Privacy Policy

Effective July 21, 2026

This page is maintained by Nexus (operated by Mike Whiting) to explain what Nexus collects, how it's used, and the choices you have. It is not a certification or legal advice.

1. Who we are

Nexus is a personal knowledge vault operated by Mike Whiting ("Nexus," "we," "us"). Contact: support@nexusbookmark.com.

2. What we collect

  • Account data: email, display name, and authentication identifiers when you sign up with email/password or Google.
  • Your content: bookmarks, URLs, notes, tags, collections, screenshots, and AI-generated summaries you create.
  • Device data: browser/OS type, IP address, and basic logs used for security and debugging.
  • Biometric credentials: if you enable device unlock, the biometric key is stored on your device — we never receive your fingerprint or face data.

3. How we use it

  • Provide the core service: save, sync, search, and display your bookmarks.
  • Generate AI enrichments (summaries, tags, priority, recommendations) from content you save.
  • Detect abuse, prevent fraud, and keep the service reliable.
  • Communicate service-related updates (we do not send marketing email unless you opt in).

4. AI processing

When you save an item or ask a question, the relevant text and metadata are sent to our AI provider (Google Gemini via the Lovable AI Gateway) to produce summaries, tags, and answers. Providers may retain content briefly for abuse monitoring but do not use it to train models on your behalf. Do not save content you are not permitted to process this way.

5. Subprocessors

  • Supabase — authentication, database, and storage.
  • Lovable — hosting and AI Gateway.
  • Google — Gemini AI model provider and OAuth sign-in.

6. Storage and retention

Your data is stored in your account until you delete it. Deleting an item removes it from active systems; encrypted backups roll off within 30 days. You can delete your entire account at any time by emailing support@nexusbookmark.com.

7. Sharing

We do not sell your data. We share content only with the subprocessors listed above to operate the service, or when required by law.

8. Your rights

Depending on where you live (e.g. EEA, UK, California), you may have rights to access, correct, export, or delete your data. Contact us at support@nexusbookmark.com and we will respond within 30 days.

9. Children

Nexus is not directed to children under 13, and we do not knowingly collect data from them.

10. Security

Data in transit is encrypted with TLS. Row-level security limits data in the database to the owning account. No system is perfectly secure — report suspected issues to support@nexusbookmark.com.

11. Changes

We may update this policy. Material changes will be announced in-app or by email. Continued use after the effective date means you accept the updated policy.

See also our Terms of Service.