PRIVACY POLICY FOR THE NEXUS INDUSTRIAL AI APPLICATION
Last updated: September 10, 2026
1. GENERAL INFORMATION
This Privacy Policy explains how the NEXUS Industrial AI application collects, uses, stores, processes and protects user data.
The application and data controller is:
NEXUS IIoT INTEGRATOR DOO
Address: Mileve Marić, 21241 Kać, Republic of Serbia
Website: https://nexus-iiot.tech
Privacy contact: ai@nexus-iiot.tech
Application name: NEXUS INDUSTRIAL AI
Application identifier: tech.nexusiiot.nexusindustrialai
By using the application, you acknowledge that you have been informed about the data processing practices described in this Privacy Policy.
2. PURPOSE OF THE APPLICATION
NEXUS Industrial AI is a professional digital assistant designed for the maintenance, servicing and diagnostics of industrial machinery and production equipment.
The application enables users to record machines, faults, technical checks, service interventions, photographs, documents, replacement parts and other information related to industrial maintenance.
The application also processes user queries using artificial intelligence systems to provide technical analyses, diagnostic suggestions and assistance with searching available technical documentation.
3. DATA WE MAY PROCESS
Depending on how the application is used, we may process the following categories of data.
3.1. User account data
Account data may include:
• first and last name
• email address
• encrypted password or other information required for authentication
• company or organisation name
• user role and level of access
• licence or subscription status
• application language and other user settings
Passwords are not stored in an openly readable form.
3.2. Company and industrial equipment data
Users may enter information such as:
• company, factory, facility, production hall or production line name
• machine name, manufacturer and model
• serial number, inventory number or internal equipment number
• machine location within the production system
• technical data and equipment characteristics
• information about faults, alarms and service interventions
• diagnostic and inspection results
• service notes and recorded solutions
• information about replaced parts
• maintenance and service history
This information primarily represents business and technical data belonging to the user or the company to which the user belongs.
3.3. Content provided by the user
The user may voluntarily provide:
• written problem descriptions and AI queries
• voice-entered descriptions or their text transcripts
• photographs of machines, components, damage, alarms and CNC/HMI screens
• photographs of service, assembly, inspection and control procedures
• technical documents, manuals, diagrams, drawings and other files
• comments, notes, measurement results and service reports
• AI responses that the user chooses to save in the machine history
The user chooses which content to provide to the application.
The user is responsible for ensuring that they do not provide personal data belonging to other persons, trade secrets, confidential documents or other content for which they do not have the necessary authorisation.
3.4. Voice input
If the user activates voice input, the application may access the microphone to record speech or convert speech into text.
The microphone is used only when the user intentionally starts the voice input function. The application is not designed to secretly or continuously record audio in the background.
The resulting text may be stored as part of a user query, service note or other content entered into the application.
3.5. Photographs, camera and files
If the user uses the camera, gallery or document picker, the application accesses only the content that the user selects or creates using the relevant function.
Photographs and documents may be transmitted to server infrastructure for:
• storage in a personal or company workspace
• association with a specific machine or fault
• technical analysis
• recognition of visible content
• text extraction and document searching
• presentation to other authorised users within the same company
3.6. Purchase and licence data
When a user activates a paid plan through Google Play, we may receive information required to verify the purchase and licence status, including:
• purchased product or subscription name
• purchase identifier
• purchase, renewal or cancellation status
• time of purchase
• status of the user’s entitlement to PRO features
Payment card details and other complete payment information are processed by Google Play. NEXUS Industrial AI does not have access to the user’s complete payment card number.
3.7. Technical and security data
To operate, protect and improve the application, we may process limited technical data, including:
• IP address
• device type and operating system version
• application version
• login and activity timestamps
• session identifiers
• records of system errors and service interruptions
• security events and unsuccessful access attempts
• information required to prevent misuse and unauthorised access
This information is not used for personalised advertising.
