Privacy

This implementation-ready notice requires owner/legal review before production.

Website AI assistant

The assistant processes questions you choose to submit and produces AI-generated answers grounded in information published on this website. Do not submit sensitive, confidential, or unnecessary personal information.

Your question, bounded conversation history, and relevant published evidence may be sent to an external AI provider. Provider selection and its retention, training-use, regional processing, subprocessor, and deletion terms remain subject to review.

Session and abuse protection

A necessary, time-limited session cookie maintains conversation continuity. It contains a random opaque value, not your question or Nexus Conversation identifier. The server stores derived identifiers and bounded metadata for continuity, rate limiting, security, and operational diagnostics. It does not use the assistant cookie for advertising or tracking.

Network infrastructure may temporarily process IP addresses. The application stores only domain-separated HMAC-derived IP identities for abuse controls and does not place them in metrics labels.

Conversation retention and deletion

Assistant messages and grounding evidence are stored by Nexus for bounded continuity. The proposed initial retention is 30 days, subject to owner/legal approval. Starting a new conversation does not itself delete the historical Nexus Conversation; it only ends browser continuity. Expired records are removed by a bounded operator process.

Because the assistant does not require an account, the operator may be unable to identify a historical visitor after their cookie is gone. To request deletion, use the website contact route and provide enough non-sensitive context, such as the approximate date and wording, for the operator to locate the record safely. Do not publish Conversation identifiers.

Logs, metrics, and backups

Operational logs and metrics use bounded technical categories and should not contain questions, answers, evidence, cookies, tokens, or stable visitor identifiers. Restricted, encrypted backups may retain data until their normal retention expiry. Restored backups must undergo retention reconciliation before service is opened.

Other website forms

Contact or registration forms may collect the details you enter, including name, email, organisation, role, questions, and consent choices. Their business retention and deletion policy is separate from assistant sessions and requires owner/legal approval.

Contact

Use the contact page for privacy or deletion requests.