Privacy Policy

NexOS Intelligence, Inc. ("NexOS," "we," "us," or "our") is a Delaware corporation operating an AI-powered operational foresight platform for hospitality and recreation venues. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over it.

Contact for privacy matters: timothy@nexosintelligence.com

Mailing address: 15 E Kuu Aku Ln, #107, Lahaina, HI 96761

This Policy applies to information we process when you: visit nexosintelligence.com; create an account or use our products and services (including NxI PreShift, NexOS Diagnostic, NxI Studio, and related offerings); or authorize us to connect to a third-party system on your or your business's behalf (for example, a point-of-sale, labor, accounting, or reservation platform). It does not apply to the practices of third parties we do not control, including the platforms you connect to us.

Information you provide directly. Account registration details (name, business name, email, role), billing contact information, and any information you submit in support requests or intake forms.

Information from connected business systems. When you or an authorized representative connects a third-party system to our platform, we access operational data from that system as scoped by the connection. Depending on the systems connected, this may include transaction and sales records, labor and scheduling data, menu and inventory data, location and configuration data, reservation data, and — where you connect an accounting system such as Intuit QuickBooks — financial records including accounts, bills, payments, and vendor information. We access only the minimum data needed to perform the functions you have authorized.

Information collected automatically. Standard technical data when you use our website or platform, such as IP address, device and browser type, and usage logs, collected to operate and secure the service.

We do not intentionally collect special categories of sensitive personal data, and we ask that you not submit such data to us outside of what is required by a connected system's standard records.

We use information to: provide, operate, maintain, and secure our products and services; generate the operational forecasts, reports, and recommendations that are the core function of the platform; authenticate users and manage access; communicate with you about your account, service changes, and support; bill for and administer paid subscriptions; comply with legal obligations and enforce our agreements; and improve our products, using aggregated or de-identified data only.

We do not sell personal information. We do not use your business data or data from connected systems to train third-party foundation models, and we require any AI model provider we use to operate under data-processing terms that prohibit training on your data.

Data accessed through a connected third-party system remains the property and under the control of the customer who authorized the connection. Specifically: access is scoped and read-oriented — we request the minimum permissions necessary, and write-back actions, where supported, require human approval before execution; connections are revocable by the customer at any time through the connected platform or by contacting us; and we follow the access and operating disciplines described on our Trust page (https://www.nexosintelligence.com/trust), including role-scoped access, encryption, and a "support blind by default" posture under which our staff do not browse customer business data.

Intuit QuickBooks data specifically. Where you connect Intuit QuickBooks, we access financial data solely to provide the functions you have authorized. We handle Intuit-sourced data in accordance with applicable Intuit developer requirements, retain it only as long as needed to provide the service, and delete or return it upon disconnection or termination as described in Section 7. We do not use Intuit-sourced data for advertising or sell it to any third party.

We share information only as follows: service providers / subprocessors who help us operate the platform (for example, cloud hosting, database, email delivery, and payment processing providers), under contractual confidentiality and data-protection obligations — Amazon Web Services (cloud hosting), Supabase (database), Vercel (site hosting), Stripe (payment processing), Resend (email delivery), and Anthropic (AI model provider); AI model providers, limited to the minimum scoped context required to generate a result, under terms that prohibit training on your data; legal and safety disclosures where required by law; and business transfers in the event of a merger, acquisition, or sale of assets, subject to this Policy. We do not otherwise share, rent, or sell your information.

We retain information for as long as needed to provide the service and for legitimate business or legal purposes. When a connection is disconnected or an account is terminated, we delete or return the associated business data within 30 days, except where retention is required by law. You may request deletion of your personal information at any time by contacting us at the address in Section 1.

We protect information using technical and organizational safeguards including encryption in transit and at rest, role-based access controls, audit logging, and least-privilege access. No system is perfectly secure, but high-impact and irreversible actions are gated to require human approval and are never executed autonomously.

Depending on where you are located, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us at the address in Section 1. We will respond within the timeframe required by applicable law.

We operate in the United States and process information in the United States. If you access the service from outside the United States, you understand that your information will be processed here.

Our services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children.

We may update this Policy from time to time. We will post the updated version here with a revised "Last updated" date, and where required, provide additional notice.

timothy@nexosintelligence.com · NexOS Intelligence, Inc. · 15 E Kuu Aku Ln, #107, Lahaina, HI 96761