Privacy Policy

Nexos (nexosai.net) is the technology division of Abrams & Luchanski. We provide the Nexos Brain: a workspace where a business maps its organisation and runs AI agents and automations on its behalf. Questions about this policy: support@nexosai.net.

• Account details — your email address and name, used to sign you in.
• What you put into the Brain — your company profile, the organisation map, agents, workflows and schedules you create, the chat messages you send, and any documents or text you add to Knowledge.
• Records of the work — the runs your agents perform (task, outcome, and the steps and tools used), approvals you answer, and the notices we send you.
• Usage — how many AI tokens each run used, so we can show your costs and enforce spending limits.
• Connected-account data — only when you connect a service (see below), and only what the tasks you set up need.
• Messages you send us from this website — the contact and project forms collect your name, email and message, which are emailed to our team so we can reply.

You can connect services such as Gmail, Google Drive, Docs, Sheets, Calendar and Contacts. Connecting uses the service’s own sign-in (OAuth); we never see your password. Depending on what you connect, your agents can read and send email, read and create documents and spreadsheets, read and create calendar events, and read contacts. They do this only when running a task you asked for or an automation you switched on, and actions that send something outside your business can be set to wait for your approval.

Nexos’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Google user data only to provide the features you use in the Brain; we do not use it for advertising; we do not sell it; and we do not use it to train generalised AI models.

You can disconnect a service at any time from Integrations, which stops our access. You can also revoke access from your Google account’s security settings.

Nexosadministrators have the technical ability to open a client’s Brain — including results your agents produced from connected accounts — in order to operate and support the service. We only do so when you ask us for help, to investigate a security or abuse problem, or when the law requires it, and for Google user data only as Google’s Limited Use rules permit.

To do a task, the relevant text (your instructions, the needed business context, and the content the task works on) is sent to our AI model provider, OpenAI, through its API, and the answer comes back to your Brain. Under OpenAI’s API terms, data sent through the API is not used to train OpenAI’s models. If you add your own AI provider key, those requests go through your own account with that provider instead.

We use a small number of service providers, only to run the product:

• Supabase — database and sign-in.
• Vercel — hosting.
• OpenAI — AI model processing, as described above.
• Resend — email delivery (approval requests, reports and notices, and website messages).

When an agent searches the web, the search query it writes (not your stored data) is sent to public search services — such as DuckDuckGo, Brave Search, Serper (Google results) and public SearXNG instances — and the pages it reads are fetched from their websites. If the primary image service is unavailable, an image request’s text prompt may be sent to Pollinations.ai to create the image.

We do not sell your data or share it with anyone for their own marketing. Payments are arranged directly with Nexos, outside the Brain.

Data is encrypted in transit. The OAuth tokens for accounts you connect, and any AI provider keys you add, are additionally encrypted at rest with a server-held key. Database access is restricted per account, so one business cannot read another’s records. Files you upload into a chat are stored with our database provider and reached through a long, unguessable link: anyone who has that exact link can open the file, so do not share those links.

We keep your data while your account is active. You can export your data, or permanently delete your account and all of its data, at any time — from the Brain’s settings, or by emailing support@nexosai.net. Deletion removes your maps, agents, runs, documents, connected accounts and settings, then the account itself.

The Brain is a business product and is not intended for anyone under 16.

If we change how we handle your data, we will update this page and its effective date, and tell account owners about material changes before they take effect.