Privacy Policy

1. Introduction

Decrypted Matrix ("we," "us," or "our") operates the Nexus AI platform at www.decryptedmatrix.ai. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

2. Information We Collect

• Account information: Email address and hashed password (or Google OAuth profile) when you create an account.
• Chat messages: Conversations you have with Nexus or NEX during GPU sessions, stored in our database so you can review your history.
• Payment information: Payments are processed by Stripe. We do not store your credit card number. We receive confirmation of payment amounts and transaction IDs.
• Credit balance: Your prepaid credit balance and transaction history are stored in our systems.
• Usage analytics: We use Google Analytics to collect anonymized usage data such as page views, session duration, and referral sources.
• Device information: Browser type, operating system, and IP address collected automatically via server logs.

3. Google User Data

If you sign in using Google OAuth ("Sign in with Google"), the following applies to the Google user data we access:

3a. Data Accessed

We request the following Google OAuth scopes during sign-in:

• Email address (email) — Your Google account email address.
• Basic profile (profile) — Your name and profile picture.

We do not access your Google Drive, Gmail, Calendar, Contacts, or any other Google services or data beyond the scopes listed above.

3b. How We Use Google User Data

• Authentication: We use your Google email and profile to create and identify your account on our platform. This is the sole purpose for accessing your Google user data.
• Display: Your name and profile picture may be displayed within the application (e.g., in the user menu) for your convenience.

We do not use Google user data for advertising, analytics, training AI models, or any purpose other than account authentication and display.

3c. Data Sharing

We do not sell, rent, trade, or share your Google user data with any third parties. Your Google email and profile information are stored only in our database (hosted on Supabase) and are not transmitted to any other services, advertisers, or data brokers.

3d. Data Storage & Protection

• Google user data is stored in our Supabase PostgreSQL database with encrypted connections (TLS in transit, AES-256 at rest).
• Access to the database is restricted to authenticated application services only — no direct public access.
• We do not store Google OAuth tokens beyond the authentication session. Refresh tokens are managed by NextAuth and stored in an encrypted, HTTP-only session cookie.

3e. Data Retention & Deletion

• Your Google user data (email, name, profile picture) is retained for as long as your account exists on our platform.
• You may request deletion of your account and all associated data — including all Google user data — at any time by emailing support@decryptedmatrix.ai. We will process deletion requests within 30 days.
• Upon account deletion, all Google user data is permanently removed from our database. This action is irreversible.

Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Use Your Information

• Provide and operate the Nexus AI chat service, including provisioning dedicated GPU sessions.
• Process payments and maintain your credit balance.
• Send transactional emails such as email verification codes and session notifications.
• Improve the platform based on anonymized usage patterns.
• Enforce our Terms of Service and prevent abuse.

5. Third-Party Services

We use the following third-party services to operate the platform:

• Stripe — Payment processing. Stripe Privacy Policy
• Google Analytics — Anonymized usage analytics. Google Privacy Policy
• Resend — Transactional email delivery (verification codes, notifications).
• Supabase — Database and authentication infrastructure.
• Amazon Web Services (AWS) — GPU compute infrastructure for AI sessions.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

6. Cookies

• Authentication cookies: Essential cookies to keep you signed in during your session.
• Analytics cookies: Google Analytics cookies to understand how visitors use the site. You can opt out using browser settings or the Google Analytics Opt-out Browser Add-on.

7. Data Retention

• Chat messages are stored until you delete them or request account deletion.
• Account data is retained until you request account deletion.
• Payment records are retained as required by applicable tax and financial regulations.
• GPU session data (instance metadata, not chat content) is retained for billing and support purposes.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Delete your account and associated data.
• Export your chat history and account data.
• Correct inaccurate personal information.

To exercise any of these rights, contact us at support@decryptedmatrix.ai.

9. Age Restriction

The Nexus platform is intended for users aged 18 and older. We do not knowingly collect information from anyone under 18. If we learn that we have collected personal data from a user under 18, we will delete that account and associated data promptly.

10. Security

We implement reasonable technical and organizational measures to protect your data, including encrypted connections (TLS), hashed passwords, and isolated GPU instances. However, no method of transmission or storage is 100% secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the platform after changes constitutes acceptance of the revised policy.

12. Contact

If you have questions about this Privacy Policy, contact us at:

support@decryptedmatrix.ai