Nexus Privacy Policy¶
Effective as of August 15, 2026
1. General Provisions¶
1.1. This Privacy Policy (the “Policy”) describes what information Nexus may receive, process, use, store and disclose in connection with the use of the Nexus service, including the API, Telegram bot, web interfaces, documentation, support and related functionality (collectively, the “Service”).
1.2. “Nexus Administration” or the “Administration” means the persons responsible for operating, maintaining and developing the Service. References to the Administration in this Policy do not represent that Nexus is a legal entity or an incorporated organization in any particular jurisdiction.
1.3. By using the Service, the User confirms that they have reviewed this Policy and understand the data practices described in it. If the User does not agree with this Policy, the User must stop using the Service.
1.4. This Policy applies only to information processing carried out within Nexus. Third-party services, platforms, payment systems, AI/API providers and other third parties may apply their own privacy rules.
2. Information Nexus May Process¶
2.1. Depending on the functionality used, Nexus may process the following categories of information:
- account and profile identifiers, including Nexus ID, Telegram ID, username, display name, selected language and interface preferences;
- data necessary to issue, authenticate, manage and protect API keys and other access credentials;
- balance and transaction information, including top-up and charge amounts, internal transaction identifiers, payment status and other data required for accounting and dispute handling;
- technical API request data, including request identifiers, selected model and endpoint, processing time, status, error code, usage, billing information and other technical metadata;
- network and technical data, which may include IP address, protocol headers, client type, device or software environment information, timestamps and signals required for security and diagnostics;
- support requests, User messages, selected support categories and metadata related to submitted attachments;
- other information voluntarily provided by the User through the Service or support.
2.2. Nexus does not require passport data, identity documents, identity photographs or similar information unless it is expressly required for a specific function, payment verification, abuse prevention, or a mandatory requirement applicable to Nexus or a payment provider.
2.3. When a payment is made, some payment information is processed by a third-party payment provider. Nexus may receive information such as the amount, currency, status and transaction reference, but does not request full payment card details through its own interfaces unless this is expressly disclosed to the User.
3. User Content and API Requests¶
3.1. To perform an API request, Nexus may technically process text, images, audio, files, instructions, prompts, messages and other data submitted by the User (“User Content”).
3.2. User Content may be transmitted to third-party AI/API providers and infrastructure providers to the extent reasonably necessary to perform the request, provide compatibility, security and routing, and return the result to the User.
3.3. Nexus seeks to minimize retention of complete User Content in ordinary operational and diagnostic logs. The Service primarily relies on technical request metadata. However, content may be temporarily present in memory, network buffers, processing systems or third-party systems for the time necessary to complete the relevant operation.
3.4. If the User voluntarily includes request content, response content, files or other sensitive material in a support request, such material may be retained with the support case for the period required to handle and retain the relevant support history.
3.5. Nexus does not use User Content to train its own AI models. Third-party AI/API providers may apply their own data processing terms and technical configurations, which are outside Nexus’s direct control.
3.6. The User determines what information is submitted through the API and should avoid sending unnecessary confidential, secret or otherwise sensitive information where such processing is not required for the User’s task.
4. Purposes of Processing¶
4.1. Nexus may use information for the following purposes:
- providing, maintaining and developing the Service;
- authenticating Users and managing access;
- performing, routing and technically supporting API requests;
- calculating charges, maintaining balances, processing payments, refunds, adjustments and related operations;
- maintaining security and preventing abuse, fraud, attacks, restriction bypasses and unauthorized access;
- diagnosing errors, monitoring availability and improving Service reliability;
- providing support and resolving requests and disputes;
- sending service, technical and administrative notifications;
- analyzing Service use in aggregated or minimized form to improve quality and plan development;
- protecting the rights, interests, users and infrastructure of Nexus and complying with applicable mandatory requirements.
4.2. Nexus does not sell Users’ personal data as a standalone commercial product.
5. Disclosure to Third Parties¶
5.1. To operate Nexus, information may be disclosed to third parties only to the extent the Administration considers reasonably necessary for the relevant purpose. Such recipients may include:
- AI/API providers and computing infrastructure providers;
- hosting, network, infrastructure, monitoring and technical providers;
- Telegram and other platforms through which the User interacts with Nexus;
- payment systems, banks, payment intermediaries and payment verification services;
- specialists and providers engaged for support, security or incident response;
- public authorities, courts or other authorized parties where disclosure is required by a mandatory applicable requirement or is necessary to protect legitimate interests of Nexus or third parties.
5.2. Nexus is an international online service. Information may be processed and transferred across countries in which Nexus servers, infrastructure or relevant service providers are located. The level of legal protection for information may differ between jurisdictions.
5.3. Nexus is not required to disclose internal architecture, routing, lists of internal service providers, commercial terms, access credentials, internal infrastructure identifiers or other information where disclosure could affect the security, resilience or commercial interests of the Service, except where disclosure is mandatory under applicable law.
6. Data Retention¶
6.1. Information is retained for the period necessary to achieve the purposes for which it is processed. The specific period may depend on the nature of the information, the functionality used, the need to operate the Service, maintain security, account for payments and balances, investigate abuse, resolve disputes, preserve system integrity or comply with mandatory requirements.
6.2. Once further processing is no longer necessary, information may be deleted, anonymized, aggregated or removed from active systems unless continued retention is required for security, backup recovery, dispute resolution, protection of legitimate interests or compliance with mandatory requirements.
6.3. Backups and technical replicas may remain for longer than active data and may be removed in accordance with the ordinary rotation and recovery cycle of the infrastructure.
7. Security¶
7.1. The Administration applies reasonable technical and organizational measures intended to protect information against unauthorized access, alteration, disclosure, destruction and other misuse.
7.2. No method of transmission or storage can provide absolute security. Nexus does not guarantee that security incidents, third-party actions, vulnerabilities in third-party systems or other events will never occur.
7.3. The User is responsible for maintaining the confidentiality of API keys, account credentials, devices and software environments. If a key may have been compromised, the User should revoke or replace it as soon as reasonably possible and contact support.
8. User Requests and Data Rights¶
8.1. A User may contact Nexus support to request access to, correction of or deletion of information related to the User. The Administration will consider such requests to a reasonable extent, taking into account technical feasibility, the need to verify identity or account ownership, Service security and applicable mandatory requirements.
8.2. Deletion of a profile or particular information may be impossible or delayed where information must be retained for payment accounting, fraud prevention, security, abuse investigation, dispute resolution, performance of existing obligations or other legitimate purposes.
8.3. A request to delete data does not reverse prior payments, charges, refunds, chargebacks, adjustments or other completed operations.
9. Third-Party Services¶
9.1. The Service may contain links or integrations with third parties or interact with third-party systems. Nexus does not control their independent privacy practices, security measures, availability or content.
9.2. The User is responsible for reviewing the terms of third-party services where their use involves a separate interaction between the User and the relevant provider.
10. Changes to This Policy¶
10.1. The Administration may update this Policy as the Service, technologies, risks or applicable requirements evolve.
10.2. The current version will be published through the Service or at a link made available to the User. Where reasonably practical, material changes may also be communicated through the Nexus interface.
10.3. Continued use of the Service after an updated version takes effect means that the User has reviewed the updated Policy. If the User does not agree with the changes, the User must stop using the Service.
11. Language Versions¶
11.1. This Policy may be published in Russian and English. Both versions are intended to convey the same meaning.
11.2. In the event of an inconsistency between language versions, the English version prevails to the extent permitted by applicable law.
12. Contact¶
12.1. Questions regarding privacy and information processing may be submitted to Nexus support through the communication methods available within the Service.