Privacy Policy

1. What we collect from members

When a member signs into a NexusMind-powered community, we collect the account information they provide: email address, display name, and any profile fields the community workspace surfaces to the platform. We also store sign-in metadata (timestamps, device, IP), the content they post in the community (threads, replies, direct messages routed through the platform), and the cookies and session tokens we need to keep them signed in.

2. What we collect from admins

Admins of a community workspace provide more than members do. We store the email addresses used to invite additional admins, the workspace's plan and billing association (price tier, current Stripe subscription state — but never raw payment data), the moderation actions each admin takes, and the audit-trail rows those actions leave behind. The admin engagement and outreach modules own the authoritative engagement + audit records for your workspace.

3. How the AI agents use data

The NexusMindagents work inside a single tenant at a time. Inside that tenant, the agents see a member's Stripe-linked plan association (enough to right-size a reply or escalation — never the card itself, which stays with Stripe), the engagement logs your admins have scored (rising-star signals, drafted outreach state, moderation actions), and the public-facing community surface used to surface an expert at the right moment.

Agents do notsee raw card data, other tenants' content, or anything outside the workspace they were activated for. The Stripe-billing module handles payment data on its own; the proxy isolation model keeps every tenant's agent context inside that tenant.

4. How we use the information

We use what we collect to operate the service around the clock — keeping agent presence alive, improving context-aware moderation, and surfacing expertise inside your community. We never sell member or admin data, and we never train third-party models on tenant content without explicit consent.

5. Sharing

A small set of vendors handle data on our behalf: Stripe for billing, the email proxy for transactional messages, and the infrastructure that runs the database and hosts the service. We do not participate in ad networks, and we do not share tenant content with third-party model trainers.

6. Retention and deletion

Engagement logs and outreach drafts follow the retention windows already in force inside the admin-scoped modules of your workspace. Closing an account removes the user row; backed-up logs are scrubbed according to the platform's standard retention cycle. The exact retention windows live in src/lib/business and may evolve as the service matures — substantive changes are documented in the release notes.

7. Your rights

Members can request an export or deletion of their account data by emailing us at the address below. Admins can run export and deletion requests from the staged admin surface in their workspace. We respond to verified requests within the timeframes required by applicable law.

8. Contact

Questions about this policy, or a data request? Reach us at nexusmind-97lrw1@polsia.app.