4. HOW DATA IS COLLECTED
We may receive data:
• directly from users during registration and application use
• from a company administrator who creates or approves user access
• when information about machines, faults and service activities is entered
• when photographs, documents, voice input or AI queries are submitted
• automatically through essential technical and security records
• from Google Play for purchase verification and licence management
5. PURPOSES OF DATA PROCESSING
We process data to:
• create and manage user accounts
• authenticate users and control access
• provide application features
• organise machine records and service history
• store photographs, documents and technical information
• process AI queries and generate technical responses
• search available technical documentation
• manage user plans and licences
• communicate with users and provide support
• detect errors and improve application stability
• protect the system, users and company data
• prevent fraud, misuse and unauthorised access
• comply with legal and regulatory obligations
6. LEGAL BASIS FOR PROCESSING
Depending on the type of data and our relationship with the user, processing may be based on:
• performance of a contract or provision of a requested service
• user consent, where consent is required
• legitimate interests in the secure, reliable and functional operation of the application
• compliance with legal obligations
• protection of the rights, safety and property of users, the company and other persons
The user may withdraw consent for optional functions. However, doing so may prevent the use of features that depend on that consent or the corresponding device permission.
7. ARTIFICIAL INTELLIGENCE PROCESSING
Text, photographs, documents and other content submitted with an AI query may be automatically processed to:
• understand the technical problem
• identify a machine, component, marking, alarm or visible damage
• extract relevant information from technical documents
• search documentation and service history
• generate suggestions for subsequent diagnostic checks
• prepare a technical response or service summary
To provide these functions, data may be transmitted to contracted artificial intelligence and infrastructure service providers, only to the extent necessary to process the user’s request.
NEXUS Industrial AI does not sell user queries, photographs, documents or service data.
AI responses may contain errors, incomplete assessments or recommendations that are not applicable to a particular machine. Users must verify all recommendations against official manufacturer documentation, internal company procedures and applicable safety rules.
8. COMPANY ACCOUNTS AND DATA ACCESS
For company accounts, data is organised within a shared company workspace.
Authorised company administrators may, according to their access rights:
• invite and approve users
• manage user roles
• view machine and service activity data
• manage company and machine documentation
• modify or delete certain information within the company workspace
Regular users have access only to the functions and data permitted by their assigned role.
A company that allows its employees or contractors to use the application is responsible for ensuring that information entered and used within its company workspace is processed lawfully.
9. DATA SHARING
We may share data, when necessary, with the following categories of recipients:
• authorised users and administrators within the same company
• server, hosting and cloud infrastructure providers
• database and file storage service providers
• artificial intelligence service providers
• authentication, security and technical support providers
• Google Play services for purchases, licence verification and subscription management
• competent public authorities where disclosure is legally required
Service providers may process data only to the extent necessary to provide the contracted service and in accordance with applicable data protection requirements.
We do not sell or rent users’ personal data.
The application does not use user data for personalised advertising.
10. INTERNATIONAL DATA TRANSFERS
Certain cloud, server or artificial intelligence service providers may process data on servers located outside the Republic of Serbia or the European Economic Area.
Where applicable, international data transfers are carried out using appropriate contractual, organisational and technical safeguards in accordance with applicable regulations.
11. DATA RETENTION
Account information and content entered by a user or company are retained while the account is active or while the information is required to provide the service.
Individual records, photographs, documents and service records may be retained until deleted by an authorised user or administrator, or while the company has a legitimate business need to retain them.
Following an approved account deletion request, personal data associated with the account will be deleted or anonymised without undue delay, except for information that must be retained to comply with legal obligations, protect security, prevent fraud or resolve disputes.
Information contained in backups is removed through the regular backup replacement and deletion cycle.
Purchase, invoice and business transaction information may be retained for the periods required by accounting, tax and other applicable laws.
If a user worked within a company workspace, deleting their personal account may not automatically delete technical information and service records that belong to the company. In such cases, the user’s personal identifiers will be removed or anonymised where possible, while company information may remain as part of the company’s service and business records.
12. ACCOUNT AND DATA DELETION
Users may request deletion of their account and associated personal data:
• through the following page: https://nexus-iiot.tech/nexus-industrial-ai-account-deletion/
• by sending a request to: ai@nexus-iiot.tech
To prevent unauthorised deletion, we may request confirmation of identity or ownership of the user account.
Account deletion means permanent removal of the account, not temporary deactivation or suspension.
Certain information may be retained where necessary to comply with a legal obligation, protect security, prevent fraud, resolve a dispute or protect legal claims. The reason and extent of such retention will be limited to what is necessary.
