Last updated: November 3, 2026. This is an English translation; the Spanish text prevails.
What changed in this version (the previous one is from October 29, 2026):
- we added the activity log: the important events of your account, your payments and coins, what happens on official servers and everything the NEXUS team does are written to a log that no one can change or delete without it showing, not even us. You can see it in Settings > Security > Account activity (sections 2, 3, 4, 6, 7 and 8);
- each entry keeps the IP address and device it came from for 1 year; the details for 1 year, and those of payments, coins and what the NEXUS team does for 5 years (section 7);
- on official servers, if a moderator kicks you, bans you, changes your roles or deletes a message of yours, you see it with their username, but not their IP address (section 4);
- an account whose email was never confirmed is deleted automatically after 30 days, which frees its username and email (section 7).
This policy explains what personal data ZENISO SOFTWORKS ("ZENISO", "we") processes when you use NEXUS, what for, who we share it with and what rights you have. We comply with Costa Rica's Law No. 8968 on the Protection of Individuals regarding the Processing of their Personal Data.
ZENISO SOFTWORKS, Costa Rica. Privacy contact: legal@zenisosoftworks.com.
Your account data:
- username, email, password (we only store an Argon2id-hashed digest, never the password), display name and, if you add them, your profile picture, banner, status, bio, location and links;
- your declared birth year and the versions of these documents you accepted, with the date;
- two-step verification: the secret (encrypted), digests of the recovery codes and, if you choose "remember this device", a device name (operating system and computer name);
- sessions: we only store a digest of the session token and when it was last used.
What you do on NEXUS:
- friends, requests and blocks;
- direct messages and their reactions, and the attachments you send. If you turn on end-to-end encryption (section 4), we only store an encrypted version of those messages that we cannot read;
- if you turn on end-to-end encryption: the public keys of your account and of each of your devices (computers, phones or browsers where you turned it on), the signed list of those devices with their platform and when each one was used (your contacts do not see the platform), one-time keys for starting conversations, the messages one device leaves for another to pass on keys (encrypted), your recovery box (encrypted with your recovery code, which we do not have), an encrypted backup of your conversations' keys and, if you move your old history to encryption, an encrypted copy of that history;
- the group direct messages you are in (up to 10 people): who is a member, who joined, left or removed someone and when, and its name (encrypted);
- messages in the NEXUS servers you take part in;
- your posts in servers' media channels: up to 4 photos per post, a title, a caption, tags and, if you add one, an attached video. Before it is stored, each photo is checked and rebuilt from scratch as a new JPEG of up to 2048 pixels per side, with a thumbnail and without its metadata (such as where it was taken); the original photo is not kept. On NEXUS servers this is done by the NEXUS Sanitizer (SANITIZADOR), our image-checking server in Finland, which has no access to our database or to your account data: it checks that it is a real image in an accepted format (PNG, JPEG, WebP or GIF) and within the limits (up to 8 MB and 40 megapixels), and anything that does not open as a real image is rejected; then it decodes it to pixels and encodes it again as a new JPEG, without anything hidden in the file (an animated GIF becomes a still image). Only that clean version is stored on our servers. On a dedicated server, see section 4. Photos can only be seen by whoever can see that channel at that moment: opening them requires your session, and if you can no longer see the channel (your permission is removed, or you are kicked or banned) you stop seeing them within a minute. On NEXUS servers, photos you upload but do not post are deleted after 24 hours;
- your status (online, away, do not disturb or invisible) and, if "activity" is on (it is on by default and you can turn it off in My profile), the name of the game or song you are using; detection happens on your PC and only that name reaches us;
- in the Market: the modules you publish (their code, images, page, repository, branches, commits, pull requests and comments), the licenses you accept, the reviews you write, the modules you install and your purchases, coins and transactions;
- if you link Patreon: your Patreon identifier and the history of your membership payments (amount, currency, date, status and tier), including refunds, chargebacks and those Patreon marks as fraud, and the coins each payment credited. We do not receive or store your card data;
- the gift codes you redeem or give, and the membership you gift with coins;
- if you sell in the Market: your public creator profile, your sales, your held coins and, if you ask to be paid through PayPal, the PayPal account you give us and the payment record;
- if you host a dedicated server: that server's public and local IP address, its owner account and the credential the server uses to connect to NEXUS;
- if you use NexusBridge (the virtual network for joining servers): the networks you create and belong to, your address inside them and your computer's public and local IP addresses, which we pass on to the other members of the network so they can connect to you directly;
- the reports you make and the ones other people make about you or your content, with a copy of what was reported. In an end-to-end encrypted chat we do not have that copy: the reporter's app sends it, decrypted, with what that person chooses (the message, up to 20 earlier messages as context and, if they want, the file) and a cryptographic proof that the message was sent that way. Someone who left a group can report what they received while they were a member;
- the problems and suggestions you send us from the app (with the error log, if you attach it) and, only if you allow it, the app's error reports.
