Privacy Policy
Last updated: October 27, 2026
Request account deletion and check your deletion status
1. Who we are
NEXUS is operated by All American Construction Group, Inc. ("NEXUS", "we", "us", "our"). This Privacy Policy explains how we collect, use, share, and protect personal information when you use the websites at nexushub.build, our apps, and related services (the "Service"). The Service is intended for use in the United States, and we process information in the United States. Questions and privacy requests: hello@nexushub.build.
2. Information you give us
Account and profile: your name, email address, password (stored only as a bcrypt hash), phone number, role (owner, general contractor, or subcontractor), company name, trades and sectors, service areas, business address, and a license number if you provide one. Projects and work: project details and locations, plans and blueprints, photos, documents, bids, contracts and e-signatures, change orders, schedules, logs, reviews, messages, and other content you upload or enter. Credentials: licenses, insurance certificates, tax forms, and similar documents you upload. Payments: records of subscriptions and purchases, Nexus Credits ledger entries, milestone funding and releases, withdrawals, and the bank name and last four digits of a linked bank account. Card details are entered on Stripe's pages, and we do not receive your full card number. Identity and business verification for payments is collected by Bridge on its own hosted forms; we receive the verification status and the account identifiers needed to run your wallet and bank transfers. Communications: messages you send to support or to the website chat assistant, including any contact details you choose to share there. NEXUS Pulse: your email address, trade, ZIP code, and, if you choose, your phone number and text-message consent.
3. Information collected automatically
Device and log data: IP address, browser and device type, pages visited, referring pages, timestamps, and error information, which we use to operate and secure the Service. Our first-party analytics stores a random visitor ID in your browser's local storage and a session ID in its session storage, and records the pages you view, the referrer, campaign (UTM) parameters, your device type, and, if you are signed in, your account ID. It stores IP addresses only in hashed and truncated form. We also keep a usage record of each AI request (the feature, timing, and amount of processing) for billing and reliability. Location: we convert business and project addresses into map coordinates to match projects with contractors' service areas. We do not collect your device's precise location, but photos you upload may contain embedded metadata, such as when and where they were taken, unless your device removes it.
4. Information from other sources
Google sign-in: if you sign in with Google, we receive your name, verified email address, and profile picture link. Bridge and Stripe: verification status, payment and transfer status, and related account identifiers. Other users: for example, when someone invites you to bid, adds you to a project, or reviews your work. Public sources: building-permit records published by New York City, government procurement notices, and public business information, which we use for project discovery and NEXUS Pulse. Permit records can include the names, business names, and phone numbers of owners, applicants, and contractors. Public pages show permit locations by street without house numbers or owner names; owner and applicant contact details from those records are shown only to people who sign up for NEXUS Pulse, including its free samples and trial.
5. How we use information
We use personal information to: provide the Service, including accounts, projects, bids, contracts, milestone payments, AI features, and notifications; verify accounts and prevent fraud and abuse; process payments and keep financial records; provide support and handle disputes; send service messages and, where you have agreed or the law allows, marketing emails and text messages; measure and improve the Service and our advertising; secure the Service; and comply with the law and enforce our Terms. We do not sell personal information for money.
6. Information that is public
Some information is public by design. Projects you post to the public bid board are visible to anyone. Your public profile page at nexushub.build/pro can show your name, company, role, avatar, the number of your completed and in-progress projects and their combined contract value, awarded bids, your average rating and number of reviews, your number of verified work submissions, your credential status, and a NexusScore. Your email address, phone number, and NEXUS balance are not shown on your public profile. To ask us to limit your public profile, email hello@nexushub.build.
7. How we share information
With other users, as the Service requires: for example, bidders see the projects they bid on, and the parties to a project see its bids, contracts, milestones, documents, and messages. With service providers that process information for us: Vercel (hosting), Supabase (database and file storage), Stripe (subscription and product payments), Bridge (identity and business verification, wallets, deposit accounts, and bank transfers; Bridge also handles information under its own privacy policy), Resend (email), Twilio (text messages), Google (sign-in, analytics, and advertising), Meta and LinkedIn (advertising measurement, as described in section 9), third-party AI model providers (to generate AI responses), a geocoding service (to turn addresses into map coordinates), and an avatar service that draws an initials image from your name when you have no profile photo. We also share information when the law or legal process requires it, to protect the rights, property, or safety of our users, the public, or NEXUS, in connection with a merger, acquisition, financing, or sale of assets, or with your consent.
