0 %

Nexuus App – Privacy Policy

Title: Nexuus Privacy & Data Protection Policy
Effective Date: November 28, 2025

This Privacy & Data Protection Policy ("Policy") explains how Nexuus Management LLP ("Nexuus," "we," "us," or "our") collects, uses, stores, discloses, and protects your personal data in compliance with Indian law, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 (and related rules), and applicable international data regulations such as GDPR (EU/UK), CCPA (California), and global best practices.

By using the Nexuus platform ("Platform"), including our mobile app, website, or voice-based services, you consent to the collection and use of your data as described herein.

1. Scope & Jurisdiction

  • This Policy applies to all users globally, with primary jurisdiction under Indian law.
  • Any conflicts shall be resolved under Indian legal standards.

2. Types of Data We Collect

  • Personal Data: Name, email, phone number, gender, age, location, device identifiers.
  • Voice & Biometric Data: Voice recordings, tone, frequency, sentiment, and interaction patterns.
  • AI Interaction Data: Voice audio and text transcripts captured during AI-powered onboarding and coaching sessions with Svara (our AI guide), which are transmitted to OpenAI for real-time speech and language processing.
  • Behavioral & Engagement Data: Clickstreams, session logs, usage patterns, interaction frequency.
  • Transactional Data: Payment methods, purchase history (via secure third-party providers).
  • Technical Data: IP address, device type, browser, OS, app version.

3. How We Use Your Data

  • Deliver and personalize the matchmaking experience.
  • Train and optimize AI models.
  • Monitor and enhance platform safety and moderation.
  • Enforce Terms of Service and detect fraud or abuse.
  • Fulfill legal obligations, such as responding to law enforcement.
  • Generate anonymized data for analytics and product improvements.
  • Power AI voice features via Svara, including processing your voice and text responses to generate personalized guidance and match recommendations.

4. Legal Basis for Processing (GDPR-Inclusive)

  • Consent: You voluntarily consent to data processing by using the Platform. For AI-powered features specifically, explicit in-app consent is obtained before any voice or text data is transmitted to third-party AI services.
  • Contractual Necessity: Data is required to deliver the service you request.
  • Legitimate Interest: To prevent fraud, improve product functionality, and enforce policies.
  • Legal Obligation: Complying with government, tax, or cybersecurity regulations.

5. Data Storage & Retention

  • Data is stored on secure, encrypted servers within India or trusted third-party providers compliant with Indian and international standards.
  • Retention period is limited to what is necessary for business, legal, and safety purposes.
  • Voice data used for AI training may be anonymized and stored in perpetuity for algorithmic development.

6. Data Sharing & Disclosure

  • No personal data is sold.
  • Data may be shared with:
    • Trusted vendors under strict data processing agreements.
    • Government agencies, if legally compelled.
    • Legal or cyber-security advisors in the event of breach or fraud.
    • OpenAI, Inc. (openai.com) — for AI voice and text processing that powers Svara, our AI guide. Data shared includes voice recordings and text transcripts captured during AI sessions. OpenAI acts as a data processor under a Data Processing Agreement. Their privacy policy governs their use of received data: https://openai.com/policies/privacy-policy

7. User Rights (Including GDPR and Indian Compliance)

  • Right to access your data.
  • Right to correct or update inaccurate data.
  • Right to request deletion (subject to legal and contractual limits).
  • Right to data portability.
  • Right to withdraw consent (terminates service).
  • Right to lodge complaints with India’s Data Protection Board or relevant authority.

8. Children’s Data

  • Nexuus does not knowingly collect data from anyone under 18. Any violations will result in immediate deletion upon discovery.

9. Data Security

  • End-to-end encryption on voice and sensitive data.
  • Role-based access controls for staff.
  • Regular penetration testing and infrastructure monitoring.
  • Breach notification systems in compliance with Indian CERT-IN regulations.

10. International Transfers

  • Any cross-border transfer of personal data adheres to adequacy standards and international data protection laws.
  • Where applicable, Standard Contractual Clauses or equivalent safeguards are used.
  • Voice and text data processed by OpenAI may be transferred to and stored on servers in the United States. Such transfers are governed by OpenAI's Data Processing Agreement.

11. Automated Decision Making & AI Transparency

  • Nexuus uses OpenAI's API to power Svara, our AI guide. Svara conducts voice-based onboarding and coaching sessions to help build better connections.
  • Before any personal data (voice recordings or text transcripts) is shared with OpenAI, users must provide explicit in-app consent. The consent screen discloses: (a) what data is shared — voice recordings and text transcripts; (b) who it is shared with — OpenAI, Inc., a US-based third-party company; and (c) how it is used — to generate personalized recommendations and guidance.
  • AI models may generate matches and recommendations based on the data collected.
  • Users are informed and must consent to such automated processing before it begins.
  • No legal decisions are made without human oversight.

12. Data Deletion & Deactivation

  • Upon user request or inactivity beyond a legal threshold, data may be deleted or anonymized.
  • Voice data used in AI may remain anonymized for training purposes.

13. Third-Party Services

  • Nexuus may use tools (e.g., payment gateways, analytics providers) under strict confidentiality and data processing agreements.
  • OpenAI (openai.com) — Used to power the Svara AI voice and coaching experience. Data shared: voice recordings and text transcripts during AI sessions. Users must explicitly consent before data is shared. OpenAI's privacy policy: https://openai.com/policies/privacy-policy

14. Your Responsibilities

  • Ensure data shared is accurate and lawful.
  • Maintain confidentiality of your credentials.

15. Amendments & Notifications

  • This Policy may be updated periodically.
  • Continued use of the Platform constitutes acceptance.

16. Legal Contact

By using Nexuus, you acknowledge full understanding of this Privacy Policy and waive the right to dispute its terms in any jurisdiction outside India. This Policy is structured to maximize compliance and legal defensibility under Indian and international frameworks.