Bringing your friends:
- your invite link (a code you can change whenever you want) and, if you sign up with someone else's link, who invited you and whether it was their personal link or a server's; if you join a NEXUS server through a link, who sent it to you. We give no rewards for inviting;
- if you look for your Steam friends: you sign in to Steam (Valve) and our server asks Steam for your friends list with the Steam Web API key. That list is used on the spot and is not kept: nothing remains about your Steam friends who are not on NEXUS. From your Steam account we only keep a fingerprint (an HMAC with a secret key that lives outside the database) so that your Steam friends who use NEXUS can find you, if you leave that on; never your Steam identifier in the clear. The result (the NEXUS accounts we found) is kept for 15 minutes so the app can show it;
- «people you played with»: it is off by default and you turn it on in Settings > Your account > Friends. Only while both people have it on, on official NEXUS servers our server counts the minutes they spent together in a voice channel (not muted and deafened at the same time, in channels of up to 10 people, and not counting whoever is Invisible); nothing is counted for anyone who has not turned it on. Only the pairs of accounts and each day's minutes are kept, for 15 days. With that we suggest people who played with you for 30 minutes or on 2 days in the last 2 weeks, if you share a server, are not friends and have not blocked each other. We never show how long or when you played. If you turn it off, you stop appearing in other people's suggestions and seeing yours, we stop counting and we delete the minutes already counted with you (any we could not delete at that moment are no longer used and expire after 15 days). If you dismiss a suggestion, we keep a note not to show it again for 90 days.
The activity log:
- about your account: when it was created, each sign-in and sign-out, changes to your password, your email (we keep only the first letter and the domain, like "a***@gmail.com"), your username and two-step verification, email verification, and when you link or unlink Patreon;
- about your money: each coin movement, each purchase and its reversal, the gifts you give and receive, your memberships and each Patreon charge and its reversal, with their amounts;
- on official NEXUS servers, what their owner and moderators do: creating, renaming, transferring and deleting the server, and changing its invite, icon and banner; creating, changing and deleting roles, channels and categories, and their permissions; giving and removing roles, and kicking, banning and unbanning members; and messages deleted by a moderator, without their text. Each entry says whose it is (the person it happened to, or the owner) and who did it;
- if you are part of the NEXUS team: changes to your role in the team and everything you do in the team's tools, including just viewing data, with the route, the numbers of what you touched and the short fields you sent (never passwords, codes, keys or files);
- for each entry caused by a request to our servers: the IP address, the program and system it came from (for example, "NEXUS 2.0.84 on Windows") and the request's route.
Each entry carries the fingerprint of the previous one: none can be changed, removed or reordered without it showing.
Technical data:
- your IP address, which we use on the spot to limit abuse, choose the nearest relay for voice and video, choose the region of the NexusBridge networks you create and test whether your server is reachable; if you fail to redeem a gift code, we keep that attempt's IP for 1 day, to stop people who try codes. We get each IP's country from a database we keep on our own servers (see section 12), without querying external services. Your IP also appears in the servers' logs (see section 7) and in the activity log (above);
- the servers' technical logs (requests received and emails sent, with the destination address).
We do not use analytics, advertising or tracking tools, and we do not use cookies. The app's error reports stay on your PC and are only sent if you allow it (the app asks you, and you can change it in Settings > Help and feedback); your user folder and email addresses are removed before sending.
Voice: noise suppression (WebRTC's and, on Windows, also RNNoise) and the microphone gate are processed on your device. We do not record or store voice audio, or camera or stream video: they only go through our servers to reach the others (section 4).
