Nexis PM is a privately operated suite of services — including Nexis Cloud (file storage), Nexis Mail (email), the Nexis Portal, and related tools (the "Services") — provided free of charge to a small, invitation-only group of authorized users. The Services run on hardware owned and administered directly by the operator of Nexis PM (the "Operator") in the United States. This policy explains what information the Services handle and how it is treated.
Your data is not the product. The Services carry no advertising, no tracking pixels, no third-party analytics, and no data brokers. Nothing you store is sold, rented, mined for marketing, or used to train anything. Information is processed for exactly one purpose: operating the Services for you.
Account information. Your name, username, email address, and password (stored in hashed form), plus optional two-factor authentication material.
Your content. Files, folders, photos, documents, calendars, contacts, and email messages you store or send through the Services. Content is stored to provide the Services and is not otherwise reviewed as a matter of course. Automated malware scanning (antivirus) runs on stored files for everyone's protection.
Technical logs. Standard server logs including IP addresses, timestamps, user-agent strings, actions performed, and error records — kept for security, abuse prevention, and troubleshooting.
To provide, maintain, secure, back up, and troubleshoot the Services; to prevent abuse and unauthorized access; to communicate with you about your account or service changes; and to comply with legal obligations. That is the complete list.
Data is stored on privately owned servers administered by the Operator in the United States, protected in transit by TLS encryption. A small number of infrastructure providers are involved in delivering the Services: Cloudflare (network proxy and tunneling; traffic to the Services passes through Cloudflare's network) and transactional email relays (used to improve deliverability of outbound mail). These providers process data only as necessary to transport it and are governed by their own privacy policies. No other third parties receive your data.
Information may be disclosed only: (a) in response to valid legal process such as a subpoena, court order, or warrant; (b) where disclosure is required by law, including mandatory reporting obligations; (c) as reasonably necessary to protect the safety, rights, or property of the Operator, the Services' users, or the public; or (d) with your consent.
Content is retained while your account is active. Backups are maintained on a rotating basis and expire on a schedule. When an account is closed, its content is deleted within a reasonable period (and in any event within ninety days), except where retention is required by law. Technical logs are retained for a limited period and then purged.
You may access, correct, export, or delete your content at any time through the Services themselves, or by contacting the Operator. You may request account deletion at any time. Because this is a private service with no marketing apparatus, there are no advertising preferences to manage — there is nothing to opt out of.
The Services are protected by measures including TLS encryption in transit, optional two-factor authentication, network segmentation, intrusion detection, automated malware scanning, and off-site backup replication. No system is perfectly secure, and the Services are provided as-is (see the Terms of Use), but security is taken seriously and continuously improved.
The Services are not directed to children under 13, and accounts are provisioned only for authorized adults known personally to the Operator.
This policy may be updated from time to time; the current version will always be posted at this address, with the effective date shown above. Questions or requests: [email protected].