Effective July 26, 2026
Nexus is operated under the name SynkitNET. The short version: we collect what the product needs to work and nothing else. No ads, no cross-site tracking, no selling or renting data, ever. Questions or requests about your data go to the same inbox as everything else.
Account. Your email address and a display name. Sign-in is by emailed magic link, so there is no password and we never store one. Your session token is kept in your own browser.
Billing. Payments are processed by Stripe. Your card number never touches our servers. From Stripe we receive and keep your subscription status, purchase history, billing country, the card's funding type (credit, debit, prepaid), and a card fingerprint, which is an opaque identifier that lets us recognize a card without knowing its number. We keep the fingerprint, country, funding type, and a normalized copy of your email for one purpose: making the free trial one per person.
Your work. Projects live in your browser by default. If you use cloud sync, your projects, including images and video you have placed in them, are stored in our storage so you can open them elsewhere. Generators you save are stored with your account. If you publish a filter to the Community or share it by link, its name, preview image, and the generator definition become visible to others; everything else stays private to your account.
Generation requests. When you ask Nexus to create or refine a generator, the brief you type and any reference image you attach are sent from our server to Anthropic, whose model writes the generator code. Anthropic processes these under its commercial API terms, which do not allow using your content to train its models. We keep a record of your generation usage for credit accounting.
Updates list. If you subscribe to product updates (the email box on our landing page), that email address is stored with our email provider until you unsubscribe. Every update email carries a one-click unsubscribe link. Unsubscribing never affects sign-in codes or receipts.
Technical. Standard server logs (IP address, user agent, requested URL) exist at our hosting provider for security and debugging, and our rate limiter keeps short-lived counters keyed by account id or IP. For free-trial eligibility we read the country your request comes from. We count page views with our hosting provider's analytics, which uses no cookies and builds no profile of you across sites; we see aggregate numbers like "how many people visited today and from which link," never a browsing history tied to your account. We set no advertising cookies.
We do not sell, rent, or trade personal data with anyone. It is shared only with the services that run Nexus, each bound by its own data-processing terms:
Supabase. Database, authentication, and file storage, hosted in the United States (us-east-2, Ohio). This is where your account, generators, synced projects, and published filters live.
Vercel. Application hosting, CDN, server logs, and the cookieless page-view analytics described above.
Resend. Sends our email: sign-in codes, receipts, and, if you are on the updates list, occasional product news. Marketing email always has an unsubscribe link; unsubscribing does not affect sign-in codes.
Stripe. Payments, subscriptions, invoices, and the card screening described above.
Anthropic. Processes generation briefs and reference images to author generators. Not used to train their models.
Upstash. Rate-limit counters (account id or IP).
Web fonts used in the editor are fetched by our own server and re-served to you, so font CDNs never see your IP address. If you use Nexus from the EU or UK: processing happens in the United States, and each processor above offers GDPR data-processing terms including standard contractual clauses.
To provide the service. Accounts, sync, sharing, generation, and billing are the product itself.
To prevent abuse. Card screening and trial records keep the free trial fair, and rate limits and logs keep the service up. This is our legitimate interest.
To tell you what is new. We may occasionally email you about new features and filters. Every such email has a one-click unsubscribe, we honor it immediately, and opting out never affects the emails the product needs to send (sign-in codes, receipts).
To meet legal obligations. Tax and accounting records connected to payments.
Account data is kept while your account exists. When your account is deleted, your projects, synced assets, generators, and published filters are removed. Billing records are retained as tax law requires. We may retain the minimal trial-abuse record (card fingerprint, country, funding type) after deletion, solely so a deleted account cannot restart the free trial. Server logs and rate-limit counters expire on their own within days.
You can ask for a copy of your data, ask us to correct it, or ask us to delete your account and everything in it. Email hello@synkit.net from your account address and we will verify and handle it promptly. Self-serve deletion is coming; until then the inbox is the path. If you are in the EU or UK you also have the rights to restrict or object to processing and to lodge a complaint with your local supervisory authority.
Security disclosures have their own page at /security.
Nexus is not directed at children under 13, and we do not knowingly collect their data. If your country sets a higher age for consenting to data processing, that age applies.
If this policy changes in a way that matters, we will say so on the site before it takes effect. The date at the top is the version marker.