Privacy Policy & GDPR

1. Introduction

Projects Nexus ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data in compliance with the EU General Data Protection Regulation (GDPR) 2016/679.

2. Data Controller

Projects Nexus
Email: contact@projectsnexus.org
Website: https://projectsnexus.org

3. What Data We Collect

We collect only essential data required to provide our services:

• Account Information: Email address, institution name, country, and profile details you provide
• Usage Data: Authentication tokens stored in your browser's local storage
• Platform Activity: Quests, alliances, envoys, and project data you create

We do not collect: tracking cookies, advertising identifiers, browser fingerprinting data, or any data for marketing purposes.

4. Legal Basis for Processing

We process your data under the following GDPR lawful bases:

• Contractual Necessity (Art. 6.1.b): To provide the Projects Nexus platform services you requested
• Legitimate Interest (Art. 6.1.f): To maintain platform security and prevent abuse
• Consent (Art. 6.1.a): For optional features you explicitly enable

5. Cookies

We use only essential authentication cookies required for login sessions. No tracking cookies, no third-party analytics, no advertising cookies. You can delete these cookies at any time through your browser settings.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties. Your data is stored on:

• Supabase — Our database and authentication provider (EU-hosted)

7. Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us.

8. Your GDPR Rights

Under GDPR, you have the right to:

• Access — Request a copy of your personal data
• Rectification — Correct inaccurate data
• Erasure — Request deletion of your data ("right to be forgotten")
• Portability — Receive your data in a machine-readable format
• Objection — Object to processing based on legitimate interest
• Restriction — Limit how we process your data

To exercise any of these rights, email us at contact@projectsnexus.org. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures including encryption at rest and in transit, access controls, and regular security audits.

10. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email or through a notice on our platform.

11. Contact & Complaints

For privacy inquiries: contact@projectsnexus.org
You also have the right to lodge a complaint with your local Data Protection Authority.