Privacy Policy

Who We Are ClearPoint Nexus provides certified AI skills, workflow bundles, subscriptions, self-hosted agents, hosted agents, and related AI workflow products for AI-enabled work platforms and developer tools. Legal entity: ClearPointLogic LLC Trade name: ClearPoint Nexus State: Tennessee, United States Contact: [email protected]

What Information We Collect We collect only the information needed to operate the website, provide accounts and purchases, maintain license records, support customers, and improve our products.

Account and Profile Data When you create a Nexus account or complete a purchase, we may collect: - Full name - Email address - Company or organization name, if provided - Billing address and related billing details - Account credentials and authentication information - Account preferences and administrative settings Payment card details are processed by Stripe. Nexus does not store full payment card numbers.

Purchase, Subscription, and License Records We retain records of transactions and license activity, including: - Products purchased, including skills, bundles, subscriptions, self-hosted agents, hosted agents, and related products - Purchase date and price paid - Subscription status and renewal history - License assignments, reassignments, activations, and account access records - Transaction records required for tax, accounting, legal, dispute, and business-continuity purposes These records may be maintained in our billing, customer relationship management, and internal operations systems.

Usage and Access Data We may collect limited records showing which products have been downloaded, accessed, activated, or assigned through your account. For downloadable or self-hosted skills and agent products, Nexus does not receive or store the prompts, inputs, outputs, or detailed interactions you run inside your own AI tools or environments. For hosted, managed, or cloud-delivered Nexus services, we may process the information you submit to operate the service, provide support, secure the product, and fulfill the requested workflow. Any such processing will be limited to the service being provided and any applicable product-specific terms.

Website and Technical Data When you visit the Nexus website, we collect limited technical data through Plausible, our website analytics provider. Plausible is a cookieless analytics tool. It does not set cookies, does not store your IP address, and does not create a persistent identifier that tracks you across days, sites, or devices. The data is aggregated and is not used to identify individual visitors. This website analytics data may include: - Page visited - Referring source - Browser type - Operating system - Device type - Approximate location such as country, region, or city, derived from IP address before the IP address is discarded We do not run advertising or retargeting trackers on our website.

How We Use Your Information We use information for the following purposes: - Process and fulfill purchases: manage checkout, billing, subscriptions, receipts, license delivery, and product access. - Manage your account: authenticate your identity, maintain sessions, manage licenses, and support account administration. - Communicate with you: send purchase receipts, license confirmations, renewal notices, product notices, support responses, legal notices, and important policy updates. - Provide and secure products: operate Nexus products and services, detect misuse, protect account security, troubleshoot issues, and maintain product reliability. - Improve products: use aggregated or de-identified information to understand product adoption, improve catalog quality, and guide product development. - Analytics: understand overall website traffic and improve the site and products using aggregated, cookieless analytics that do not identify individual visitors. - Enforce terms: investigate and act on violations of applicable product terms, acceptable use rules, or legal requirements. - Legal, tax, and compliance: meet obligations under applicable law, respond to legal process, maintain records, and protect the rights, property, and safety of Nexus, ClearPointLogic LLC, our customers, and others.

How We Handle AI Inputs and Outputs Nexus products may be delivered in different ways, and our handling of AI inputs and outputs depends on how the product is used.

Downloadable or Self-Hosted Skills and Agents For downloadable or self-hosted Nexus skills, bundles, and agent products, Nexus generally does not receive, log, store, or retain the prompts you enter into your own AI tools or the outputs generated inside your environment. Your interactions may be processed by the AI provider, runtime, developer tool, or infrastructure you choose to use, such as Anthropic, OpenAI, Google, OpenClaw, Claude Code, Codex, Gemini, or similar services. Those providers have their own privacy policies and data-handling practices.

Hosted or Managed Nexus Services If you use a hosted, managed, cloud-delivered, or support-assisted Nexus service, the information you submit may be processed by Nexus infrastructure and/or third-party AI model providers as needed to perform the requested service. Where hosted processing applies, we use commercially reasonable safeguards and limit processing to the purposes of delivering, securing, supporting, and improving the service, subject to any applicable product-specific terms.

No General Prompt Repository Nexus does not maintain a general repository of customer prompts and AI outputs for unrelated training or resale. We may use aggregated or de-identified operational data, such as product categories accessed or product performance patterns, to improve catalog quality and service reliability, provided that such data does not identify individual customers or contain prompt content.

Sharing Your Information We do not sell your personal information for monetary consideration. We also do not run advertising or retargeting trackers on our website. We share information only as needed for the following purposes:

Payment Processing We use Stripe to process payments, manage subscriptions, issue receipts, and support billing-related functions. Nexus transmits billing information to Stripe as needed to process purchases and manage subscriptions. Stripe's privacy policy governs Stripe's handling of payment data. Nexus does not store full payment card details.

Analytics Provider We use Plausible for website analytics. Plausible processes limited technical data to produce aggregated traffic statistics. It does not use cookies, does not store IP addresses, and does not build profiles of individual visitors. Plausible processes and stores this analytics data on infrastructure in the European Union.

Customer Relationship Management and Business Operations We use Attio and related internal business systems to manage account, purchase, license, subscription, and customer-support records.

Email Delivery We use Resend to send transactional emails such as purchase receipts, license confirmations, renewal notices, support messages, and account-related notices. Resend processes recipient email addresses and the contents of messages we send.

Authentication and Account Sessions We use Supabase to manage account login, authentication, and sessions. Supabase processes account credentials and basic profile details, such as name and email address, to keep your account secure and keep you signed in.

