NEXUS Legal Layer

Privacy Policy

NEXUS Media Engine is built for performance, discretion, and accountable infrastructure. This Policy explains how we process authentication data, subscriptions, extraction requests, queue telemetry, proxy operations, and security signals across the platform.

Last updated: April 3, 2026DPDP + GDPR aligned
At a Glance
  • Supabase manages authentication and session identity.
  • Razorpay manages subscription payment processing.
  • Celery-backed workers process extraction and download jobs.
  • Residential proxy routing is used only for service reliability and abuse-resistant extraction.

This document is written to be transparent for users and operationally clear for auditors, partners, and future agents maintaining the NEXUS platform.

Terms of Service

Scope

This Privacy Policy explains how NEXUS Media Engine collects, uses, stores, shares, and protects information when you access our website, APIs, queue-backed extraction services, subscription plans, and support channels. NEXUS Media Engine is a high-performance media extraction platform built on FastAPI, Next.js, Supabase, Celery-backed worker infrastructure, and controlled residential proxy routing for supported providers.

Who We Are

For the purposes of privacy law, NEXUS Media Engine is the controller, or equivalent decision-maker, for account, billing, security, and service-operations data that we determine how to process. Certain infrastructure vendors act as processors or sub-processors on our behalf.

Compliance Position

This Policy is drafted to support compliance with the Indian Digital Personal Data Protection Act, 2023, and the GDPR for users in the EEA, UK, and similar jurisdictions. Where local law grants you additional rights, those rights apply together with this Policy.

Data We Process

We may process account and identity data, authentication session data, subscription and payment records, IP and device signals, logs, queue metadata, rate-limit state, extraction job state, support communications, and user-submitted media URLs, format requests, and filenames. We do not intentionally request sensitive personal data and ask that you avoid submitting unnecessary sensitive information.

Supabase Authentication

We use Supabase for authentication, session management, token issuance, and related account services. Supabase may process login credentials, tokens, user identifiers, and security metadata on our behalf. You remain responsible for maintaining credential confidentiality.

Razorpay Payments

We use Razorpay for subscription billing, payment verification, order handling, and payment webhooks. NEXUS Media Engine does not intentionally store full card numbers on its own application servers. Payment data is processed through Razorpay subject to its legal and regulatory obligations.

Plan Tiers

NEXUS Media Engine may offer Free, Pro, and Premium subscriptions. Free plans have lower limits and lower operational priority. Pro plans provide expanded extraction entitlements and elevated limits. Premium plans provide the highest consumer-tier entitlement set and advanced access where offered. We may also offer API or enterprise arrangements separately.

Why We Process Data

We process data to authenticate users, provision subscriptions, authorize downloads, operate Celery-backed workers, route and monitor queue activity, detect abuse, enforce rate limits, maintain secure logs, deliver media artifacts, provide fallback delivery where necessary, and improve reliability and security.

Proxy and Queue Operations

NEXUS Media Engine may use residential proxy infrastructure in limited circumstances to improve extraction reliability, reduce provider-side anti-bot false positives, and maintain continuity for supported providers. Proxy routing is a protected internal service mechanism, not a user-facing general proxy product. We also process operational telemetry concerning queue behavior, provider health, and delivery success.

API Rate Limiting and Abuse Controls

We apply rate limiting, request validation, entitlement checks, and security heuristics to website, API, and worker traffic. We may log account identifiers, IP metadata, request timestamps, provider targets, quota state, and error patterns for fraud prevention, operational visibility, and contractual enforcement.

Fair Use and Copyright

NEXUS Media Engine is a user-directed software service. We do not claim ownership of third-party media and we do not grant you rights you do not already possess. You are solely responsible for ensuring that scanning, extraction, downloading, storage, sharing, and downstream reuse are lawful, authorized, and consistent with applicable copyright law, platform rules, licenses, and fair dealing or fair use principles where relevant.

Sharing and Transfers

We share data only where reasonably necessary with infrastructure, identity, payment, hosting, delivery, monitoring, and network partners. Because our service uses globally distributed infrastructure, your data may be processed in India and other jurisdictions where our providers operate, subject to lawful safeguards and contractual protections where required.

Retention and Security

We retain personal data only for as long as reasonably necessary for account administration, legal compliance, fraud prevention, dispute resolution, subscription records, and service integrity. Short-lived media artifacts and worker outputs are intended to remain ephemeral and may be deleted automatically after delivery or expiry. We implement reasonable technical and organizational safeguards, but no internet service can guarantee absolute security.

Your Rights

Depending on your jurisdiction, you may have rights to access, correct, update, erase, restrict, object to, or port your personal data, withdraw consent where relevant, and seek grievance redressal. Under the DPDP Act, this may include consent withdrawal and nomination-related rights. Under GDPR, this may include objection, restriction, portability, and complaint to a supervisory authority.

Children and Contact

NEXUS Media Engine is not directed to children and should not be used by minors where prohibited by law or by relevant platform rules. Privacy, rights, and grievance requests should be directed through NEXUS Media Engine support or the designated contact channel published by the service.