The graphics card test: the initial setup offers an optional test of your graphics card and codecs, which you can run again from Settings. Its results are used on your device to recommend stream quality settings. Before it starts, the app shows you a notice with what is sent: if you tap «Start benchmark», you agree to send anonymous results; if you tap «Skip», nothing is sent. You can turn off future uploads in Settings at any time. What is sent is: graphics card vendor, model, driver and memory, processor model and cores, operating system version, display resolution and refresh rate, whether each codec started or which error it gave, and the measured frames per second and latency, with a random identifier for that installation. They are not linked to your account and we do not store your IP. We use them to improve the codecs and choose the default settings.
The video compatibility test: on Windows, the first time you are about to share your screen and whenever your graphics card or its driver changes, the app spends a few seconds testing which video formats (AV1, NXR2 and VP8) work on your PC, so it can use the best one everyone watching can play. The result is kept on your device. Only if you agreed to send the graphics card test results (and did not turn that off in Settings) is this result sent too, without your account and without storing your IP: your graphics card vendor and model, the NEXUS version and, for each format, whether it worked or which error it gave, how many frames were shown, and the measured latency and image quality, with the same random identifier for that installation. The driver is not sent.
- Providing NEXUS: your account, chat, friends, servers, streaming, voice, NexusBridge, the Market and membership.
- Protecting accounts and the platform: verifying your email, two-step verification, limiting abuse, reviewing modules, images and attachments (those in an end-to-end encrypted chat, only if the recipient asks or someone reports them) and handling reports.
- Keeping the activity log: so you can see what happens with your account, so we can investigate account takeovers, fraud, abuse and complaints about payments or about moderation on official servers, and so there is a record of everything the NEXUS team does.
- Not losing your data if a server fails: a replica of the database and encrypted backups.
- Fixing NEXUS: the problems, suggestions and error reports you send us.
- Sending service emails: verification, password change or recovery, and security notices. We do not send advertising.
- Meeting legal obligations, such as accounting ones for payments.
We do not sell your data or use it for advertising. The basis for processing it is your consent when accepting this policy, what is needed to provide the service you asked for, and compliance with the law.
With other users, what you choose to share: your public profile, your messages with their recipients, your modules, repositories, comments and public reviews, and your status with your friends. If you are online, members of the servers you share with them see it too (on a dedicated server, the server gives its members a group key that our relay uses to group them); in Invisible nobody sees you online. When a voice call, the camera, a screen share or a NexusBridge network connects two computers directly, each one sees the other's IP address.
The activity log is seen by you and by the NEXUS team. In Settings > Security > Account activity you see your entries, except the NEXUS team's, with the IP address and device they came from. If someone else did it, you don't see their IP address or device. On official servers you see their username (for example, "You were kicked from “X” · by beto"), and the moderator sees what they did (for example, "You kicked carla from “X”"). The NEXUS team sees the whole log, and what they look at there is logged too.
With providers that serve us (processors), only for that:
- InMotion Hosting (Los Angeles, United States): the main server, with the database and files, the NexusBridge server and voice and video relays.
- Netrouting (Miami, United States): a full replica of the database, kept up to date at all times so that no data is lost if the main server fails; and voice, video and NexusBridge relays.
- Hetzner Online (Germany and Finland): in Germany, the encrypted backups (Hetzner does not have the keys to read them), voice, video and NexusBridge relays, and the monitor that checks from the outside that the service works; in Finland, the automatic review of modules, images and attachments (the SANITIZADOR, with the ClamAV antivirus).
- Zoho (Zoho Mail and ZeptoMail): sending emails and our contact mailbox.
- Cloudflare: the DNS of our domains and our website.
- GoFile (WOJTEK SAS, France, with data centers in France and the United States): a third copy of the backups and, for up to 30 days, the copy of direct message attachments that can no longer be downloaded. Both leave our main server encrypted and GoFile does not have the keys to read them. Attachments in an end-to-end encrypted chat are already encrypted with keys that only the conversation's devices have: neither GoFile nor we can open them.
- Patreon, if you link your account.
- Valve (Steam), if you look for your Steam friends: you sign in on their page and our server asks them for your friends list.
