Privacy Policy
Last updated: May 7, 2026
VaidehIT Infosec Private Limited ("VaidehIT", "we", "us", or "our") operates NexusOS, a SaaS project management platform. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our services.
1. Information We Collect
Information you provide
- Account details: name, email address, password (hashed)
- Organization details: company name, address, GST/CIN/MSME numbers
- Billing information processed by our payment provider (Dodo Payments). We do not store card numbers.
- Content you create: projects, tasks, client records, invoices, messages, and documents
Information collected automatically
- Log data: IP address, browser type, pages visited, time and date of access
- Usage data: features used, actions taken within the platform
- Cookies and session tokens required for authentication
2. How We Use Your Information
- To provide, operate, and improve NexusOS
- To authenticate your identity and maintain your session
- To process billing and subscription payments
- To send transactional emails (invite links, account approval, invoices)
- To respond to support requests
- To detect and prevent fraud or abuse
- To comply with legal obligations
3. AI Features
NexusOSuses Anthropic's Claude AI to power features like the AI assistant, task breakdown, and document generation. When you use AI features:
- Your prompts and the AI responses are processed by Anthropic's API
- Anthropic's usage policies apply to AI-processed content
- We do not use your content to train AI models
- AI responses are not guaranteed to be accurate and should be reviewed before use
4. Data Sharing
We share your information only in these circumstances:
- Service providers: Trusted vendors such as Neon (database), AWS (file storage), Resend (email), Dodo Payments (billing), and Anthropic (AI). These providers process data only on our behalf.
- Legal requirements: When required by law, court order, or governmental authority.
- Business transfers: In connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations.
- With your consent: For any other purpose with your explicit consent.
We do not sell your personal data to third parties.
5. Data Retention
We retain your data for as long as your account is active. When you close your account, we delete or anonymize personal data within 90 days, except where we are required to retain it for legal or legitimate business purposes (e.g., billing records, tax compliance).
6. Security
We implement industry-standard measures to protect your data, including TLS encryption in transit, encrypted storage, access controls, and audit logging. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (subject to legal retention requirements)
- Export your data in a machine-readable format
- Object to certain processing of your data
To exercise your rights, contact us at privacy@nexusos.app.
8. Cookies
We use strictly necessary cookies for authentication (session cookies). We do not use advertising or tracking cookies. You can configure your browser to reject cookies, but this will prevent you from logging in.
9. Children
NexusOS is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. For material changes, we will notify you via email or an in-app banner. Continued use of the platform after changes constitutes acceptance.
11. Contact Us
For privacy-related questions or requests, contact VaidehIT Infosec Private Limited:
- Email: privacy@nexusos.app
- Website: nexusos.app