Privacy Policy

1. Who This Policy Covers

This Privacy Policy explains how Nexus High Stack, Inc. ("Nexus High Stack," "we," "us") collects, uses, and shares personal data when you use nexushighstack.com and the Nexus High Stack platform (the "Service"). It applies to two kinds of people, and we're different things to each:

• Agency and Sub-Account users — the people who sign up for and use Nexus High Stack directly. For your own account data (name, email, billing info, usage), we are the controller: we decide how it's handled, and this policy governs it directly.
• End customers of our customers — the contacts, leads, and clients that agencies and Sub-Accounts store in the Service (for example, a church's member list, or a client's CRM contacts). For that data, we act as a service provider / processor on behalf of the agency or Sub-Account that entered it — they control what's collected and why, and their own privacy notice to their customers governs it. If you're one of these end customers and have a question about your data, please contact the organization you interacted with directly.

2. Information We Collect

We collect information in a few ways:

• Account information. Name, email, and authentication details, handled through our authentication provider, Clerk.
• Billing information. Processed directly by Stripe — we receive confirmation of payment and subscription status, but we never see or store your full card number.
• Content you provide. Everything you or your team enter or upload to run your business through the Service — contacts, deals, calendar entries, site and funnel content, campaign copy, sermon audio/video, and similar.
• Community & Directory program data. If you participate in the Business Directory or church stipend program: your listing details, membership tier, and monthly figures you report. For monthly spend reports, we deliberately collect only the dollar amount and the vendor code — never what was purchased.
• Usage data. Standard technical data like IP address, browser type, and pages visited, collected automatically to keep the Service secure and working correctly.

3. How We Use Information

We use the information above to:

• Provide, maintain, and improve the Service;
• Process payments and manage subscriptions;
• Communicate with you about your account, changes to the Service, or support requests;
• Detect, prevent, and address fraud, abuse, or security issues; and
• Comply with legal obligations.

We do not sell your personal data, and we do not use Customer Data (the content you or your clients put into the Service) to train third-party AI models.

4. Cookies

We use cookies and similar technologies for essential purposes — keeping you signed in and remembering your preferences — and, where enabled, basic analytics to understand how the Service is used. You can control cookies through your browser settings; disabling essential cookies may prevent parts of the Service from working.

5. Who We Share Information With

We share information with the service providers who help us run the platform, each acting under contract and only for the purpose of providing their service to us:

• Clerk — authentication and account management;
• Stripe — payment processing and billing;
• Vercel — application hosting, database, and file storage;
• YouTube / Google — only if you connect a channel for the Live Broadcasts feature, to detect when you're live.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets — in which case we'll make reasonable efforts to require the same protections continue.

6. Data Retention

We keep account and Customer Data for as long as your account is active, and for a reasonable period after cancellation in case you reactivate or as needed for legal, accounting, or dispute-resolution purposes. You can request deletion of your account data as described in Section 8.

7. Data Security

We use industry-standard safeguards — including encrypted connections, access controls, and reputable infrastructure providers — to protect the information you entrust to us. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

8. Your Rights & Choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, or to object to or restrict certain processing — including rights available to California residents under the CCPA. To exercise any of these rights, contact us at support@nexushighstack.com. If you're an end customer of one of our agency or Sub-Account users rather than a direct Nexus High Stack user, please contact that organization directly — they control that data, and we'll assist them in responding to your request.

9. Children's Privacy

The Service is intended for business use by adults and is not directed at children under 13 (or the relevant minimum age in your jurisdiction). We don't knowingly collect personal data from children. If you believe a child has provided us data, contact us and we'll delete it.

10. International Data Transfers

We operate in the United States and Kenya, and our service providers may process data in other countries. By using the Service, you understand your information may be transferred to and processed in a country other than your own, with protections consistent with this policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make a material change, we'll notify you — by email or an in-product notice — before it takes effect.

12. Contact Us

Questions about this policy or your data? Email support@nexushighstack.com or info@nexushighstack.com, or write to 8715 Rocky Top Cove, Cordova, TN 38016.