Privacy Policy

Last updated: September 5, 2026 · Version 1.1

Operated by Nexus Generated FZ-LLC, a Free Zone Limited Liability Company registered with Ras Al Khaimah Economic Zone (RAKEZ) under License No. 5034603, United Arab Emirates.

1. Overview

Nexus Generated FZ-LLC ("Nexus", "we", "us", "our") operates Nexus Charts — trading and quantitative analysis software. This Privacy Policy explains what information we collect when you use the Software, how we use it, who we share it with, and your rights regarding that information. It applies to all visitors of the landing pages, registered Users of the Software, and waitlist subscribers.

2. Information We Collect

2.1 Account Information

When you create an account through Clerk (our authentication provider), we receive your email address and, if you use social login (Google), the public profile information that provider returns (typically display name and avatar).

2.2 Phone Verification Data

Account creation requires SMS verification. We receive your phone number and the country code derived from it. The country code is used to enforce sanctions compliance (see Section 11). We never receive the verification code itself; SMS delivery is handled end-to-end by Clerk.

2.3 Device Fingerprint

To prevent multi-account fraud and to enforce per-tier device limits (Free: 1 device, Pro: 2 devices, Quant: 4 devices), we use FingerprintJS open-source v4 to generate a stable identifier for your device based on browser characteristics. This identifier does not include personally identifiable information but is unique per device-browser combination. It is used solely to enforce the one-account-per-device rule and to determine which devices you have authorized for your account (see our Terms of Service, Section 4). You can review and revoke devices at any time from Settings → Devices.

2.4 Usage Data

We collect information about how you interact with the Software: pages visited, features used, strategy configurations (saved to your account), tier-quota counters (strategy builds per month, indicators per strategy), and performance metrics such as load times. This data is used to operate and improve the Software.

2.5 Waitlist Data

If you join our waitlist, we collect your email address and, optionally, your referral source. We use this solely to contact you about early access and launch announcements. You can request removal at any time via the contact email below.

2.6 Technical Data

We automatically collect a truncated IP address (last octet removed for IPv4, last 80 bits removed for IPv6), browser type, operating system, device type, and referring URL. Cloudflare may collect additional security telemetry to detect bots and abuse patterns under its Bot Fight Mode and WAF rules.

2.7 Payment Information

Payment data (card numbers, billing address) is collected and processed by a third-party payment processor. We never see or store your full card details. We receive only the last four digits, the card brand, and the billing country for receipt and tax purposes.

3. How We Use Your Information

  • Provide, operate, and maintain the Software
  • Authenticate your sessions and protect your account from unauthorized access
  • Enforce tier quotas, the one-account-per-User rule, and other anti-abuse controls
  • Send transactional emails (account verification, password reset, payment receipts, billing notices)
  • Send launch and product update announcements (you can opt out at any time)
  • Analyze usage patterns to improve the Software (anonymized event data via PostHog)
  • Detect, prevent, and investigate fraud, abuse, or violations of our Terms
  • Comply with legal obligations including UAE Federal Decree-Law No. 20 of 2018 (Anti-Money Laundering) and applicable sanctions regimes (OFAC, UN, EU, UK, UAE)
  • Respond to law enforcement requests where legally compelled

4. Legal Basis for Processing

For Users in jurisdictions where lawful basis applies (e.g., the European Union, United Kingdom), we process your personal data under the following bases:

  • Contract: processing required to deliver the Software you have subscribed to
  • Legitimate interest: fraud prevention, security, product improvement, and anti-cloning protection
  • Legal obligation: compliance with AML, sanctions, and other applicable laws
  • Consent: marketing communications (revocable at any time)

5. Data Sharing

We do not sell your personal data. We share data only with the following service providers, strictly for the purposes described below, under written agreements that require equivalent data protection:

  • Clerk — authentication, sign-up, OAuth, SMS verification.
  • FingerprintJS (open-source v4) — device fingerprint generation for anti-fraud and multi-device tier enforcement (DEC-025).
  • PostHog — product analytics (US region, anonymized events).
  • Sentry — error monitoring (stack traces, no PII in error reports).
  • Resend — transactional and marketing email delivery.
  • Third-party payment processor — payment processing.
  • Cloudflare — DDoS protection, WAF, bot mitigation.
  • Railway — application hosting and PostgreSQL database (data at rest).
  • Vercel — frontend hosting and edge delivery.
  • Law enforcement, regulators, or other authorities when required by applicable law.

6. International Data Transfers

Nexus Generated FZ-LLC is based in the United Arab Emirates. Several of our service providers operate in the United States and European Union. Your data may therefore be transferred to, stored in, and processed in jurisdictions outside your country of residence. Where required, we rely on Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms to ensure your data receives a level of protection consistent with your home jurisdiction.