Your computer also connects directly to:
- if you use 2.0.26 or an earlier version, Google's STUN servers, which see your IP when setting up voice calls and the camera. Since 2.0.28, NEXUS uses no third-party STUN servers: on the local network computers connect directly, and over the internet NEXUS's own STUN and TURN servers are used (NEXUS's, or those of whoever hosts the dedicated server, who also sees your IP);
- Steam's content network, to download game covers;
- Mojang's servers (Microsoft), only if you use the Minecraft panel: to download the list of versions and the Minecraft server;
- GitHub (Microsoft), only if you install the virtual gamepad driver (ViGEmBus) from the app: to download its official installer;
- VirusTotal, only if you add your own key in Settings: the digest (hash) of the files you receive or send is sent and, if you choose to scan an unknown one, the file. For attachments in an end-to-end encrypted chat the app does not query VirusTotal.
We share data with authorities only when the law requires us to. From an end-to-end encrypted chat we can only hand over what we have: the metadata in section 4 and encrypted data we cannot open. We do not have, and cannot obtain, your devices' private keys or your recovery code. The list of your devices is signed by your account with a key we do not have, so we cannot add a device to it with that signature. What someone reported to us we have like any other report, and we may hand it over if the law requires us to.
Attachments and the SANITIZADOR: every file you send in a direct message or on an official NEXUS server goes, before it is stored, through the SANITIZADOR, our review server in Finland. There we check what type of file it really is (by its content, not by its name), it is scanned with an antivirus (ClamAV) for viruses and malicious content and, if it is a video, it is rebuilt into a clean copy, without hidden data or metadata and without re-encoding it. What is stored and delivered is that checked version (for videos, the clean copy). If the file looks like malware, or its type is not what its name says (for example, a program disguised as a video), it is not sent. Programs and scripts can be sent, but the app marks them and warns you before opening them. If a file could not be scanned with the antivirus (because it is encrypted, because it holds more than the antivirus can look into, or because the antivirus was not available), the app marks it «Not checked». The SANITIZADOR keeps nothing: the file is there only while it is checked and is deleted when that is done. Rebuilding a video removes container tricks and anything hidden in it, but it does not make a video built on purpose to attack a player harmless, and no antivirus catches everything: only open what you expect from someone you trust. What goes directly between two computers (on the local network or through NexusBridge) never reaches our servers: there only your app checks the file type.
In an end-to-end encrypted chat, files do not go through the SANITIZADOR when they are sent: we only receive and store encrypted bytes, their size rounded up and the time; the name, type and thumbnail travel inside the encrypted message. After you download it, your app checks what type of file it really is and warns you if it is a program or if its type does not match its name. If you receive a file and want it checked with an antivirus, you can ask for it: your app sends the decrypted file to the SANITIZADOR, which sees it while checking it and does not keep it, and the sender is not told. We keep the result of that check together with the file's digest (SHA-256), to show it to another member of the conversation who asks to check the same file.
If someone reports a file from an encrypted chat and chooses to send it, the file arrives decrypted with the report and goes through the SANITIZADOR before the team that reviews reports sees it. Only the NEXUS staff who review reports can open it, with two-step verification, and each time they open it is logged.
Relays forward traffic when it cannot go directly between computers, and the closest one is used: for voice and the camera, the one closest to each person; for screen sharing, the one closest to whoever is sharing; for NexusBridge, the one in the network's region. Relays see IP addresses and how much traffic goes through. NexusBridge is encrypted between the computers, so relays cannot see its content. On the local network, on dedicated servers that do not send everything through the server, and in NexusBridge, voice and the camera (WebRTC) are also encrypted between the computers. On official NEXUS servers, voice goes through our media server (SFU), and the camera can go through it too: they are encrypted in transit between your device and that server, which forwards them to the others. We do not record or store them, but it is not end-to-end encryption. Screen sharing goes through NEXUS's own streamer, not WebRTC: it is encrypted too, and our video relays forward it without decrypting it.
The camera is transmitted with WebRTC. To connect, the session description and the network candidates go through the server you are connected to: NEXUS on official servers, or the computer of whoever hosts a community server (on the local network, they go directly between the computers). The video travels encrypted (DTLS-SRTP). Directly between the participants or, if the network does not allow it, through a relay server (TURN) of NEXUS or of whoever hosts, it is end-to-end encrypted and the TURN forwards it without being able to see it. On official NEXUS servers it can go through our media server (SFU): there it is encrypted in transit, not end to end, and we do not record or store it. That encryption is agreed through the server, so you are relying on it. When connecting, the other participants can see your IP address, just like with voice. With "Protect your IP" on, the camera is neither sent nor received.
