Privacy Policy

Account information. You can sign in with Google, with GitHub, or with a one-time magic link sent to your email address. When you do, we receive and store your email address and, where your provider shares them, your name and profile picture URL. We also keep a user ID, the sign-in method you used, and sign-in timestamps. We never see your Google or GitHub password.

Google user data. Google sign-in asks only for the basic openid, email, and profile scopes. We use that data only to create and identify your Nexus UI account, show your name and avatar in the dashboard, and contact you about your account or purchases. We do not use it for advertising, do not sell it, and do not share it except with the service providers listed below that help us run the account system. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Purchase information. Payments are processed by Lemon Squeezy, which acts as the merchant of record for every sale. Lemon Squeezy collects your payment details and billing address directly; we never see or store your full card number. From Lemon Squeezy we receive an order or subscription ID, the product you bought, the amount and currency, the order status (for example paid or refunded), and, for subscriptions, renewal and end dates.

Product activity. We store the components, templates, and blocks you bookmark and the premium items you have access to. If you create a registry access token for the CLI, we store only a one-way hash of it, its last four characters (so you can recognise it), when it was created, and when it was last used.

Messages you send us. When you use the contact form we store your name, email address, topic, and message, and forward them to our inbox by email. If you email us directly we keep that correspondence.

Usage and device information. Like most websites, our hosting provider records technical data such as IP address, browser type, and the pages requested, and our analytics tools collect information about how the site is used (see section 3).

• —To create and secure your account and keep you signed in.
• —To deliver what you buy: unlocking premium components and templates, enabling downloads and registry access, and keeping your order history.
• —To reply to support requests and messages you send us.
• —To send service emails such as sign-in links, receipts (sent by Lemon Squeezy), and important account notices. We do not send marketing email without your consent.
• —To measure traffic and performance, fix bugs, and decide what to build next.
• —To show advertising on some pages (see section 3).
• —To prevent fraud, spam, and abuse, and to meet legal, tax, and accounting obligations.

If you are in the European Economic Area, the UK, or a similar jurisdiction, we rely on these legal bases: performance of our contract with you (account, purchases, support), our legitimate interests (security, analytics, improving the product), your consent (non-essential cookies and advertising, where required), and compliance with legal obligations (tax and accounting records).

• —Essential cookies.Supabase, our authentication provider, sets cookies that keep you signed in. The site won't work properly for signed-in users without them.
• —Local storage. Your browser stores your light/dark theme choice and some catalog view preferences locally. This data stays on your device.
• —Vercel Web Analytics and Speed Insights. These measure page views and page performance in aggregate. They do not use cookies and do not identify individual visitors.
• —Google Analytics. We use Google Analytics to understand which pages are visited and how people find us. It sets cookies (such as _ga) and sends Google information including your IP address, device and browser details, and the pages you view. See how Google uses data from sites that use its services. You can opt out with the Google Analytics opt-out browser add-on.
• —Google AdSense. Some pages may show ads served by Google. Google and its partners use cookies to serve ads based on your visits to this and other websites. You can turn off personalised ads in Google Ads Settings or visit aboutads.infoto opt out of third-party vendors' use of cookies for personalised advertising.

You can block or delete cookies in your browser settings. Blocking essential cookies will sign you out.

We share personal data only with service providers that help us run Nexus UI, under contracts that limit how they can use it:

• —Supabase — authentication and our database (accounts, orders, bookmarks, contact messages).
• —Vercel — website hosting, Web Analytics, and Speed Insights.
• —Lemon Squeezy — checkout, payment processing, tax, receipts, and refunds, as merchant of record.
• —Resend — delivering contact-form messages to our inbox.
• —Google — Google sign-in (if you choose it), Google Analytics, and Google AdSense.
• —GitHub — GitHub sign-in (if you choose it).

We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a merger, acquisition, or sale of the business, in which case this policy will continue to apply to your data. We do not sell or rent your personal data.

Our service providers may process data in the United States and other countries outside your own. Where the law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses offered by those providers.

• —Account data, bookmarks, and access tokens: for as long as your account is open. Delete your account and we remove them within 30 days.
• —Order and subscription records: as long as needed to provide access and for the period tax and accounting law requires, even after account deletion.
• —Contact messages: up to 24 months after our last exchange, unless they form part of a support or legal record we need to keep.
• —Analytics data: according to the retention settings of Google Analytics and Vercel.

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent at any time. To make a request, including deleting your account, email contact@nexus-ui.com from the address on your account. We will respond within 30 days. You can also complain to your local data protection authority.

You can disconnect Nexus UI from your Google account at any time from your Google Account settings, and from GitHub under Settings → Applications.

We use HTTPS everywhere, row-level security on our database, hashed registry tokens, and limited administrative access. No system is perfectly secure, so please keep your sign-in email and registry token private and tell us right away if you suspect misuse.

Nexus UI is a tool for developers and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy as the product changes. We will change the date at the top of this page, and for significant changes we will notify signed-in users by email or on the site.

Nexus UI · contact@nexus-ui.com