AI Model and Infrastructure Providers For hosted or managed products that require AI processing, we may use third-party AI model APIs or infrastructure providers to perform requested functions. These providers may process inputs as needed to provide the service. For downloadable or self-hosted products, your chosen AI provider or runtime may process your inputs independently of Nexus.

Legal Compliance and Protection We may disclose information when required by applicable law, court order, subpoena, government authority, or legal process, or when we believe disclosure is necessary to protect the rights, property, security, or safety of Nexus, ClearPointLogic LLC, our customers, or others.

Business Transfers If ClearPointLogic LLC or the Nexus business line is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, customer information may be transferred as part of that transaction. We will provide notice where required by applicable law.

Data Retention We retain personal information for as long as necessary to provide products and services, maintain accounts and licenses, comply with legal and tax obligations, resolve disputes, enforce agreements, and support business continuity. Account, purchase, subscription, license, and transaction records may be retained indefinitely where necessary to: - Administer perpetual or long-lived license rights - Manage subscription and renewal history - Maintain tax, accounting, and financial records - Respond to disputes, chargebacks, or support issues - Preserve business-continuity records - Comply with legal obligations Usage and access records tied to product downloads, license activation, and account access may also be retained as part of account and license history. Website analytics data is retained according to Plausible's retention practices and is aggregated rather than tied to individual visitor profiles. We do not currently offer automated account deletion. If you wish to inquire about your data or request deletion, contact us at [email protected]. Some records may be retained even after a deletion request where retention is required by law or necessary for legitimate business purposes, including transaction, tax, license, fraudprevention, security, and dispute records.

Your Rights Depending on where you are located, you may have rights regarding your personal information.

General Rights You may request to: - Access the personal information we hold about you - Correct inaccurate or incomplete personal information - Delete certain personal information, subject to legal and business record-retention requirements - Opt out of marketing communications To exercise a privacy right, contact us at [email protected]. We may need to verify your identity before processing the request.

Marketing Communications You may opt out of marketing emails at any time by using the unsubscribe link in the email or contacting us directly. Transactional and account-related emails, such as receipts, license notices, renewal notices, and security notices, may still be sent where needed to provide the service or meet legal obligations.

California Residents California residents may have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including: - Right to Know: request categories and specific pieces of personal information collected about you. - Right to Delete: request deletion of personal information, subject to legal and business exceptions. - Right to Correct: request correction of inaccurate personal information. - Right to Opt Out of Sale or Sharing: opt out of sale or sharing of personal information where applicable. - Right to Non-Discrimination: not be discriminated against for exercising privacy rights. Nexus does not sell personal information for monetary consideration and does not use advertising or retargeting trackers on the website. If our practices change, we will update this Policy and provide required choices. To submit a California privacy request, contact [email protected] with the subject line "California Privacy Request." We will respond within the time required by applicable law.

EU and UK Residents ClearPoint Nexus is a US-based business. We have built our data practices to respect privacy by default. We use cookieless website analytics that store no personal data and set no tracking cookies, we run no advertising or retargeting trackers, and we collect only what we need to run accounts, process payments, provide products, and support customers. We honor requests to access, correct, or delete personal data from visitors and customers in the EU and UK, subject to the records we are required or permitted to keep, such as payment, tax, license, security, fraud-prevention, and transaction history. We are continuing to formalize GDPR and UK GDPR processes as we grow. For any EU or UK privacy request or question, contact [email protected].

Cookies and Tracking We keep cookies to a minimum and do not use cookies for analytics or advertising.

Essential Cookies We use cookies and similar technologies that are required for the website, account, checkout, and product access to work. These may include: - Login and session cookies set by Supabase, our authentication provider - Shopping cart, checkout, or account state - Cookies set by Stripe during checkout for payment processing, fraud prevention, and security - Security, load-balancing, and operational cookies needed to run the website These are necessary for the service and cannot be turned off without breaking core functionality.

Analytics Our analytics provider, Plausible, is cookieless. It sets no cookies and does not store personal data or build visitor profiles, so there is no analytics cookie to consent to or opt out of.

Advertising We do not use advertising or retargeting cookies on our website.

Browser Controls You can control cookies through your browser settings. Because the only cookies we set are essential, disabling them may prevent you from logging in, completing purchases, or using account features.

How We Protect Your Data We use commercially reasonable security measures to protect personal information, including: - HTTPS/TLS encrypted transmission - Secure third-party payment processing through Stripe - Access controls limiting who can access customer data - Authentication and session controls - Reliance on vendors that maintain their own security programs - Internal practices intended to limit access to information based on business need No method of transmission or storage is completely secure. We cannot guarantee absolute security. If a security breach affects your personal information, we will provide notice as required by applicable law.

Changes to This Policy We may update this Privacy Policy from time to time. When we make material changes, we will update the version and effective date and provide notice where required by law or by our customer terms. For account holders, material changes may be communicated by email or through a prominent notice on the website or inside the product. Prior versions are available on request.

Children Nexus products and services are intended for business and professional users and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at [email protected] and we will take appropriate action.

Governing Law This Privacy Policy is governed by the laws of the State of Tennessee and applicable United States federal law, without regard to conflict-of-law principles, except where applicable privacy laws provide otherwise.

Contact Us For privacy questions, data requests, or concerns, contact: ClearPointLogic LLC d/b/a ClearPoint Nexus Tennessee, United States Email: [email protected]