13. USER RIGHTS
Subject to applicable data protection laws, users may have the right to:
• request information about the processing of their data
• obtain access to their personal data
• request correction of inaccurate or incomplete information
• request deletion of personal data
• request restriction of processing
• object to certain processing activities
• withdraw previously provided consent
• request data portability where applicable
• lodge a complaint with the competent data protection authority
Requests may be sent to ai@nexus-iiot.tech.
Before processing a request, we may ask for reasonable verification of the user’s identity.
14. DATA SECURITY
We apply appropriate technical and organisational measures to protect data against:
• unauthorised access
• accidental loss
• misuse
• unauthorised modification
• disclosure or destruction
Measures may include encrypted data transmission, user authentication, role-based access controls, security event logging, protection of server infrastructure and backups.
No electronic transmission or storage method can guarantee absolute security. Users are responsible for protecting their login credentials and the devices from which they access the application.
15. DEVICE PERMISSIONS
The application may request access to:
• the camera, to photograph equipment and technical details
• the microphone, for voice input
• photographs or the gallery, to select images
• files or the system document picker, to attach technical documentation
Permissions are used only for functions intentionally initiated by the user. Users can manage permissions through their device settings.
Refusing a particular permission may disable the corresponding function but does not necessarily prevent the use of other parts of the application.
16. CHILDREN AND MINORS
NEXUS Industrial AI is a professional business application intended for adult users and industrial professionals.
The application is not intended for children or directed at persons under the age of 18. We do not knowingly collect data from children.
If we become aware that a minor has provided personal data without an appropriate legal basis or consent, we will take reasonable steps to remove it.
17. EXTERNAL LINKS AND SERVICES
The application may contain links to manufacturer documentation, external websites or third-party services.
We are not responsible for the content, security or privacy practices of independent websites and services. Users are encouraged to review their respective privacy policies.
18. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy periodically to reflect changes to the application, data processing practices, services used or applicable regulations.
The date of the latest update will be displayed at the beginning of this document.
If changes materially affect user rights or the way data is processed, users will be informed through the application, by email or through an appropriate notice on the website.
19. CONTACT
For questions regarding this Privacy Policy, data processing, user rights or account deletion, please contact:
NEXUS IIoT INTEGRATOR DOO
Address: Mileve Marić, 21241 Kać, Republic of Serbia
Website: https://nexus-iiot.tech
Email: ai@nexus-iiot.tech
PRIVACY POLICY FOR THE WEBSITE NEXUS-IIOT.TECH
Last updated: September 10, 2026
1. GENERAL INFORMATION
This section of the Privacy Policy explains how NEXUS IIoT INTEGRATOR DOO collects, uses, processes and protects the data of visitors to:
https://nexus-iiot.tech/en-us/
The data controller is:
NEXUS IIoT INTEGRATOR DOO
Address: Mileve Marić, 21241 Kać, Republic of Serbia
Website: https://nexus-iiot.tech/en-us/
Privacy contact: ai@nexus-iiot.tech
2. DATA WE MAY COLLECT
Depending on how the website is used, we may process the following information.
2.1. Information provided through the contact form
When a visitor uses the contact form, we may collect:
• first and last name
• email address
• message content
• any information voluntarily provided in the message
We use this information to respond to enquiries, arrange meetings, prepare offers, provide technical information and establish business cooperation.
2.2. Information provided through direct communication
If you contact us by email, telephone or another available communication channel, we may process:
• first and last name
• business contact details
• company name
• job title or position
• communication content
• information required to prepare an offer or provide the requested service
2.3. Technical data
When visiting the website, limited technical information may be processed automatically, including:
• IP address
• device type
• internet browser
• operating system
• date and time of access
• pages visited
• referring webpage
• information about technical errors and security events
This information is used to display the website correctly, protect the system, identify technical problems and prevent misuse.
2.4. News and notification subscriptions
If the website provides an option to subscribe to a newsletter, professional articles, news or other notifications, we may process the subscriber’s email address and record of consent.
Users may unsubscribe at any time by using the available unsubscribe option or by sending a request to ai@nexus-iiot.tech.