7. Data Retention

Account data: retained while your account is active and for 90 days after account termination, after which it is permanently deleted. You may export your strategies as JSON at any time during this period.

Waitlist data: deleted 90 days after launch (or earlier on request).

Payment records: retained for the period required by applicable tax and accounting law (typically 7 years in the UAE).

Logs and security telemetry: retained 30 days for fraud investigation; aggregated anonymized data may be retained longer for product analytics.

8. Data Security

Your data is stored on Railway (PostgreSQL with encryption at rest) and protected with industry-standard security measures including TLS 1.3 in transit, JWT authentication, scoped backend access, principle-of-least-privilege secrets management, and OWASP-aligned web application firewall rules at the Cloudflare edge. We retain ownership of strategy and configuration data on your behalf; we cannot recover data deleted by you outside the 90-day retention window.

9. Cookies & Local Storage

Nexus Charts uses your browser's localStorage to persist chart preferences, drawing tools, and strategy configurations on your device. This data never leaves your device unless you explicitly sync it to your account by saving the strategy. We use minimal session cookies for authentication purposes via Clerk. We do not use third-party advertising cookies or cross-site tracking.

10. Your Rights

Depending on your jurisdiction (GDPR for the EU, UK GDPR for the United Kingdom, India's DPDP Act, applicable UAE data protection regulations, and others), you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your data ("right to be forgotten"), subject to legal retention obligations
  • Export your data in a portable format (JSON)
  • Withdraw consent at any time (where processing is based on consent)
  • Opt out of marketing communications via the unsubscribe link in any email
  • Object to processing based on legitimate interest
  • Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at ceo@nexusintelligent.ai. We will respond within 30 days.

11. Sanctions Compliance

The Software is restricted in jurisdictions subject to comprehensive international sanctions, including those imposed by the UN Security Council, the US Office of Foreign Assets Control (OFAC), the European Union, the United Kingdom, and the United Arab Emirates. We verify the country code of your SMS phone number at sign-up to enforce this restriction. It is your responsibility to ensure that your use of the Software complies with applicable laws in your jurisdiction.

12. Children's Privacy

Nexus Charts is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we learn that we have inadvertently collected personal data from someone under 18, we will delete it. If you believe we may have such data, please contact us at the email below.

13. Automated Decision-Making

We employ automated systems for fraud detection (FingerprintJS device matching, Cloudflare Bot Fight Mode, rate limiting) and tier-quota enforcement. These decisions may result in account suspension or service restriction. You have the right to request human review of any automated decision that significantly affects your access to the Software.

14. AI Assistant Connector & API Data

Quant-tier Users may connect an AI assistant (such as Claude, by Anthropic) to their Nexus account through our documented connector interface (based on the Model Context Protocol, "MCP"), or create personal API keys for their own scripts and bots. This feature is strictly opt-in: no data is processed through the connector unless you connect an assistant to your account or create and use an API key.

When you use the connector, the assistant or bot acts with your credentials and can — subject to the per-key permissions you configure — read and, where the tool allows it, create or modify data in your own account only: market data and indicator calculations, your custom indicators, your strategies and backtest results, your trading journal, your price alerts, and your paper trading records. Each request is authenticated, re-checks your subscription tier, and is subject to rate limits and a daily compute budget.

We do not share your data with any third party through this feature. If you connect Claude, the content of your conversation with Claude — including any Nexus data the assistant retrieves on your behalf during that session — is processed by Anthropic under Anthropic's own terms and privacy policy, on the basis of your direct relationship with Anthropic. Nexus does not receive your conversations; we only receive and log the authenticated tool requests made against your account.

API keys are stored as cryptographic hashes (SHA-256) (we cannot recover a lost key), and we keep per-key usage records (timestamps, tool called, request metadata — no market positions or conversation content) for security, abuse prevention, and budget enforcement. You can revoke any key and disconnect any assistant at any time from Settings → Claude & API; revocation takes effect on the next request.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered Users of material changes via email and in-app notice at least fourteen (14) days before they take effect. Continued use of the Software after the effective date constitutes acceptance of the updated policy.

16. Contact

Data protection questions, access requests, or concerns? Contact us at ceo@nexusintelligent.ai.

Nexus Generated FZ-LLC · RAKEZ License No. 5034603 · Registration No. 0000004073681 · United Arab Emirates.

Nexus Charts is trading and quantitative analysis software. It is not a broker, exchange, custodian, financial advisor, or investment service. We do not execute trades, hold funds, or provide personalized financial advice.

Past performance does not guarantee future results.