Privacy Notice

Last updated: October 1, 2026

This is an English translation provided for convenience. The Spanish version is the legally binding one and prevails in case of any discrepancy.

1. Identity and address of the data controller

Satoshi Payments, S.A.S. de C.V. (Mexican tax ID SPA220203NV2), domiciled at Av. Central 220, Col. San Pedro de los Pinos, Alcaldía Álvaro Obregón, C.P. 01180, Ciudad de México, México, is the controller of your personal data in connection with NEXUS and the site https://nexus.eblas.link, under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties and other applicable regulations.

Contact for any privacy matter: [email protected].

2. Personal data we process

  • Identification and contact: email address and, if you provide it, your name.
  • Account and access: account name, roles, the identifier your identity provider assigns when you sign in with it (for example, Google), sign-in records, session cookie and your agents’ credentials (stored as hashes).
  • Technical data: IP address when requesting an access code; date and time of use of the Service’s tools.
  • Billing (only if you provide it): legal name, tax ID, tax address and billing email.

We do not request sensitive personal data. We do not process data of minors: the Service is for people aged 18 or older.

3. Content your agents store

The information you or your agents store in NEXUS (memories, facts, entities, documents) may contain personal data about you or third parties. You decide what is stored and why: NEXUS processes that content only on your behalf and to provide the Service, acting as a processor. You are responsible for having the legal basis needed to include third-party data.

4. Purposes

Primary purposes, necessary for the Service:

  • Creating and managing your account, verifying your identity at sign-in and keeping your session.
  • Providing the Service: storing, querying and processing your account’s and your agents’ information.
  • Security: preventing abuse, fraud and unauthorized access, and enforcing usage limits.
  • Handling support requests and sending operational notices about the Service (changes, incidents, these documents).
  • Complying with legal and tax obligations.

Secondary purposes, not necessary for the Service:

  • Sending you news about NEXUS.
  • Producing aggregate statistics on Service usage to improve it.

If you do not want your data used for secondary purposes, email [email protected] at any time. Opting out does not affect your access to the Service.

5. Who we share your data with

We do not sell your personal data. To run the Service we rely on providers that process it on our behalf and under our instructions (processors), which does not require your consent:

  • Cloudflare: content delivery, protection and secure connection for the site.
  • Resend: sending emails (access codes, invites and notices).
  • Google: only if you choose to sign in with your Google account.
  • Mercado Pago: only if you subscribe to a paid plan. It processes the charge with the payment details you give directly to Mercado Pago; NEXUS receives your payment email, your payer ID and your subscription status, never your card details.
  • AI model processing providers: they process your account’s content only to extract and organize your memories. Other features use models that run on NEXUS’s own infrastructure.

We will only transfer your data to third parties when required by law or a competent authority, or in the other cases where the law does not require your consent. Some providers may process data outside Mexico; in that case we require them to protect it in line with this notice.

6. ARCO rights and withdrawal of consent

You have the right to access, rectify and cancel your data or object to its processing (ARCO rights), and to withdraw your consent. To exercise them, email [email protected] with:

  • Your name and the email associated with your account or request.
  • A document proving your identity or, where applicable, that of your legal representative.
  • A clear description of the right you want to exercise and the data involved.
  • Any document that helps locate your data.

We will reply within 20 business days of receiving your complete request and, if appropriate, carry it out within the following 15 business days. The reply will be sent to the same email.

You can also delete agent credentials and account data directly from the console.

7. Limiting use or disclosure of your data

You can ask us to stop sending you non-operational communications by emailing [email protected]. We will record your request so we do not contact you for that purpose again.

8. Cookies and similar technologies

The site only uses a session cookie, strictly necessary to keep you signed in to the console, and the browser’s local storage for interface preferences. We do not use advertising cookies or third-party tracking tools. You can delete cookies from your browser; if you do, you will need to sign in again.

9. Retention and security

We keep your data while you have an account, and afterwards only as long as needed to meet legal obligations or defend rights. We apply administrative, technical and physical safeguards, including encryption in transit, database-level isolation of each account, hashed credentials and mandatory authentication to access data.

10. Changes to this notice

Any change to this notice will be published at https://nexus.eblas.link/en/privacy with its update date. If the change is material, we will also notify you by email or in the console.

If you believe your right to personal data protection has been violated, you may file a complaint with the competent data protection authority in Mexico.