Privacy Policy

We collect information you provide directly to us when you: create an account, use our services, communicate with our support team, participate in surveys or promotions, or apply for employment. This may include your name, email address, phone number, company name, billing information, job title, and any other information you choose to share. We also automatically collect certain information when you use our services: device information (IP address, browser type, operating system), usage data (pages visited, features used, time spent), performance metrics (query latency, error rates, throughput), and cookies and similar tracking technologies. When you use NexusDB to store and process data, we act as a data processor. The content you store in our databases is your data, and we only process it according to your instructions.

We use the information we collect to: provide, maintain, and improve our services, process transactions and send related communications, respond to your comments, questions, and requests, send technical notices, security alerts, and support messages, monitor and analyze trends, usage, and activities, detect, investigate, and prevent fraudulent transactions and abuse, personalize your experience and deliver relevant content, comply with legal obligations and enforce our agreements. We process your information based on the following legal grounds: performance of a contract with you, your consent (which you may withdraw at any time), our legitimate business interests, and compliance with legal obligations.

We do not sell your personal information. We may share your information in the following circumstances: With your consent: We will share your information when you have given us explicit permission. Service providers: We engage trusted third-party companies to perform services on our behalf, such as cloud infrastructure hosting (AWS, Azure, GCP), payment processing (Stripe), customer support (Zendesk), email delivery (SendGrid), and analytics (Mixpanel). These providers are contractually bound to protect your information. Legal requirements: We may disclose your information if required to do so by law or in response to valid legal requests by public authorities. Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website.

NexusDB takes data security extremely seriously. We implement a comprehensive security program that includes: Encryption: All data is encrypted at rest using AES-256-GCM and in transit using TLS 1.3. We support customer-managed encryption keys (BYOK) for enterprise customers. Access controls: We enforce strict access controls based on the principle of least privilege. All access to production systems requires multi-factor authentication and is logged and audited. Infrastructure security: Our infrastructure runs on SOC 2, ISO 27001, and FedRAMP-compliant cloud providers. We perform regular vulnerability scans, penetration tests, and security assessments. Incident response: We have a dedicated security incident response team that follows industry best practices for detection, containment, eradication, and recovery. Employee training: All employees undergo regular security awareness training and are bound by confidentiality agreements. While we implement robust security measures, no method of transmission or storage is 100% secure. We encourage you to enable additional security features such as multi-factor authentication and API key rotation.

Depending on your jurisdiction, you may have the following rights regarding your personal information: Access: You can request a copy of the personal information we hold about you. Correction: You can ask us to correct inaccurate or incomplete information. Deletion: You can request deletion of your personal information, subject to certain exceptions. Portability: You can request a copy of your data in a structured, machine-readable format. Restriction: You can ask us to restrict processing of your information in certain circumstances. Objection: You can object to our processing of your information for direct marketing purposes. Withdrawal of consent: If we rely on your consent for processing, you can withdraw it at any time. To exercise any of these rights, please contact us at privacy@nexusdb.io. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

NexusDB uses cookies and similar tracking technologies to improve your experience, analyze usage, and provide personalized content. For detailed information about the cookies we use, please see our Cookie Policy. We use the following categories of cookies: Essential cookies (required for basic functionality), Analytics cookies (to understand how you use our services), Preference cookies (to remember your settings), and Marketing cookies (for targeted advertising, with your consent). You can manage your cookie preferences through our Cookie Consent Manager or by adjusting your browser settings.

NexusDB operates globally and may transfer your personal information to countries other than your own. We ensure appropriate safeguards are in place for international data transfers: Adequacy decisions: We rely on the European Commission's adequacy decisions for transfers to certain countries. Standard contractual clauses: For transfers to countries without adequacy decisions, we use Standard Contractual Clauses (SCCs) approved by the European Commission. Binding corporate rules: Our enterprise group has implemented Binding Corporate Rules (BCRs) for intra-group transfers. Data Processing Agreements: We enter into Data Processing Agreements (DPAs) with our customers that incorporate SCCs where applicable. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your data may be transferred to the United States and other countries. We ensure that such transfers are conducted in compliance with applicable data protection laws.

NexusDB's services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information promptly. If you believe that a child has provided us with personal information, please contact us at privacy@nexusdb.io so we can take appropriate action.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational considerations. We will notify you of material changes by: - Posting the updated policy on this page with a new "Last Updated" date - Sending an email notification to the primary email address associated with your account - Displaying a prominent notice on our website or dashboard We encourage you to review this Privacy Policy periodically. Your continued use of NexusDB after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Data Protection Officer: dpo@nexusdb.io Privacy Team: privacy@nexusdb.io Postal Address: NexusDB Inc., 200 Innovation Drive, San Francisco, CA 94105, United States Phone: +1 (555) 123-4567 For users in the European Economic Area, you may also contact our EU representative or lodge a complaint with your local data protection authority. We are committed to resolving your privacy concerns and will respond to your inquiry within a reasonable timeframe.