Privacy policy

1. Controller

NEXUM Intelligence Enterprises, Geitauer Straße 4, 81379 München, Germany, represented by the owners Melina Kühn, Luise Rimola. Phone: +49 177 2144200, e-mail: nexumintelligence@outlook.com.

We have not appointed a data protection officer as we are not legally required to. Please send any privacy questions to the address above.

2. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit it, Vercel automatically processes technical access data (server log files):

• IP address
• date and time of access
• page or file requested
• referrer URL
• browser type and operating system

This data is needed to deliver the website and keep it stable and secure. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation). We have a data processing agreement with Vercel; transfers to the USA are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses. Vercel keeps log files only briefly.

3. Fonts, videos and images

All fonts, videos and images are served from our own server. Visiting the website does not connect you to Google Fonts, video platforms or other third parties.

4. Cookie-free audience measurement with Umami

To see which pages are visited and how often, we use the open-source analytics software Umami. We run it ourselves on our own server in Germany; no data is passed to third parties. Umami sets no cookies and stores nothing in your browser.

It records the page visited, the referring page, browser, operating system, device type, screen size, language and the country and region derived from the IP address. Your IP address is not stored; it is only used together with browser details to form an anonymous, regularly changing identifier so that visits can be counted. We cannot identify you and no usage profiles are created. If your browser sends a "Do Not Track" signal, nothing is recorded.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a data-minimising analysis of how our website is used). We use no other analytics, tracking or advertising services. What is stored in your browser for technical reasons is explained in our cookie notice.

5. Contact form and call requests

When you request a call via the contact form, we process the data you enter: name, e-mail address, company, optionally phone number, topic, optionally budget and project details, your preferred days and times, and your browser's time zone and selected language.

We use it to handle your request and arrange a call. The legal basis is Art. 6(1)(b) GDPR (steps prior to a contract at your request) and Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

Your request is stored in our database at Supabase Inc. (970 Toa Payoh North #07-04, Singapore; data centre in Ireland, AWS eu-west-1). Notification e-mails to our team and your confirmation are sent via Resend, Inc. (2261 Market Street #5039, San Francisco, CA 94114, USA; sending region Ireland) to our mailbox at Microsoft (Microsoft Ireland Operations Ltd., Dublin). We have data processing agreements with these providers; any transfer to third countries is based on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

We delete your request once it has been dealt with and no later than six months after our last contact, unless a business relationship results. If a contract is concluded, statutory retention periods apply (up to ten years under German commercial and tax law).

6. Potential analysis (questionnaire)

If you complete the potential analysis, we process your answers, the calculated result and your contact details (name, e-mail, optionally company, phone, website, industry and goal) to show you the result and, if you wish, advise you on it. The legal basis is Art. 6(1)(b) GDPR and, where you have given consent, Art. 6(1)(a) GDPR. Storage, e-mails and deletion work as described in section 5.

7. Contact by e-mail

If you e-mail us, we process your address and message to deal with your request (Art. 6(1)(b) or (f) GDPR). Our mailbox is operated by Microsoft.

8. NEXUM platform (beta)

The platform is currently available by invitation only. For its users, the following also applies:

• Account: your e-mail address, password (stored encrypted) and sign-in data are managed via Supabase (data centre in Ireland).
• Company data: the data you enter (e.g. profile, KPIs, customer, product and staff data) is stored in Supabase to provide the platform's features. For search we create text vectors within Supabase; no data is passed to third parties for this.
• AI processing: tasks for the AI agents are processed with Claude by Anthropic, PBC (548 Market Street, San Francisco, CA 94104, USA). We only transfer the data needed for the task; e-mail addresses, phone numbers, bank details and addresses are removed or masked beforehand. Transfers to the USA are based on the EU Standard Contractual Clauses.
• Payments: paid subscriptions are processed by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. Stripe does not share your payment details with us.
• Change history: changes to your data are logged so that they remain traceable.

The legal basis is Art. 6(1)(b) GDPR (contract for the use of the platform). We keep the data for as long as your account exists and delete it after termination unless statutory retention obligations apply.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent at any time with effect for the future (Art. 7(3) GDPR).

Right to object: where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

An e-mail to nexumintelligence@outlook.com is all it takes.

You can also lodge a complaint with a data protection supervisory authority, for example the authority responsible for us: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

10. Obligation to provide data and automated decisions

You are not obliged to provide data, but without the required form fields we cannot handle your request. We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

11. Changes

We update this policy when our website or the law changes. Last updated: October 2026.