Privacy Policy

1. Who this policy covers

Nexxus provides software to property managers and operators (“Operators”) to run their rental businesses. Operators use the Services to manage properties, listings, residents, owners, leases, payments, and related records. This policy applies to information we process as a business (for our own account holders) and as a service provider/processor on behalf of Operators for the data they put into the platform.

2. Information we collect

• Account information. Name, email address, phone number, company details, and authentication credentials. If you sign in with a third-party identity provider (e.g., Google), we receive your name, email address, and profile identifier from that provider.
• Operator content. Data Operators enter or upload, such as property and unit details, listings and photos, resident and owner contact details, lease documents, maintenance requests, ledgers, and notes.
• Payment information. Subscription and transaction payments are processed by our payment provider, Stripe. We do not store full card numbers; we retain limited information such as billing status, the last four digits of a payment method, and transaction metadata.
• Usage and device data. Log data, IP address, browser and device information, and product analytics about how the Services are used.
• Cookies and similar technologies. Used to keep you signed in, remember preferences, and measure usage. See “Cookies” below.

3. How we use information

• Provide, operate, secure, and improve the Services;
• Authenticate users and maintain account and session security;
• Process subscriptions, payments, and related billing;
• Send transactional and service communications (e.g., notifications, receipts, alerts);
• Provide support and respond to requests;
• Detect, prevent, and address fraud, abuse, and technical issues; and
• Comply with legal obligations and enforce our agreements.

4. How we share information

We do not sell personal information. We share information only as follows:

• Service providers (subprocessors) who help us run the Services under contract, including Supabase (database, authentication, and file storage), Stripe (payments and Connect payouts), Resend (transactional email), Google (optional sign-in), and Vercel (application hosting).
• Between Operators and their users. Data an Operator enters is accessible to that Operator and the residents/owners they invite, according to the platform’s role-based access controls. Each Operator’s data is isolated from other Operators.
• Legal and safety. When required by law, legal process, or to protect the rights, property, or safety of Nexxus, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

5. Data retention

We retain personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Operators control the lifecycle of the data they enter and may request deletion as described below.

6. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, row-level access controls that isolate each Operator’s data, scoped credentials, and restricted internal access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below; if your information was provided to an Operator, we may direct your request to that Operator as the controller of that data. You can also update most account information directly in the product.

8. Cookies

We use strictly necessary cookies to authenticate users and maintain sessions, and limited analytics to understand product usage. You can control cookies through your browser settings, though disabling necessary cookies may prevent you from signing in.

9. International data transfers

We and our service providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards for cross-border transfers.

10. Children’s privacy

The Services are intended for businesses and individuals 18 or older and are not directed to children. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date and, where appropriate, provide additional notice.

12. Contact us

Questions about this policy or our privacy practices can be sent to privacy@trynexxus.com.