Server messages (official, dedicated and local network) are stored without end-to-end encryption, protected in transit with TLS.
Direct messages can be end-to-end encrypted. Encryption is turned on per account, in Settings > Your account > End-to-end encryption, and a chat is encrypted when both people (or every member of a group) have it on. In an encrypted chat, the text, quotes, reactions, files (with their name, type and thumbnail) and the group's name are encrypted on your devices and can only be decrypted by the devices of the people in the conversation. We cannot read them, and the NEXUS team that reviews reports only sees what someone reports to it (section 2).
What we do see from an encrypted chat (metadata): who writes to whom and when; in a group, who the members are and who joins, leaves or removes someone; the approximate size of each message and file; which device sent each thing; how many devices each account has, their platform and when they were used; that something is a reaction and which message it is on (not which one it is); message requests, blocks, «typing…» and deletions; when and from which device your recovery box was opened; and the IP address of each request, as in the rest of NEXUS.
Not end-to-end encrypted: direct messages with someone who has not turned encryption on; those sent before turning it on (the app marks them «Not end-to-end encrypted»), which stay stored as before unless you move them to encryption (section 7); your profile, friendships and status; voice channels; and server messages. NEXUS DROP, sending files between devices, was already end-to-end encrypted.
To check that you are talking to the right devices, you can verify a contact by comparing 7 emojis or a security number. If someone's security key changes, the app warns you.
Streams are encoded on your device (with your graphics card's or phone's encoder, or with NEXUS's own codec) and travel directly or through relays. On official servers they go through our relays, with your tier's maximum quality; on the local network and on dedicated servers they go directly or through the host's computer.
A dedicated server runs on its host's computer, not on ours: that computer keeps the messages, files, logs and IP addresses of those who join, and the host answers for that data. We only see what the server sends to NEXUS (its owner account, its IP and, if it publishes one, its Server Browser listing). Whoever hosts a dedicated server chooses whether its attachments are checked by the SANITIZADOR: if they turn it on, each file goes to the SANITIZADOR only to be checked, comes back to the server's computer and NEXUS keeps nothing; if they turn it off, the file never leaves that computer, which checks its type and rebuilds videos, without an antivirus.
Photos in its media channels are also stored by the host's computer, never by our servers, and only those who can see that channel can view them. The host chooses who checks them before they are stored. With "Check photos with NEXUS" on (the default): 1) the photo goes from the dedicated server to the NEXUS Sanitizer (SANITIZADOR), our image-checking server in Finland; 2) it is checked to be a real image in an accepted format (PNG, JPEG, WebP or GIF) and within the limits (up to 8 MB and 40 megapixels): anything that does not open as a real image is rejected; 3) it is rebuilt from scratch: decoded to pixels and encoded as a new JPEG of up to 2048 pixels per side, plus a thumbnail, with no metadata or anything hidden in the file; 4) only that clean version goes back to the dedicated server, which stores it; nothing stays on the Sanitizer: we keep neither the photo nor the original, only the technical log of each request, without the image. With that option off, photos never leave the host's computer: the same check and the same rebuild happen on that computer, isolated from the rest of the server, and we never see them. Changing the option applies to new photos. The rest of each post (the title, caption, tags, attached video and replies) is also kept by the host's computer.
In NexusBridge, your account has to be approved to join a network, and addresses inside the network are assigned by our NexusBridge server.
Your data is stored and processed outside Costa Rica:
- in the United States: the main server (Los Angeles) and the replica (Miami) hold all the data in this policy;
- in Germany: the encrypted backups;
- in France or the United States (GoFile's data centers): the third encrypted copy of the backups and the encrypted copy of direct message attachments, for up to 30 days (for end-to-end encrypted chats, a copy we cannot open);
- in Finland: images, modules and attachments, while they are reviewed (those in an end-to-end encrypted chat, only when the recipient asks to check them or someone reports them);
- the voice, video and NexusBridge relays are in Los Angeles, Miami and Germany.
The other providers in section 4 may process data in other countries. By accepting this policy you consent to these transfers, always with the measures in this policy.
