Legal

Privacy Policy

Last updated: June 1, 2026

1. Overview

EXIUSS Intelligence ("EXIUSS", "we", "us") operates the platform at app.exiuss.com. This Privacy Policy describes how we collect, use, and protect your information when you use our platform.

2. Information We Collect

  • Account information (email address, name) via Clerk authentication
  • Content you create within the platform (briefs, posts, routines)
  • OAuth access tokens for connected third-party platforms
  • Usage data (feature interactions, session activity)
  • Visit data on our public pages and funnels: the page viewed, the site or campaign that referred you, your browser, operating system and device type, your approximate location (country, region, city), and a one-way hash of your IP address. We do not store your raw IP address on these pages.
  • Payment information processed by Stripe (we do not store card details)

3. Google API Usage

EXIUSS integrates with Google APIs to enable publishing to Google Business Profile and YouTube. When you connect a Google account, we request the following scopes:

  • https://www.googleapis.com/auth/business.manage — to create and manage Google Business Profile posts
  • https://www.googleapis.com/auth/youtube.upload — to upload videos that you choose to publish to your own YouTube channel
  • https://www.googleapis.com/auth/youtube — to publish YouTube Community posts to your own channel
  • https://www.googleapis.com/auth/userinfo.profile — to display your connected account name
  • https://www.googleapis.com/auth/userinfo.email — to identify your account

EXIUSS use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Google Business Profile Integration

When you connect Google Business Profile, EXIUSS stores your OAuth access token and refresh token in our secure database (Supabase) to enable publishing on your behalf. Tokens are encrypted at rest. We use these tokens only to publish content you explicitly initiate — we do not read, modify, or delete your business data for any other purpose.

5. YouTube Integration

When you connect YouTube, EXIUSS uses the YouTube API Services to upload videos that you choose to publish, and to publish Community posts, to the YouTube channel linked to your authorised Google account, only when you ask us to or approve a scheduled item. We do not read your subscribers, comments, analytics, watch history, or private channel information, and we do not access any other person's YouTube data.

Your Google connection is established through our authentication service provider, Composio, which holds the OAuth tokens on our behalf; EXIUSS stores only a reference to your connection. When you disconnect YouTube in your settings, we delete that connection. You can also revoke EXIUSS's access at any time from your Google security settings. The videos you publish are stored on your YouTube channel, not by us beyond the time needed to upload them.

By using the YouTube features of EXIUSS you are also agreeing to be bound by the YouTube Terms of Service, and your use of Google data is subject to the Google Privacy Policy.

6. OAuth Token Storage

OAuth access tokens and refresh tokens — including those for Google, LinkedIn, Facebook, and other connected platforms, except YouTube connections held by our authentication provider as described in section 5 — are stored in our Supabase database with row-level security. Tokens are scoped to your user account and are never shared with other users. You can revoke access at any time by disconnecting a platform from your settings, or by revoking access directly in the respective platform's security settings.

7. How We Use Your Data

  • To deliver platform features (content generation, publishing, scheduling)
  • To authenticate your connected social and business accounts
  • To publish content to platforms on your explicit instruction
  • To maintain your account and subscription
  • We do not sell your data to third parties
  • We do not use your content to train AI models

8. Data Retention

We retain your data for as long as your account is active. Content you create (briefs, posts, routines) is stored until you delete it or close your account. OAuth tokens are deleted when you disconnect a platform or close your account.

9. Data Deletion Requests

You may request deletion of your account and all associated data at any time. To submit a deletion request:

  • Email support@nexuss.pro with subject line "Data Deletion Request"
  • Include the email address associated with your account
  • We will process your request within 30 days

You can also revoke third-party platform access independently by visiting the security or permissions settings of each connected platform (Google, LinkedIn, Meta).

10. Third-Party Services

EXIUSS uses the following third-party services:

  • Clerk — authentication and user management
  • Supabase — database and storage
  • Anthropic — AI content generation
  • Stripe — payment processing
  • Google APIs — Google Business Profile and YouTube publishing
  • LinkedIn API — LinkedIn publishing
  • Meta Graph API — Facebook Page publishing

11. Security

We implement industry-standard security measures including encrypted data transmission (TLS), encrypted storage, and row-level security on all user data. OAuth tokens are stored server-side and never exposed to the client.

12. Contact

For privacy-related questions or data deletion requests, contact us at: support@nexuss.pro

Terms of ServiceContactPrivacy Policy