Data processing terms

These terms describe how Nexus handles personal data on your behalf. They are a draft outline and will be completed before they are offered for signature.

Roles

You, the customer, are the controller of the personal data you put into your workspace. You decide why and how it is used.

Shining Technologies [confirm: legal entity name], which provides Nexus, is the processor. We process that data only to provide Nexus to you.

Subject matter and duration

The subject matter is running your workspace in Nexus: storing and handling your records, sending the email and documents you ask for, and taking payments you set up. We process the data for as long as your subscription lasts, and until it is deleted or returned as set out below.

Personal data we process

The data depends on what you choose to store. It can include:

• contacts and companies, with their notes, activities and timeline;
• deal, quote and invoice data, including payment records;
• the content of email you send from Nexus;
• submissions to forms you embed on your website;
• the details of your team members who sign in.

Whose data it is

• Your customers, leads and other contacts.
• People who fill in your forms.
• Your own team members.

Our obligations

Instructions

We process personal data only on your documented instructions, which are your use of Nexus and these terms. We tell you if we think an instruction breaks the law.

Confidentiality

People who can access your data are bound to keep it confidential.

Security

We protect your data with the measures described on our security page.

Sub-processors

We use the sub-processors listed on our sub-processors page. We will update that page before adding a new one. [confirm: how customers are told, and whether they may object]

Helping you

We help you answer requests from the people whose data you hold, such as access and deletion requests, and help you meet your own obligations, as far as we reasonably can. Contacts and companies can be exported to CSV from the app.

Breach notification

If we become aware of a personal data breach affecting your data, we will tell you without undue delay and within [confirm: number of hours], with what we know and what we are doing about it.

Deletion or return

When your subscription ends, we will delete your data or return it to you, as you choose. [confirm: how long after the end of the subscription, and how backups are handled]

Audits

We will give you the information you reasonably need to check that we follow these terms, and allow audits that are reasonable and agreed in advance. [confirm: audit process and cost]

International transfers

[confirm: where data is stored and processed, whether it is transferred across borders, and the safeguards used]

Governing law

These terms are governed by the law of [confirm: jurisdiction].

Questions? Talk to us.