General Privacy Policy

This General Privacy Policy describes how Nexus End2End (“Nexus End2End”, “we”, “us”, or “our”) collects, uses, and shares personal data. It applies to personal data gathered through nexusend2end.com, our web and mobile applications, our hosted platform services, and the conferences, trade shows, webinars, and other events we host or attend.

We encourage you to read this policy in full so you understand what data we hold, why we hold it, and the choices available to you. If you have questions about this policy or how your personal data is handled, contact Nexus End2End at support@nexusend2end.com. Nexus End2End is headquartered in Houston, TX.

This policy applies to:

• Visitors to our websites and users of our applications and platform;
• Attendees and registrants of events we host, sponsor, or participate in;
• Customers and prospective customers, including their authorized personnel;
• Newsletter and marketing subscribers; and
• Business partners, distributors, resellers, and vendors.

This policy expressly does not apply to:

• Third-party websites, platforms, or services that we link to or integrate with, which are governed solely by their own privacy policies; and
• Client-controlled end-user data. Where a customer uploads, enters, or otherwise submits data into their own tenant workspace, that customer remains the controller of that data and their own privacy policy governs it. We process such data only as a service provider on their instructions.

The party responsible for the processing of personal data described in this policy is Nexus End2End, headquartered in Houston, TX. You may contact us regarding this policy at support@nexusend2end.com.

Depending on how you interact with us, we may collect the following categories of personal data:

• Direct submissions: information you provide voluntarily through forms, registrations, account creation, support requests, and correspondence, such as your name, business email address, and telephone number.
• Technical data: data generated automatically when you use our sites and applications, including log data, browser type and version, operating system, referring pages, and timestamps.
• Demographic data: such as general geographic region, language preference, and professional role.
• Company details: organization name, industry, size, business address, and your position or title within that organization.
• Transaction history: records of orders, subscriptions, invoices, payments, renewals, and related billing correspondence.
• Device information: device identifiers, hardware model, screen configuration, and application version.
• IP addresses: collected for security, fraud prevention, and approximate location purposes.
• Behavioral logs: pages and features viewed, actions taken within the platform, session duration, and interaction patterns.

Business purposes

• Communications: responding to inquiries, sending service notices, and providing support;
• Single Sign-On (SSO) account administration, provisioning, and access management;
• Transaction processing: fulfilling orders, billing, invoicing, and collections;
• Product optimization: diagnosing issues and improving performance, usability, and features;
• Security monitoring: detecting, investigating, and preventing fraud, abuse, and unauthorized access; and
• Regulatory compliance: meeting our legal, tax, audit, and recordkeeping obligations.

Commercial purposes

• Administering subscriptions, renewals, and entitlement to purchased modules;
• Targeted business-to-business marketing and related communications; and
• Event management, including registration, attendance, and follow-up.

We process personal data on one or more of the following bases:

• Legitimate interest: where processing supports our reasonable business interests, such as securing our platform and marketing to business contacts, balanced against your rights;
• Contract performance: where processing is necessary to deliver the services or fulfill an agreement with you or your organization;
• User consent: where you have given consent, such as for certain marketing communications or non-essential cookies, which you may withdraw at any time; and
• Legal compliance: where processing is required to satisfy an applicable legal or regulatory obligation.

We retain personal data only as long as necessary for the purposes described above:

• Transaction data: retained for the duration of the contract and for any further period required by applicable legal, tax, or audit obligations;
• SSO accounts: subject to an 18-month inactivity limit, after which inactive accounts are deprovisioned;
• Support chats and application logs: retained for 60 to 90 days; and
• Facility access logs: retained for one year.

We may disclose personal data to the following categories of recipients:

• Internal recipients: personnel and affiliated teams within Nexus End2End who need the data to perform their roles;
• Third-party service providers: including payment processors, cloud hosting and IT infrastructure providers, and analytics providers, each engaged under contractual confidentiality and data protection terms;
• Legal compliance recipients: courts, regulators, or law enforcement where disclosure is required by law or necessary to protect our legal rights; and
• Authorized distributors and resellers: where they are involved in the sale, provisioning, or support of the services for your organization.

We do not sell personal data for monetary consideration.

Personal data may be transferred to, stored in, or accessed from countries other than the one in which it was collected. Where such transfers occur, they are managed securely under standard data protection agreements and appropriate contractual, technical, and organizational safeguards designed to ensure your data receives an equivalent level of protection.

We implement technical, physical, and organizational security controls appropriate to the risk of the processing. These include access controls and least-privilege permissioning, tenant isolation, encryption of data in transit, secured facilities, logging and monitoring, and internal policies governing personnel access to data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We and our providers use cookies and similar technologies to operate and improve our sites and applications.

• Browser preferences: most browsers let you block or delete cookies through their settings; blocking cookies may affect site functionality;
• Functional cookies: required for core operations such as authentication, session continuity, and security; and
• Opt-out management: you may decline non-essential analytics and marketing cookies, and you may contact us at support@nexusend2end.com for assistance with your preferences.

Subject to applicable law, you have the right to access your personal data, edit or correct inaccurate data, request deletion, object to certain processing, request that processing be restricted, and request a copy of the personal data we hold about you in a portable format.

To exercise any of these rights, contact Nexus End2End at support@nexusend2end.com. We may need to verify your identity before acting on a request. If your data resides within a customer's tenant workspace, we may direct your request to that customer as the controller of that data.

We request that you do not submit sensitive personal attributes to us, including biometric identifiers, government-issued identification numbers, health information, or financial account credentials, except where we have specifically requested such information for a defined and lawful purpose.

Our services are business-to-business in focus and are not directed to children. We do not knowingly collect personal data from children under the age of 16. If you believe a child has provided us personal data, contact us at support@nexusend2end.com so we can delete it.

If you are a California resident, the California Consumer Privacy Act, as amended, provides you with the following additional rights:

• Right to know: to request the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we share it;
• Right to delete: to request deletion of personal information we collected from you;
• Right to correct: to request correction of inaccurate personal information; and
• Right to opt out: to opt out of the sale or sharing of personal information. We do not sell personal data for monetary consideration.

You will not be discriminated against for exercising these rights. To submit a request, contact Nexus End2End at support@nexusend2end.com. You may use an authorized agent to submit a request on your behalf, subject to verification.