Privacy notice

Nexus asks Google for the OpenID, email, and basic profile scopes. It uses the Google account identifier and verified email address to sign in. School membership requires an invitation issued for that exact email; Google sign-in or an email domain does not enroll an account.

Nexus stores the Google access and refresh credentials issued for the sign-in connection. This sign-in connection does not request access to Google Drive, Gmail, Calendar, contacts, or other Google product data.

If your school enables Google Classroom and you choose to connect a teaching account, Nexus asks for separate permission to read courses, coursework, class materials, announcements, and Google Drive files. The Drive permission is broader than a single class folder. Nexus uses it to read supported attachments referenced by the courses you connect. Nexus stores the connection credentials for authorized refreshes. Connecting a teaching account does not change school membership or grant administrator access.

Nexus stores school account and membership records, prompts, chat history, projects, agents, preferences, file metadata, private assignments, and source connections in its deployment database. Uploaded files use object storage, and extracted search content uses its search index. Saved assignments and their source connections are private to their owner. Assignment instructions become available for teacher review only when you send them in a class conversation. Assigned teachers can review student prompts and AI answers in class-linked conversations for their assigned classes, and school operators can review those class conversations. A personal Nexus workspace is separate and is not included in school review.

To generate a response, Nexus may send your prompt, relevant chat history, agent instructions, and uploaded file content or extracted passages through OpenRouter to the upstream model you select. Those providers process the material needed to answer your request under their own terms and privacy practices.

When you use enabled voice tools, Nexus sends your recording for transcription or selected answer text for speech generation to the provider configured by your school. Image generation sends your prompt to the configured image provider. Supported connections include OpenAI directly and OpenRouter, which routes requests to the upstream provider for the configured model. These operations require class permission and count toward school spending limits. Transcribed text becomes part of chat history when you send it. Providers handle submitted material under their own terms and retention settings.

Google Cloud encrypts persistent storage at the infrastructure layer. OAuth credentials for assignment sources are also encrypted separately before database storage. Other application database fields and object payloads rely on infrastructure encryption. Traffic to the public site uses HTTPS, and application services communicate inside the school deployment.

Nexus application and service access logs may retain request paths, status codes, timing, and service errors while omitting query strings and request bodies. Google Cloud may process URL parameters, IP addresses, user-agent details, and related request metadata in its infrastructure logs.

The Nexus mobile apps send error and crash diagnostics to Sentry. Reports can include app and operating-system versions, device model, and stack traces. We configure filtering to remove user identifiers and classroom content. Mobile session replay, screenshots, and performance tracing are disabled.

Nexus has not established a fixed retention period. Deleting a chat hides it from the chat list but may retain its stored messages. File deletion runs asynchronously and retries when storage cleanup fails. In the school web app, open Settings, then Accounts & Access to download your profile, preferences, saved chats and alternate responses, memories, projects, upload details and original uploads, plus your available private assignments, source connection details and own Canvas grade history from your current school. Original files are encoded inside the archive, up to 32 MiB combined. The archive can include chats hidden by deletion. Credentials, private-session uploads, files pending deletion, generated files, tool activity, connected documents and other school-managed records are excluded. Account deletion is not self-service; contact support for deletion or data that is not included in the archive.

Contact support@narb.cc with privacy, account, or data questions.