Nexus collects personal data and usage information when you interact with our platform: (a) Account Information: email address and encrypted password hash (via bcrypt) provided upon registration; (b) Trading & Workspace Data: saved chart layouts, custom indicators, drawing tools, and symbol watchlists; (c) Usage & Analytics Data: pages visited, feature interactions, performance metrics, session duration, device type, browser metadata, and IP-derived approximate geographic location collected via our analytics provider; (d) Cookies & Local Storage: authentication session tokens (JWT) and client-side configuration preferences stored in browser localStorage.
We collect and process your information for the following legitimate purposes: (a) To provision, operate, and maintain the Nexus charting platform; (b) To securely authenticate your account and persist your customized chart layouts across browser sessions; (c) To monitor system health, identify bugs, and improve user experience; (d) To prevent abuse, fraudulent access, and protect the security of our platform and upstream data providers. Legal basis for processing under GDPR Article 6 includes performance of our service contract and legitimate interest in platform security and product improvement.
We partner with trusted third-party service providers who process data strictly on our behalf: (a) PostHog: We use PostHog for web analytics, event tracking, and product performance analysis. PostHog stores anonymous session identifiers and usage telemetry on secure US infrastructure; (b) OANDA: Real-time and historical financial market streaming data is retrieved from OANDA; (c) Infrastructure Providers: Our databases and hosting servers are operated by reputable cloud providers (Aiven for PostgreSQL/Redis, Koyeb for application hosting); (d) Payment Processors: Should paid features be introduced, transactions will be processed directly through Stripe or an equivalent PCI-DSS compliant processor. Nexus never stores credit card details.
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy: (a) Account credentials and saved chart layouts are retained for the lifetime of your active account; (b) Product telemetry and analytics logs stored in PostHog are retained for a maximum of 12 months, after which they are aggregated or purged; (c) If you delete your account, your personal data and chart layouts are permanently removed from our active database within 30 days.
If you reside in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including: (a) Right of Access to your personal data; (b) Right to Rectification of inaccurate data; (c) Right to Erasure ("Right to be Forgotten"); (d) Right to Restrict Processing; (e) Right to Data Portability in a machine-readable format; and (f) Right to Object to data processing. You may exercise any of these rights at any time with no cost by contacting us.
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the CPRA provides you with specific rights: (a) Right to Know the categories and specific pieces of personal information collected, sold, or shared; (b) Right to Delete personal information collected from you; (c) Right to Correct inaccurate personal information; (d) Right to Non-Discrimination for exercising your privacy rights. Nexus does not sell your personal information, nor do we share your personal data with third parties for cross-context behavioral advertising.
To request the deletion of your account, request an export of your saved data, or exercise any statutory privacy rights under GDPR or CCPA, please contact us via our public repository at github.com/Shreyas-Daptare or submit a written request to the project maintainers. We verify your identity via your registered account email and fulfill verified deletion requests within 30 days.
We implement industry-standard technical and organizational security controls to protect your data, including TLS encryption in transit, salted bcrypt password hashing, JWT cryptographic authentication, and parameter sanitization to protect against unauthorized access, disclosure, or alteration.
We may update this Privacy Policy from time to time to reflect technological or regulatory changes. We encourage users to review this page periodically. Continued use of Nexus following updates constitutes acknowledgment and acceptance of the revised policy.