We use encrypted connections (TLS), store only digests of passwords and tokens, encrypt the two-step verification secret and, on Windows, the app stores your session encrypted with the system's protection. End-to-end encryption of direct messages uses the Olm and Megolm protocols (with the vodozemac library), and files are encrypted with AES-256-GCM. Private keys are created on your devices and stay there: they never reach us. Between our servers, the database replica and the relays' control traffic travel through encrypted tunnels, and backups are encrypted before they leave the main server. The database does not allow the activity log to be changed or deleted (only emptying what has expired), and its chain of fingerprints is checked against a copy kept outside our servers, without any of your data. No system is completely secure: if we detect an incident affecting your data, we will notify you and report it as the law requires.
We keep each piece of data only as long as it is needed for what this policy says. What you delete (your account, a server or channel of yours, a review, your profile data) is deleted right away from the database and its replica, and from the backups when they rotate. Messages are not deleted one by one: they are deleted with the conversation, the channel, the server or the account.
- Your account and profile: while your account exists. An account whose email was never confirmed is deleted automatically once 30 days have passed since it was created and since the last confirmation link sent to it, if that link has expired: that frees its username and email. Deleting it deletes them right away, from the replica too, together with your direct messages (including those of the one-to-one conversations you took part in), your server messages, your friendships, your blocks and the NEXUS servers you created. Your picture, your banner and the permanent images you sent leave our servers' disks in less than a day; other attachments, when their time limits are up (below). What is part of an open report is kept until it is resolved.
- Direct messages: while both accounts of the conversation exist. In a group, while the group has members; the messages of someone who deletes their account are deleted with it, and other members' messages stay. End-to-end encrypted content is kept encrypted, for the same time.
- The messages one device leaves for another to pass on keys (encrypted): until the other device receives them, and 30 days at most. The public keys and the list of your devices: while you use encryption; a device you remove, or that has gone 7 days without being confirmed, is removed. Your recovery box and the key backup: while your account exists.
- Direct messages from before encryption (in the clear): like other direct messages. If both people move their history to encryption, we may delete the plaintext from our servers and keep only their encrypted copies. Before we start deleting the plaintext of direct messages, we will announce it in the app and in a new version of this policy, at least 30 days in advance.
- Messages in NEXUS servers: while the channel, the server and the account of whoever wrote them exist. Deleting a channel or a server deletes its messages right away. When they are deleted (with the channel, the server or the account), the quick view of each channel's latest messages catches up in less than two hours.
- Photos in media channels: on NEXUS servers, while the post exists. When the post is deleted (by its author or by a moderator), or the channel, the server or the account that uploaded the photos, they stop being shown right away and their files leave our servers' disks within a day. On a dedicated server, photos are on the host's computer: they are deleted from there when the post or the channel is deleted, and photos that were uploaded but never posted, after 30 minutes. None stay on our servers. A post's attached video expires like other server attachments (on NEXUS servers, up to 7 days). Uploaded photos that were never posted: 24 hours.
- Attachments: in direct messages, they can be downloaded for the time you choose when sending them (up to 30 minutes); after that they cannot, and the file is deleted from our servers within 30 more days at most; its encrypted copy at GoFile, within the same time. Images you mark as permanent, while the conversation exists. In an end-to-end encrypted chat there are no permanent images: every file expires like the rest. In servers, the time you choose, up to 7 days. What is stored is the version checked by the SANITIZADOR, which keeps no copy: in Finland the file is there only while it is checked.
- The NexusBridge networks you created: until you delete them from the app.
- Your sessions: until you sign out or 30 days go by without using the app on that device. "Remember this device", 30 days.
- App notifications: 90 days after you read them, and 1 year at most.
- If you host a dedicated server: its IP address, until 90 days after it last announced itself to NEXUS.
- The IP address of a failed attempt to redeem a gift code: 1 day.
- Who invited you: while your account exists. Your invite link, until you change it or delete your account.
- Your Steam account's fingerprint: until you unlink it in Settings or delete your account. The result of a Steam friends search: 15 minutes.
- The «people you played with» minutes: 15 days, or until you turn the option off. Suggestions you dismiss: 90 days.
- The servers' technical logs: up to 90 days.
