version 1.0 · effective 2026-03-01
# NEXUS Privacy Policy
**Effective:** 1 March 2026 · **Version:** 1.0
## 1. Data We Collect
- **Account:** email, display name, password hash, referral code.
- **KYC (Studio & Creator only):** legal name, DOB, address, photo ID, tax country.
- **Payout:** PayPal email / bank details (encrypted).
- **Content:** streams, posts, DMs, tips, watch history.
- **Device:** browser, IP, device type (security & abuse detection).
## 2. Why
- Operate your account & pay you out.
- Comply with tax & anti-fraud rules.
- Personalise ad targeting inside NEXUS. We do NOT sell your data.
- Keep the platform safe from abuse.
## 3. Who Sees What
- **Public:** display name, avatar, banner, bio, socials, streams, posts, follower count.
- **Private (owner-only):** photo ID, address, PayPal, tax docs, exact DOB.
- **Optional:** birthday, marital status, kids — only visible if you toggle ON.
## 4. Retention
Data kept while account is active + 7 years for tax records where required.
## 5. Your Rights
- Access, correction, deletion, export (JSON dump within 30 days).
## 6. Security
- Passwords hashed with bcrypt (per-account random salt).
- PayPal/bank fields encrypted.
- Emergent Cloud with TLS 1.3.
## 7. Cookies
Auth via HTTP-only + localStorage JWT. No cross-site tracking cookies.
## 8. Contact
kaye@elysium.nexus