Privacy Policy

Nexus of Truth is operated by Nexus of Truth, LLC (“Nexus,” “we,” “us”). This policy explains what data we collect when you use the Nexus Author Workbench (the “Service”), why we collect it, and what we do with it.

Questions about this policy or requests under it should be sent to info@nexusoftruth.com.

We collect three categories of data:

a. Account data

When you create an account, our authentication provider (Clerk) collects the email address and (optional) display name you sign up with. We receive your verified email and an internal user identifier from Clerk; we do not see or store your password.

b. Content you submit

When you import an article into the Workbench — by pasting text, providing a URL, or uploading a file — we store that article text along with any metadata you provide (title, author, source URL). We also generate and store derived analysis output (TL;DR, source quality ratings, fact-check results, bias scoring, novelty comparisons, key facts, and any rewrites or published snippets you create from your article).

c. Technical data

Our servers automatically log standard request information including IP address, user-agent, request path, and timestamps. We use this for operational purposes (rate limiting, debugging, abuse prevention).

Account data is held by Clerk under their own security controls. All other data — your imported articles, analysis output, and operational logs — is stored in an Amazon Web Services (AWS) Postgres database in the us-east-1 region (Northern Virginia, USA).

We share data with the following third parties strictly to operate the Service. We do not sell your data, and we do not share it for advertising.

a. Clerk (authentication)

Clerk handles sign-up, sign-in, and session management. By using Nexus you are also subject to Clerk’s privacy policy, available at clerk.com/legal/privacy.

b. Amazon Web Services — Bedrock (AI inference)

When you run an analysis or rewrite, the relevant article text is sent to AWS Bedrock for processing by large language models. AWS does not train its foundation models on data submitted via Bedrock and does not retain inputs after the request completes, per their published Bedrock terms. Your article text leaves the Nexus boundary for the duration of each model call.

c. Tavily (web search)

For fact verification and novelty checks, claim text and concept queries derived from your article are sent to Tavily, a third-party web search API, which returns relevant web pages. Only the specific text needed for the check is sent — not your full article. Tavily operates under its own privacy policy at tavily.com.

d. Hosting infrastructure

The Service runs on AWS (compute, database, secrets management). AWS acts as our infrastructure processor and does not access your content for any purpose other than providing those services.

Account data persists for as long as your account is active. Imported articles, analysis output, and published snippets persist indefinitely so you can return to them later, unless you delete them or request account deletion.

Operational logs are retained for up to 90 days for debugging and abuse investigation, then rotated.

We use a small number of browser-side storage mechanisms:

• Session cookies set by Clerk to keep you signed in. These are first-party, secure, HTTP-only where possible, and expire when you sign out or your session times out.
• A theme preference (light / dark / system) stored in localStorage so the app remembers how you like it rendered. This does not leave your browser.

We do not use third-party advertising or analytics cookies.

You may request, at any time, that we:

• Provide a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and the content associated with it.

Send requests to info@nexusoftruth.com. We will acknowledge within 7 business days and complete most requests within 30 days. Note that we may retain limited records (such as audit logs) where required by law.

Nexus is not directed to children under 13, and we do not knowingly collect personal data from anyone under 13. If you believe a child has created an account, contact us and we will delete it.

We protect your data using standard industry practices: TLS encryption in transit, encrypted database storage at rest, OAuth-based authentication, and tightly scoped access controls on production infrastructure. No system is perfectly secure; if a breach affects your data we will notify you in line with applicable law.

We may update this policy as the Service evolves. The “Last updated” date at the top reflects the most recent change. Material changes will be announced in-app or by email to the address on your account.

Nexus of Truth, LLC
info@nexusoftruth.com