- The activity log: each entry's IP address, device and route, 1 year. The details (what changed, amounts, names), 1 year; those of money and of what the NEXUS team does, 5 years. After that, only each entry's type, date and the internal numbers of the accounts and the server remain, so the chain can still be checked. If you delete your account, the IP address and device of all your entries, and of what you caused in other people's entries, are emptied right away, together with the details of your account's and servers' entries; the details of money and of what the NEXUS team did with your account stay for their 5 years. If you moderated an official server, what you did stays in the other person's log, with your username, until its 1-year limit.
- Encrypted backups rotate by themselves: deleted data leaves them within 2 months (the database) and within 7 months (images and other files).
- Reports: with the copy of what was reported (in an encrypted chat, what the reporter sent, and the file if they sent it), as a moderation record, until 1 year after they are resolved. If you delete your account, the ones you made are kept without your name.
- Problems, suggestions and error reports: until 1 year after the last activity (when it arrived, happened again or we handled it). If you delete your account, they are no longer linked to it, but the contact you wrote in a report stays with the report.
- Patreon payment history and PayPal payouts to creators: for as long as accounting law requires, even after the account is deleted.
- The anonymous results of the graphics card test and of the video compatibility test (if you agreed to send them): since they are not linked to your account or your IP, we cannot find yours to delete them; turning uploads off in Settings stops any more from being sent.
- What is part of a module's record (the accepted license with the author's name, and commits and comments in other people's repositories): it is kept when you delete your account, because it is part of that module and of other people's rights, without being linked to your account anymore.
You can ask for access to your data, correct it, delete it, object to processing and withdraw your consent. Many things you can do directly in the app (your profile, your password and deleting your account in Settings > Security); for the rest, write to legal@zenisosoftworks.com from your account's email. We answer within 5 business days at most. If you are not satisfied, you can file a complaint with Costa Rica's Agency for the Protection of Inhabitants' Data (PRODHAB).
You can see your activity log in Settings > Security > Account activity, and you can ask us for a full copy. It cannot be deleted before its time limits (section 7): it is useful for investigating an account takeover, fraud or a complaint precisely because no one can touch it. When you delete your account, what section 7 explains is emptied.
NEXUS is for people aged 19 or older. If we learn that an account belongs to a minor, we close it and delete its data.
The app keeps on your PC or phone:
- your session, encrypted (on Windows, with the system's protection; on Android, with a key that never leaves the phone). It is deleted when you sign out. If you chose "remember this device", that mark is encrypted too and expires after 30 days;
- a copy of your friends, your servers and the latest 200 messages of each conversation, and your contacts' profile pictures, to open faster. It is deleted when you sign out;
- your settings (with your VirusTotal key, if you added it), local network chats and files, the files you download, your modules' data, the results of the graphics card test and of the video compatibility test, and the error log. They stay until you delete them;
- if you host a dedicated server, its data and logs, in the server's folder. They stay until you delete them;
- if you turned on end-to-end encryption: that device's private keys and the encrypted messages it has already decrypted, stored encrypted with a key the system protects (on Windows, with the system's protection; on Android, with a key that never leaves the phone; in the browser, with a key the page can use but not read). They are deleted when you sign out. Encrypted files you download stay decrypted in your Downloads folder, like any download.
You keep your recovery code. If you lose or delete all your devices and do not have the code, nobody can recover your encrypted messages: neither you nor us. You can start over with a new key, but earlier encrypted messages will not be readable on your new devices, and your contacts will see that your security key changed. Signing out on a device deletes its keys: if it was your only device, you will need the code to read your messages again.
On Windows, uninstalling NEXUS removes the program, but your data stays in the NEXUS folders inside %APPDATA% until you delete them. On Android, uninstalling the app deletes what it saved (except what you downloaded); if Android backup is on, the system may keep a copy of this data in your Google account, although neither your session nor the encryption keys can be opened on another phone.
If we change this policy in an important way, NEXUS will show it to you and ask you to accept it. The current version is always in the app and at nexus.zenisosoftworks.com/nexus/legal/privacy.
We get the country of an IP address from the IP to Country Lite database by DB-IP (IP Geolocation by DB-IP: https://db-ip.com), which we use under the Creative Commons Attribution 4.0 International license (https://creativecommons.org/licenses/by/4.0/).
legal@zenisosoftworks.com · ZENISO SOFTWORKS, Costa Rica.