Privacy Policy

1. Who this policy covers

Nexus is a closed community banking platform operated by your community administrator. This policy explains what information Nexus collects when you create an account and use the service, how that information is used, and who can see it.

It applies to everyone who signs up for a Nexus account. If you have questions about anything here, your community administrator is the right person to ask.

2. Information you give us

You provide the following directly:

• Account details — your name, email address, and password. Your password is stored only as a one-way hash and is never held in readable form, which is also why nobody at Nexus can tell you what it is.
• Verification details — your legal name as it appears on your identification, date of birth, US residential address, phone number, the last four digits of your Social Security number, and the type and number of a government-issued ID such as a state ID, driver's license, or US passport.
• Transfer details — the amount, any note you add, and the recipient information you enter, which may include a recipient name, bank name, routing and account numbers, or a crypto wallet address.
• Support messages — anything you write in support chat, which is stored so both you and your administrator can see the conversation history.

3. What we never collect

• Your full Social Security number. Nexus asks for the last four digits only, and the complete number is never requested or stored.
• Advertising or cross-site tracking data. Nexus carries no third-party advertising trackers.
• Personal information purchased from data brokers. Everything Nexus holds about you came from you or from your activity in the app.

4. Information collected automatically

• A sign-in session cookie, which keeps you logged in. It is set as httpOnly so it cannot be read by scripts in your browser.
• Your IP address and basic request information, used to detect abuse and to rate-limit sign-in attempts.

5. How your information is used

Your information is used only to run the service:

• To create and maintain your account and its balance.
• To verify your identity before your account can send money.
• To process, review, approve, or decline the transfers you submit.
• To produce your statements, receipts, and transaction history.
• To answer you in support chat.
• To detect and prevent fraud, unauthorised access, and abuse of the service.
• To keep the records a community financial service is expected to keep.

6. Who can see your information

Your community administrator can see your account details, balance, transaction history, verification submission, and support messages. Administering the ledger is not possible without that access.

Other members cannot see your balance, your history, or your verification details. They can see the account number you choose to share with them, and your name when you send or receive a transfer with them.

7. Service providers

Nexus runs on third-party infrastructure — an application hosting provider and a managed database provider — which process data on our behalf in order to run the service. They are not permitted to use your information for their own purposes.

Nexus does not sell your personal information, and does not share it with advertisers.

8. How long we keep it

Account, verification, and transaction records are kept for as long as your account is open. After an account is closed, transaction and verification records are retained for the period required for financial record-keeping, because a ledger has to remain complete and auditable for prior periods.

Support conversations are kept for as long as your account is open.

9. How your information is protected

• All traffic between your device and Nexus is encrypted in transit.
• Passwords are stored as bcrypt hashes, never as readable text.
• Session cookies are httpOnly and expire after seven days.
• Verification details are visible only to your community administrator.

10. Your choices

You can review and correct your account details from inside the app, or ask your community administrator to correct them for you. You can ask for a copy of the information Nexus holds about you, and you can ask for your account to be closed.

Some records cannot be deleted on request, because a financial ledger must stay complete for prior periods. Where that applies, your administrator will tell you what has to be retained and why.

Depending on where you live, state privacy law may give you additional rights over your information. Contact your community administrator to exercise them.

11. Children

Nexus is not intended for anyone under 18, and accounts are not knowingly created for children. If you believe a child has an account, contact your community administrator so it can be closed.

12. Changes to this policy

If this policy changes, the updated version will be posted on this page with a new date at the top. Significant changes will also be communicated to members directly.

13. Contact

For any question about your information, message your community administrator in support chat once you are signed in, or contact them directly.