Privacy Policy

Last updated: July 2026

This policy explains how Nexus CMS collects and uses personal data when you use our website, dashboard, and editor services.

What we collect

  • Account data: email, name, avatar (from signup)
  • Workspace, project, and API key metadata
  • Product feedback messages
  • Audit logs of admin actions
  • Technical logs (IP, user agent) for security and debugging

How we use data

To provide the product, authenticate you, fulfill licenses, respond to support requests, prevent abuse, and improve Nexus. We do not sell personal data.

Storage

Data is stored in our database (self-hosted MongoDB or your configured provider). Access is limited to operators who need it for support and operations.

Retention

We retain account data while your account is active and for a reasonable period afterward for legal and accounting purposes.

Third parties

Optional OAuth providers (when enabled) process authentication under their policies. Content you edit in customer sites remains on those sites' infrastructure.