Nexus
Privacy Policy
Last updated:
This policy explains what personal data MJQ Nexus ("Nexus", "we", "us") collects when you visit mjqnexus.com or use the Nexus app at app.mjqnexus.com, why we collect it, and the choices you have.
We handle personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.
1. Who we are
Nexus is operated by MJQ Nexus, Dubai, United Arab Emirates. For anything about privacy, write to [email protected].
2. Your account data and your company's books
Nexus holds two kinds of data, and our role differs for each:
- Account data — information about you as a user (your name, email, sign-in details). We decide how this is used, as described in this policy.
- Business data — the books your company keeps in Nexus: customers, vendors, items, invoices, payments and the contact details inside them. Your company owns this data. We store and process it only to run the service for your company and on its instructions; your company decides who can see it.
3. What we collect
- Account details: your name, email address and password. Passwords are stored only as a salted hash — we can't read them.
- If you sign in with Google: your name, email address, profile picture and the fact that Google has verified your email.
- If you turn on two-step verification: an encrypted authenticator secret and your backup codes.
- Business data that you or your colleagues enter or import.
- Security and activity records: sign-in history (time, IP address, browser and device), an audit log of changes to your company's books (who changed what, and when), and the pages you open in the app, used for recent items and for administrators' usage reports.
- Messages you send us, for example support emails.
We don't currently collect payment card details.
4. How we use it
- To provide the service: sign you in, show your company's books and run the features you use.
- To keep accounts safe: two-step verification, limits on repeated sign-in attempts, sign-in history and detecting misuse.
- To send service emails: email verification, password resets, team invites and documents you choose to email to your own customers.
- To answer your questions and give support.
- To meet our legal obligations.
We don't sell personal data, we don't show advertising, and we don't use third-party analytics or tracking.
5. Signing in with Google
Google sign-in is optional. When you use it we request only the basic scopes openid, email and profile, so we receive your name, email address, profile picture and whether your email is verified. We use this only to sign you in and to keep your profile up to date. We have no access to your Gmail, Google Drive, contacts or any other Google data.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove Nexus's access at any time from your Google Account at myaccount.google.com/permissions.
6. Where your data is stored
Your account and business data are stored on servers in Dubai, United Arab Emirates, with encrypted backups made every six hours. Data travelling between your browser and Nexus is encrypted (HTTPS).
The service providers listed below handle limited data, and some of them operate outside the UAE. We share only what each one needs to do its job.
7. Service providers
| Provider | What they do for us | Where |
|---|---|---|
| Oracle Cloud Infrastructure | Servers and backups that store your data | UAE (Dubai) |
| Cloudflare | Domain names, network security, website delivery and the secure connection to our servers | Global network |
| Optional sign-in with your Google account | Global | |
| Brevo | Sending service emails — receives the recipient's address and the email's content | European Union (France) |
| Anthropic | Optional AI assistant and reading tables from images or PDFs — receives only the content you submit to these features, and only when your company uses them | United States |
9. How long we keep data
- Account data is kept while your account is open. When you close it, we delete or anonymise it within 90 days, except records we must keep by law.
- Business data is kept while your company's workspace is open. UAE tax law requires businesses to keep accounting and tax records for at least five years (longer in some cases); keeping its records for the required period is your company's responsibility. Before a workspace is closed we provide an export, and we delete the data within 90 days of closure unless your company asks us to keep it longer or the law requires it.
- Sign-in history and the audit log are part of your company's audit trail and are kept for as long as the workspace exists.
- Backups are overwritten on a rolling basis, so deleted data disappears from them over time.
10. Your rights
You can ask us to give you a copy of your personal data, correct it, delete it, restrict or object to how we use it, or move it to another service, and you can withdraw consent you have given. Write to [email protected]; we reply within 30 days.
For personal data inside your company's books (for example, a customer's contact details), please contact that company first, since it controls the data; we will help it respond. If you are not satisfied, you can complain to the UAE Data Office.
11. Security
We protect data with hashed passwords, optional two-step verification, encryption in transit, database-level separation between companies, posted documents that can't be changed afterwards, and an audit log of changes. Access to production systems is limited to the people who run the service.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the authorities as the law requires.
12. Children
Nexus is a business tool for people aged 18 and over. We don't knowingly collect data from children.
13. Changes to this policy
When we change this policy we publish the new version here with a new date. If a change materially affects how we use your personal data, we will tell you by email or in the app before it takes effect.
14. Contact
MJQ Nexus, Dubai, United Arab Emirates — [email protected]