3. PURPOSES OF DATA PROCESSING
Website visitor data may be used to:
• respond to messages and business enquiries
• arrange calls, meetings or presentations
• prepare offers and proposed technical solutions
• provide information about products and services
• establish and maintain business cooperation
• send notifications for which the user has provided consent
• maintain website functionality and security
• analyse and resolve technical problems
• prevent misuse and unauthorised access
• comply with legal and contractual obligations
4. LEGAL BASIS FOR PROCESSING
We process data on the basis of:
• the visitor’s consent
• steps taken at the visitor’s request before entering into a contract
• performance of an existing contract
• legitimate interests in communication, protection and business improvement
• compliance with legal obligations
Where processing is based on consent, the user may withdraw that consent at any time.
5. COOKIES
The website may use cookies and similar technologies for proper operation, security and storage of certain user preferences.
Essential cookies are used for the technical operation of the website.
Analytics, functional or marketing cookies may be used only if they are enabled on the website and appropriate consent has been obtained where required.
Users can manage cookies through the cookie notice available on the website and through their internet browser settings. Disabling essential cookies may affect the proper operation of certain parts of the website.
6. WEBSITE ANALYTICS
If website analytics tools are used, they may process information such as:
• pages visited
• approximate duration of a visit
• device and browser type
• approximate geographic area derived from the IP address
• the method by which the visitor reached the website
This information is used to understand how the website is used and to improve its content and functionality.
Non-essential analytics tools will not be activated before obtaining consent where consent is required.
7. THIRD-PARTY CONTENT AND SERVICES
The website may contain:
• links to business partners and manufacturers
• video content
• maps
• forms or other embedded functions
• links to social networks and other platforms
When a user opens third-party content or services, that third party may process information in accordance with its own privacy policy.
NEXUS IIoT INTEGRATOR DOO is not responsible for the content or privacy practices of independent websites and services.
8. DATA SHARING
We may share information, when necessary, with:
• employees and authorised contractors
• website hosting and maintenance providers
• email and communication service providers
• security and technical support providers
• business partners, where necessary to respond to a specific request and where an appropriate legal basis exists
• accounting, legal and other professional advisers
• competent public authorities where disclosure is legally required
Service providers may process information only to the extent necessary to provide the contracted service.
We do not sell or rent the personal data of website visitors.
9. INTERNATIONAL DATA TRANSFERS
Certain hosting, email, analytics or other technical service providers may process information outside the Republic of Serbia or the European Economic Area.
Where applicable, transfers are carried out using appropriate contractual, organisational and technical safeguards in accordance with applicable regulations.
10. DATA RETENTION PERIOD
Information submitted through the contact form or by email is retained for as long as necessary to respond to the enquiry, communicate with the user, prepare an offer, perform business cooperation or protect legal claims.
Information that becomes part of business, contractual, accounting or tax documentation is retained for the periods required by law.
Information used to send newsletters or other notifications is retained until the user withdraws consent or unsubscribes.
Technical and security records are retained only for as long as necessary to maintain security, analyse errors and prevent misuse.
When there is no longer a legitimate purpose or legal obligation to retain information, it will be deleted or anonymised.
11. USER RIGHTS
Subject to applicable data protection laws, users may have the right to:
• obtain information about the processing of their data
• request access to their personal data
• request correction of inaccurate information
• request deletion of personal data
• request restriction of processing
• object to processing
• withdraw previously provided consent
• request data portability where applicable
• lodge a complaint with the competent data protection authority
Requests may be sent to ai@nexus-iiot.tech.
Before processing a request, we may request reasonable verification of identity to protect data from unauthorised access or deletion.
12. DATA PROTECTION
We apply reasonable technical and organisational measures to protect data against unauthorised access, loss, misuse, modification, disclosure or destruction.
Measures may include secure communications, access controls, regular system maintenance and protection of server infrastructure.
No electronic transmission or storage method can guarantee absolute security.
13. CHANGES TO THIS POLICY
We may update this Privacy Policy to reflect changes to the website, available services, data processing practices or applicable regulations.
The date of the latest update will be displayed at the beginning of this document.
Material changes may be communicated through an appropriate notice on the website or by another suitable method.
14. CONTACT
For questions concerning this Privacy Policy, the processing of personal data or the exercise of user rights, please contact:
NEXUS IIoT INTEGRATOR DOO
Address: Mileve Marić, 21241 Kać, Republic of Serbia
Website: https://nexus-iiot.tech
Email: ai@nexus-iiot.tech