Nexus is a private, approval-gated market-operations tool operated by [Operator legal name] ("we", "us").
It is used by authorized account holders to monitor market-making, treasury, and on-chain activity. This policy
explains what we collect, why, and how it is protected. We do not sell your data, show ads, or
use third-party advertising trackers.
Information we collect
- Account & login: your username, a securely hashed password (PBKDF2), and — if you enable them — a two-factor (TOTP) secret or passkey. If you choose Sign in with Apple or Google, we receive the email address associated with that account.
- Operational data you choose to monitor: exchange account balances and holdings (read via read-only exchange API keys you provide), trading and market data, and the wallet addresses / on-chain activity you add to watch.
- Exchange API keys you connect, which are stored encrypted (AES via an encrypted vault) and used only to read your balances and market data on your behalf. Keys used for monitoring are read-only. A key with trade permission (never withdrawal permission) is connected only where an execution module has been armed under a written mandate, and is never used to move funds.
- Access requests: a request submitted at the sign-up page creates a pending record (username, e-mail address, salted password hash) that is kept until it is approved or removed.
- Session cookies: a strictly necessary session cookie (HttpOnly, Secure) keeps you signed in; no advertising or analytics cookies.
- Technical: standard server logs (e.g. request times) needed to operate and secure the service.
How we use it
- To authenticate you and provide the dashboard's monitoring, reporting, and alerting features.
- To deliver alerts and reports through the channels you configure (e.g. Telegram, email).
- To secure the service and prevent unauthorized access.
Third parties
We exchange data only with services needed to run the features you use:
- Cryptocurrency exchanges — read-only API calls to fetch your balances and market data.
- Blockchain & market data providers (e.g. block explorers, price feeds) — to read public on-chain and price data.
- Apple / Google — only if you use their sign-in.
- Notification providers you configure (e.g. Telegram, your email provider) — to deliver alerts you asked for.
We do not sell, rent, or share your personal data with anyone for advertising or marketing.
Data storage & security
Data is stored on a private, access-controlled server. API keys and other secrets are kept in an encrypted vault
and are never displayed back in full or transmitted to other users. Access requires authentication, and money-related
actions are additionally protected behind a password-gated vault. The Operator's personnel hold staff logins that can access every project in order to operate the service; client logins are scoped to their own project.
Data retention & your rights
We retain your data for as long as your account is active. You may request access to, correction of, or deletion of
your data, or close your account, by contacting us at [contact e-mail]. We will
delete your data on request, subject to any legal retention obligations.
Children
Nexus is not directed to children under 13 (or the minimum age in your jurisdiction) and we do not knowingly collect their data.
Changes
We may update this policy; material changes will be reflected by the "Effective" date above and, where appropriate, an in-app notice.
Contact
[Operator legal name], [Operator address], [Jurisdiction] · [contact e-mail]
Nexus is a private market-operations tool, not investment advice. Execution modules are disabled unless armed under a written execution mandate; see the Terms of Service.