Privacy Policy

1. Introduction

WebMax Labs LLC ("we," "us," or "our"), operating under the DecryptedMatrix and Nexus brands, provides the Nex AI platform at www.decryptedmatrix.ai. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

2. Information We Collect

• Account information: Email address and hashed password (or Google OAuth profile) when you create an account.
• Chat messages: Conversations you have with Nexus or NEX, stored in our database so you can review your history. Message content is sent to the AI providers listed in section 5 to generate a reply.
• Payment information: Payments are processed by Stripe. We do not store your credit card number. We receive confirmation of payment amounts and transaction IDs.
• Subscription status: Your plan, subscription state, and message usage counts are stored in our systems.
• Usage analytics: We use Google Analytics to collect anonymized usage data such as page views, session duration, and referral sources.
• Advertising measurement: We use the Meta Pixel to measure the performance of our ads. It records page views and account or subscription milestones using cookies, your IP address, and your browser user agent. We do not send Meta your email address, your name, any account identifier, or anything you type into the chat.
• Device information: Browser type, operating system, and IP address collected automatically via server logs.

3. Google User Data

If you sign in using Google OAuth ("Sign in with Google"), the following applies to the Google user data we access:

3a. Data Accessed

We request the following Google OAuth scopes during sign-in:

• Email address (email) — Your Google account email address.
• Basic profile (profile) — Your name and profile picture.

We do not access your Google Drive, Gmail, Calendar, Contacts, or any other Google services or data beyond the scopes listed above.

3b. How We Use Google User Data

• Authentication: We use your Google email and profile to create and identify your account on our platform.
• Display: Your name and profile picture may be displayed within the application (e.g., in the user menu) for your convenience.
• Email about the service: Your email address is added to our email platform (Kit) so we can send you account notices and occasional updates about Decrypted Matrix. Every such message carries a one-click unsubscribe, and unsubscribing has no effect on your account or your access to the product.

We do not use Google user data for advertising, analytics, training AI models, or any purpose other than account authentication, display, and the email described above. Your Google name and profile picture are never sent to our email platform or to any other third party.

3c. Data Sharing

We do not sell, rent, trade, or share your Google user data with advertisers or data brokers, and we never will. Your Google user data is stored in our database (hosted on Supabase). Your email address alone is also shared with one service provider, Kit, which delivers the account and product email described in section 3b on our behalf and may process your address only for that purpose. Your Google name and profile picture are not shared with Kit or with anyone else.

3d. Data Storage & Protection

• Google user data is stored in our Supabase PostgreSQL database with encrypted connections (TLS in transit, AES-256 at rest).
• Access to the database is restricted to authenticated application services only — no direct public access.
• We do not store Google OAuth tokens beyond the authentication session. Refresh tokens are managed by NextAuth and stored in an encrypted, HTTP-only session cookie.

3e. Data Retention & Deletion

• Your Google user data (email, name, profile picture) is retained for as long as your account exists on our platform.
• You can delete your account and all associated data, including all Google user data, from your account settings. Deletion is immediate. You may also email support@decryptedmatrix.ai and we will process the request within 30 days.
• Upon account deletion, all Google user data is permanently removed from our database. This action is irreversible.

Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Use Your Information

• Provide and operate the Nexus AI chat service, including sending your messages to AI providers to generate replies.
• Process payments and maintain your subscription.
• Send transactional emails such as email verification codes and account notifications.
• Improve the platform based on anonymized usage patterns.
• Enforce our Terms of Service and prevent abuse.

5. Third-Party Services

We use the following third-party services to operate the platform:

• Stripe — Payment processing. Stripe Privacy Policy
• Google Analytics — Anonymized usage analytics. Google Privacy Policy
• Resend — Transactional email delivery (verification codes, notifications).
• Kit — Email platform for account notices and product updates. Receives your email address only. Kit Privacy Policy
• Supabase — Database and authentication infrastructure.
• Vercel — Application hosting and delivery.
• OpenRouter — Routes chat messages to the AI model that answers them. OpenRouter Privacy Policy
• Anthropic — Generates AI replies, both through OpenRouter and directly. Anthropic Privacy Policy
• OpenAI — Content safety screening and the embeddings used for vault search. OpenAI Privacy Policy

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

6. Cookies

• Authentication cookies: Essential cookies to keep you signed in during your session.
• Analytics cookies: Google Analytics cookies to understand how visitors use the site. You can opt out using browser settings or the Google Analytics Opt-out Browser Add-on.

7. Data Retention

• Chat messages are stored until you delete them or request account deletion.
• Account data is retained until you request account deletion.
• Payment records are retained as required by applicable tax and financial regulations.
• Usage records (message counts and timestamps, not chat content) are retained for billing and support purposes.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Delete your account and associated data.
• Export your chat history and account data.
• Correct inaccurate personal information.

To exercise any of these rights, contact us at support@decryptedmatrix.ai.

9. Age Restriction

The Nexus platform is intended for users aged 18 and older. We do not knowingly collect information from anyone under 18. If we learn that we have collected personal data from a user under 18, we will delete that account and associated data promptly.

10. Security

We implement reasonable technical and organizational measures to protect your data, including encrypted connections (TLS), hashed passwords, and per-account isolation of chat history. However, no method of transmission or storage is 100% secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the platform after changes constitutes acceptance of the revised policy.

12. Contact

If you have questions about this Privacy Policy, contact us at:

support@decryptedmatrix.ai