Privacy Policy

1. Who this policy covers

Nexxus provides software to property managers and operators (“Operators”) to run their rental businesses. Operators use the Services to manage properties, listings, residents, owners, leases, payments, and related records. This policy applies to information we process as a business (for our own account holders) and as a service provider/processor on behalf of Operators for the data they put into the platform.

2. Information we collect

• Account information. Name, email address, phone number, company details, and authentication credentials. If you sign in with a third-party identity provider (e.g., Google), we receive your name, email address, and profile identifier from that provider.
• Operator content. Data Operators enter or upload, such as property and unit details, listings and photos, resident and owner contact details, lease documents, maintenance requests, ledgers, and notes.
• Payment information. Subscription and transaction payments are processed by our payment provider, Stripe. We do not store full card numbers; we retain limited information such as billing status, the last four digits of a payment method, and transaction metadata.
• Usage and device data. Log data, IP address, browser and device information, and product analytics about how the Services are used.
• Cookies and similar technologies. Used to keep you signed in, remember preferences, and measure usage. See “Cookies” below.

3. How we use information

• Provide, operate, secure, and improve the Services;
• Authenticate users and maintain account and session security;
• Process subscriptions, payments, and related billing;
• Send transactional and service communications (e.g., notifications, receipts, alerts);
• Provide support and respond to requests;
• Detect, prevent, and address fraud, abuse, and technical issues; and
• Comply with legal obligations and enforce our agreements.

4. How we share information

We do not sell personal information. We share information only as follows:

• Service providers (subprocessors) who help us run the Services under contract, including Supabase (database, authentication, and file storage), Stripe (payments and Connect payouts), Resend (transactional email), Google (optional sign-in and website analytics), Vercel (application hosting), and OpenRouter and Anthropic (AI model providers).
• AI features. When you use an AI feature — such as Nex, the in-app assistant, or AI-assisted data import — the content you submit, and the records the feature looks up to respond to you, are sent to our AI model providers to generate the response. The assistant can only look up data your account is already permitted to see. Our AI model providers do not use customer content to train their models.
• Between Operators and their users. Data an Operator enters is accessible to that Operator and the residents/owners they invite, according to the platform’s role-based access controls. Each Operator’s data is isolated from other Operators.
• Legal and safety. When required by law, legal process, or to protect the rights, property, or safety of Nexxus, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

5. Data retention

We retain personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Operators control the lifecycle of the data they enter and may request deletion as described below.

6. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, row-level access controls that isolate each Operator’s data, scoped credentials, and restricted internal access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below; if your information was provided to an Operator, we may direct your request to that Operator as the controller of that data. You can also update most account information directly in the product.

8. Cookies

We use strictly necessary cookies to authenticate users and maintain sessions, and limited analytics to understand product usage. On our marketing website (trynexxus.com) we use Google Analytics and our own first-party measurement to count visits and the pages viewed. Two first-party cookies support this: one remembers how you first found us (the page you landed on, the referring site and any campaign tags) so we can tell which channels bring people to Nexxus, and one holds a random visitor ID so we can count returning visitors and, if you join our early-access list, see which pages you viewed before signing up. If your browser sends a Do Not Track or Global Privacy Control signal, we set no visitor ID and never connect your visits to your email; the visit is still counted anonymously, with an identifier that resets every day. None of it is sold or used for advertising profiles. Links we share in posts and emails may carry campaign tags (utm_*) and may go through a short trynexxus.com/go/ address that counts the click. You can control cookies through your browser settings, though disabling necessary cookies may prevent you from signing in.

9. International data transfers

We and our service providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards for cross-border transfers.

10. Children’s privacy

The Services are intended for businesses and individuals 18 or older and are not directed to children. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date and, where appropriate, provide additional notice.

12. Contact us

Questions about this policy or our privacy practices can be sent to privacy@trynexxus.com.