1. Who we are
This Privacy Notice describes how NuX Holdings™ ("NuX Holdings", "we", "us"), trading as NuX Holdings™ and founded and operated by Arlene R Metts, collects, uses, shares, and protects personal data in connection with the NuX Holdings™ platform and related websites and services (the "Service"). NuX Holdings™ acts as the data controller for the personal data described below.
2. Personal data we collect
- Account & identity: name, work email, organization, role, password hashes.
- Customer data: the content you upload or generate within the Service (transcripts, signal feeds, doctrine layers, configurations).
- Usage & telemetry: pages viewed, features used, queries run, scoring requests, timestamps.
- Device & technical: IP address, user agent, device identifiers, approximate location derived from IP, cookies and similar technologies.
- Communications: messages you send to support, briefing requests, demo signups.
- Payment-adjacent: the fact and metadata of a subscription you hold; the underlying card and billing data is collected and processed by our Merchant of Record, Paddle (we do not store full payment instrument data).
3. How we use personal data
- Create and operate your account and provide the Service (contract).
- Authenticate users, secure the Service, prevent fraud and abuse (legitimate interests / legal obligation).
- Provide customer support and respond to inquiries (contract / legitimate interests).
- Improve features, models, and reliability; analyze aggregate usage (legitimate interests).
- Send transactional emails (e.g. receipts, security notices) (contract / legitimate interests).
- Send marketing about NuX Holdings™ products where permitted, with opt-out (consent / legitimate interests).
- Meet legal, regulatory, tax, and accounting obligations (legal obligation).
4. Who we share personal data with
- Service providers / subprocessors: hosting and database infrastructure (Lovable Cloud / Supabase), AI model providers used to power NuX Holdings™ features, email and customer-support tooling, error and product analytics.
- Merchant of Record: Paddle.com Inc. processes all sales, subscription management, payments, sales-tax compliance, invoicing, and refund handling on our behalf.
- Professional advisers: legal, accounting, and audit advisers under confidentiality.
- Authorities & successors: where required by law, court order, or in connection with a merger, acquisition, or sale of assets.
We do not sell personal data.
5. International transfers
Personal data may be processed in the United States and other countries where we or our subprocessors operate. Where data is transferred from the UK or EEA, we rely on appropriate safeguards including the European Commission's Standard Contractual Clauses or equivalent mechanisms.
6. Data retention
We retain personal data for as long as your account is active and for a reasonable period thereafter to comply with legal, accounting, or reporting requirements (typically up to seven years for billing records). Customer Data is available for export for thirty (30) days following termination of your subscription, after which it may be deleted or anonymized.
7. Your rights
Subject to applicable law (including the GDPR for UK/EEA residents and the CCPA for California residents), you have the right to access, correct, delete, restrict, port, and object to the processing of your personal data, and to withdraw consent where processing is based on consent. You may also lodge a complaint with your local supervisory authority. We respond to verified requests within thirty (30) days. To exercise any right, email privacy@nuxholdings.com.
8. Security
We implement appropriate technical and organizational measures including encryption in transit, encrypted storage, role-based access controls, audit logging, secret management, and the principle of least privilege. No system is perfectly secure; we will notify affected users and regulators of material data incidents in accordance with applicable law.
9. Cookies
We use a small number of essential cookies (authentication, security, CSRF) that are required for the Service to function, plus limited analytics cookies to understand aggregate usage. We do not use third-party advertising cookies. You can control cookies through your browser settings; disabling essential cookies will prevent the Service from working correctly.
10. Children
The Service is intended for enterprise and business use and is not directed at children under 16. We do not knowingly collect personal data from children.
11. Changes & contact
We may update this Privacy Notice from time to time; material changes will be communicated via the Service or by email. Privacy questions: privacy@nuxholdings.com. Legal entity of record: NuX Holdings™.