8. AI processing
When you use an AI feature, we send the relevant inputs, such as plan pages, photos, project and bid details, contract or submittal text, and your prompts, to third-party AI model providers to generate a response. We do not use your content to train our own AI models. AI model providers process those inputs under their own terms, which may include temporary retention for security and abuse monitoring. Messages you send to the website chat assistant are also processed by AI model providers.
9. Cookies, analytics, and advertising
We use browser storage and cookies that the Service needs to keep you signed in, remember your settings and your cookie choice, and run our first-party analytics (section 3). Where configured, we also use Google Analytics 4, Google Ads, the Meta Pixel, and the LinkedIn Insight Tag to measure visits and ad conversions such as sign-ups, trials, demo requests, and subscriptions. Google's tag loads with Google Consent Mode v2 set to deny advertising and analytics storage, so no Google advertising or analytics cookies are set until you choose Allow; while storage is denied, Google may still receive limited, cookieless signals as described in its Consent Mode documentation. The Meta and LinkedIn tags load only after you choose Allow, and Decline keeps them off. Click identifiers (gclid, gbraid, wbraid) and UTM parameters from the link that brought you to NEXUS may be stored with your sign-up so we can attribute your account to the ad that referred you. When enabled, we also send certain conversion events, such as a subscription or your first takeoff, directly from our servers to Meta with a hashed (not plain-text) email address so Meta can match them to its ads. These server-side events do not depend on the cookie banner; to opt out of them and of other targeted-advertising uses of your information, email hello@nexushub.build. We do not currently respond to browser Do Not Track or Global Privacy Control signals.
10. Retention
We keep account and profile information while your account is open. We keep financial and transaction records, such as payments, ledger entries, milestone releases, invoices, and fee records, and audit logs of sensitive actions for as long as legal, tax, accounting, and dispute-resolution needs require, which is typically up to seven years. Website chat assistant conversations are deleted after the retention period set for the assistant, which is 90 days by default and never more than 365 days. Content that you shared with other users, such as bids, contracts, and project records, may remain in their projects after you leave. Deleted information may remain in backups for a limited time before it is overwritten.
11. Deleting your account
You can request account deletion at nexushub.build/account/delete, which is also linked from the Security section of your account settings. While signed in, you confirm with your current password or a code we email you, and type DELETE. If nothing needs review, we delete your private records, replace your name and email address with placeholders, and sign you out everywhere. We keep an inactive account identifier and the deletion receipt to prevent misuse and to document your request. If your account has records that other users rely on or that must be reviewed first, such as shared projects, bids, or contracts, uploaded files, organization ownership, balances, payment or billing records, or an active subscription, the request is placed on hold and the page lists what must be resolved, with support's help where needed. You can check the status of your request on the same page. Records we must keep, and records that belong to shared projects, are kept as described in section 10. You can also email hello@nexushub.build.
12. Your choices and rights
You can view and update your profile in the Service, manage notification emails in your settings, unsubscribe from marketing emails using the link in the email, stop text messages by replying STOP, and accept or decline advertising cookies in the cookie banner. Depending on where you live, and where a privacy law such as those of California, Connecticut, New Jersey, or Virginia applies to us, you may have the right to access, correct, or delete your personal information, to obtain a portable copy, to opt out of targeted advertising, sale, or profiling, and to appeal our decision on your request. To make a request, email hello@nexushub.build from the email address on your account, or have an authorized agent contact us. We will verify your request and respond within the time the law requires. If we decline your request, you can appeal by replying to our response. We will not discriminate against you for exercising your privacy rights.
13. Security
We protect information with measures that include encryption in transit (HTTPS), bcrypt password hashing, signed session tokens, access controls, and audit logs of sensitive actions. No system is perfectly secure. If a security incident affects your personal information, we will notify you as the law requires. Report security concerns to security@nexushub.build.
14. Children
NEXUS is for people who are 18 or older and is not directed to children. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it.
15. Changes to this policy
We will post any change to this Privacy Policy on this page with a new date. For material changes, we will notify account holders by email or in the Service before the change takes effect.
16. Contact
Privacy questions and requests: hello@nexushub.build. Security reports: security@nexushub.build. Payments and verification support: support@nexushub.build.