Data Processing Agreement

This agreement applies when you use NEXUS to run marketing for a business — your own or a client's. For the personal data in that work, you are the controller and NEXUS is your processor: we handle it only to provide the Service, on your instructions.

1. What NEXUS processes

Brand material you provide or connect (websites, documents, social profiles); the posts, plans and reports NEXUS makes; results read back from connected accounts (reach, views, likes, comments, saves, shares); leads and results your team records (names, handles, phone numbers, notes); and the logins of your team.

2. Our commitments

We process your data only to run NEXUS for you; keep it confidential; protect it with reasonable safeguards (connection tokens are encrypted at rest; client report links are stored only as hashes); tell you without undue delay about a breach that affects it; help you answer requests from the people it is about; and delete it when you ask or when your account closes, within 30 days.

3. Sub-processors

Hostinger (servers, India) · OpenRouter and the AI model providers it routes to (writing, images, analysis — prompts carry brand context, never your passwords) · Meta (publishing to and reading from the Facebook Pages and Instagram accounts you connect) · Google (only if you connect it) · Apify and Serper (reading public web pages and public competitor data). We will update this list before adding a sub-processor.

4. Your responsibilities

You have the right to give us the data you give us — including your clients' — and you tell the people concerned how it is used. Leads you record should be people who contacted the business.

5. Deletion and export

See how to ask for deletion. Removing NEXUS from a Facebook account removes the connection automatically.