, or others;
• Detect or prevent fraud, security incidents, or illegal activity; or
• Enforce our agreements and policies.

7.6 Business transfers

Information may be disclosed or transferred in connection with a merger, acquisition, financing, reorganization, insolvency, or sale of all or part of our business or assets.

08 Sale, Sharing, and Targeted Advertising

Nexus does not sell personal information for money.

However, some advertising, analytics, or attribution activities may constitute “selling,” “sharing,” or processing for “targeted advertising” under certain US state privacy laws, even where no money is exchanged.

If Nexus conducts such activities, eligible users may opt out by:

• Selecting “Your Privacy Choices” at [URL];
• Adjusting cookie or app privacy settings;
• Sending a request to nexus@nexus-ai.world; or
• Using a legally recognized opt-out preference signal, such as Global Privacy Control, where technically applicable.

Nexus does not knowingly sell or share the personal information of individuals under 16 years of age.

If Nexus does not use personal information for cross-context behavioral advertising, this section should be revised to state that Nexus does not sell or share personal information as those terms are defined by applicable law.

09 International Data Transfers

Nexus and its providers may process information in countries other than the country where it was collected. These countries may have different data-protection laws.

Where required, Nexus uses recognized transfer mechanisms, such as:

• European Commission Standard Contractual Clauses;
• The UK International Data Transfer Agreement or UK Addendum;
• Adequacy decisions;
• Contractual and organizational safeguards; or
• Another legally authorized transfer mechanism.

You may request information about applicable transfer safeguards by contacting us.

10 Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to maintain an active account; deliver contracted services; complete billing and payment reconciliation; meet tax, accounting, and legal obligations; resolve disputes; prevent fraud and abuse; and enforce agreements.

Retention periods vary according to data type, legal requirements, sensitivity, and business need. Typical retention periods are:

We may retain limited information longer where required by law or necessary to establish, exercise, or defend legal claims.

Deletion from active systems may not immediately remove information from encrypted backups. Backup information remains protected and is deleted according to established retention cycles.

11 Security

Nexus uses reasonable technical and organizational safeguards appropriate to the nature of the information processed. These may include:

• Encryption in transit and, where appropriate, at rest;
• Access controls and role-based permissions;
• Authentication and account-security measures;
• Logging, monitoring, and incident-response procedures;
• Secure development and vulnerability-management practices;
• Vendor risk assessment;
• Employee confidentiality and security training; and
• Business continuity and backup controls.

No system is completely secure. Users are responsible for maintaining the confidentiality of account credentials, using strong passwords, enabling available multifactor authentication, and promptly reporting suspected unauthorized access.

Security concerns may be reported to nexus@nexus-ai.world.

12 Your Privacy Rights

Depending on your location, you may have the right to:

• Request access to personal information;
• Request correction of inaccurate information;
• Request deletion;
• Request restriction of processing;
• Object to certain processing;
• Withdraw consent;
• Receive portable data in a structured, commonly used format;
• Opt out of sale, sharing, targeted advertising, or certain profiling;
• Limit certain uses of sensitive personal information;
• Appeal a denied privacy request; and
• Lodge a complaint with a data-protection authority.

These rights are not absolute. We may deny or limit a request where an exception applies, including where information must be retained for legal, security, fraud-prevention, or contractual reasons.

Submitting a request

Submit requests through:

• Email: nexus@nexus-ai.world
• Web form: [privacy request URL]
• Toll-free number (if required): [number]

We may verify your identity before fulfilling a request. Verification may require matching information associated with your account or requesting additional information reasonably necessary to prevent unauthorized disclosure.

Authorized agents may submit requests where permitted by law. We may require proof of authorization and direct verification with the individual. We will not unlawfully discriminate against anyone for exercising a privacy right.

13 California and Other US State Privacy Notices

This section supplements the remainder of this Privacy Policy for residents of California and other US states with comprehensive privacy laws. Depending on how you interact with Nexus, we may collect the following categories of personal information:

Nexus does not use sensitive personal information to infer characteristics about individuals unless clearly disclosed and legally permitted. We retain these categories according to Section 10 and disclose them to the recipient categories described in Section 7.

California residents may request information concerning collection, use, disclosure, sale, or sharing during the applicable statutory lookback period. They may also request correction, deletion, and opt-out, subject to legal exceptions.

If Nexus offers financial incentives related to personal information, it will provide a separate notice explaining the material terms before enrollment.

14 India Data-Protection Notice

Where India’s applicable data-protection legislation, including the Digital Personal Data Protection Act, 2023 and implementing rules in force, applies, Nexus will process digital personal data for lawful purposes and provide required notices and consent mechanisms.

Eligible individuals may exercise rights available under applicable Indian law, which may include rights concerning:

• Access to information about processing;
• Correction, completion, and erasure;
• Withdrawal of consent;
• Grievance redressal; and
• Nomination.

The company’s grievance contact is:

This section will be updated as implementing rules and commencement requirements become applicable to Nexus.

15 Customer Responsibilities for Marketing Data

Customers using the Platform to process leads, audiences, contact lists, or customer information are responsible for:

• Providing all legally required privacy notices;
• Obtaining valid consent or another lawful basis;
• Honoring opt-outs and suppression requests;
• Maintaining evidence of consent where required;
• Ensuring uploaded data was obtained lawfully;
• Complying with direct-marketing, telemarketing, email, SMS, cookie, and advertising laws;
• Avoiding unlawful use of sensitive or special-category data; and
• Responding to rights requests for data under the customer’s control.

Customers must not upload personal information they are not legally permitted to process.

16 Children’s Privacy

The Platform is intended for business users and is not directed to children under 16, or the higher minimum age required by applicable law.

Nexus does not knowingly collect personal information directly from children without legally valid authorization. If you believe a child has provided personal information in violation of this section, contact us so that we can investigate and take appropriate action.

17 Third-Party Services and Links

The Platform may contain links to or integrations with third-party websites, app stores, advertising platforms, payment services, or software.

Nexus does not control and is not responsible for the privacy, security, or content practices of independent third parties. Users should review the third party’s policies before providing information or enabling an integration.

18 Communications Preferences

You may unsubscribe from promotional email by using the unsubscribe link in the message or contacting us.

You may manage push notifications through device settings. Transactional and service-related communications may continue where necessary to operate an account, complete a transaction, provide security notices, or satisfy legal obligations.

19 Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in law, technology, or business practices.

When changes are material, we will provide appropriate notice, such as through the Platform, by email, or by updating the effective date. Where required, we will obtain consent before applying a material change to previously collected information.

20 Contact Us

Questions, complaints, and privacy requests may be directed to:

Individuals in the EEA or UK may also complain to their local supervisory authority.