Privacy
Privacy Policy
Nexus Scan collects what it needs to audit your business: your account details, the business and location you describe, the competitors you choose, and the results of each audit. Public listing signals come from the Google Places API; we keep the listing's identifier and derived facts, not Google's text.
We use only two cookies, both for signing you in, and no trackers. Optional Google Sign-In, Google Business Profile and AI explanation features send additional data to Google only when they are enabled and you use them. This page is a plain-language description of the product's behavior, not legal advice.
1. Who we are and what this covers
Nexus Scan is a product of CTR Nexus, available at scan.ctrnexus.com. It audits the public online presence of a local business, compares it with nearby businesses, and turns the result into a score, findings and a prioritized action plan. This policy describes the personal and business data the service handles when you use it.
It is written to describe what the product actually does today. Where a capability is optional and switched off in a deployment (Google Sign-In, the Google Business Profile connection, AI explanations), the corresponding section only applies once that capability is available to you and you choose to use it.
2. Data we collect
Account and organization data
When you create an account we store your email address, the name you enter, and the organization name you choose. Your password is never stored in plain text; only a salted, one-way hash of it is kept. If you add members to your organization, we store their email, role and membership.
Authentication and session data
Signing in creates a session record that holds a one-way digest of your session token, when it was created, when it was last used, and when it expires. If Google Sign-In is enabled and you use it, we also store the stable identifier Google assigns to your Google account, the verified email address it reports, and the fact that the two are linked. We only request identity scopes from Google for sign-in (name, email, profile); we never request access to manage your business through sign-in.
Business and location information
To run an audit you tell us about the business: its name, an optional vertical, the location's display name, city, region, country and timezone. When you confirm a listing, we store the Google Place ID that identifies it and, for up to 30 days, its geographic coordinates so nearby businesses can be suggested. Competitors you include or exclude are stored as Google Place IDs together with your decision.
Audit results
Each audit stores the structured signals the rules evaluated (booleans, counts and averages such as whether a phone number is published, how many reviews exist, or the average rating), the findings and opportunities the deterministic rules produced, the Local Score and pillar scores, and any decisions you make on opportunities. Findings are immutable records; running a new audit creates a new record rather than changing an old one.
Payment records
When the paid entry audit is enforced, we store the order you open (reference code, amount, currency and status), any note you leave when you tell us you have paid, and the note a member of our team records when confirming the transfer. Payment is made by Pix from your own bank or payment app; Nexus Scan does not collect card numbers or bank credentials and does not process the transfer itself.
Logs and security records
The service keeps structured server logs (request identifiers, status codes, error categories, and the address a request came from where needed for rate limiting), an append-only trail of significant actions in your organization (for example, creating a business or deciding on an opportunity), and an append-only trail of every access by our platform support staff.
3. Google services we use
Google Places API
To locate your business and gather public signals about it and the competitors you select, we send your search text or a Google Place ID to the Google Places API. Google returns public listing information. We do not store the text Google returns (names, addresses, descriptions, review text); we store only the Place ID, optional coordinates for up to 30 days, and the derived structured signals described above. Places-derived content is shown with Google Maps attribution as Google's terms require.
Google Sign-In (optional)
If enabled, choosing "Continue with Google" sends you to Google to authenticate. Google tells us who you are; we do not receive your Google password. We link the Google identity to a Nexus Scan account by Google's stable identifier, never by email alone.
Google Business Profile connection (optional)
If enabled and you choose to connect a Business Profile, you grant Nexus Scan a separate permission (the Google scope business.manage) for one location. We store that authorization as an encrypted refresh token together with the identifiers of the Google account and listing you selected, and we use it only to read your accounts, listings and reviews. Review content is displayed to you when you open the page and is not stored by Nexus Scan. The connection is read-only: no change is made to your profile, and no reply is posted, by this capability. You can disconnect at any time from the Reviews page, and you can also revoke the permission from your Google Account settings.
AI explanations through OpenRouter (optional)
If enabled and you request an explanation of an audit, we send the audit's own deterministic results (the score, findings, evidence summaries and opportunities) and basic business context (business name, city, region, vertical) to OpenRouter, an API service that routes the request to a third-party inference provider running the language model we have configured. We do not send your account details, sessions or anything outside that audit. Our requests ask OpenRouter to use only providers that, under OpenRouter's published data policies, do not store or train on the content, and we keep OpenRouter's own prompt logging switched off. We store the explanation that comes back together with usage metadata (token counts, the reported cost and OpenRouter's request identifier). The explanation is generated only when you ask for it, and identical results reuse the stored explanation instead of a new request. OpenRouter's and the inference provider's terms govern their handling of that content.
4. Service providers and infrastructure
Nexus Scan runs on infrastructure operated by CTR Nexus on a virtual private server hosted by Oracle Cloud, with data stored in a PostgreSQL database on that server. Domain name resolution is provided by Cloudflare (DNS only) and TLS certificates by Let's Encrypt. The Google services above receive the data described in their sections. We do not sell your data and we do not share it with advertising networks.
6. Retention
- Account, organization, business and audit records are kept while your account exists, because your audit history is the product.
- Listing coordinates are cleared automatically after 30 days.
- Google Business Profile authorizations are deleted when you disconnect; only the fact and time of disconnection remain.
- Server logs are rotated and kept for a limited period for operations and security.
- Database backups are taken for disaster recovery and older copies are removed on a rolling basis, so deleted data may persist in backups for a limited time after deletion.
Self-service account deletion and data export are not yet available in the product. See "Your choices" below.
7. Security
All traffic is served over HTTPS. Passwords are hashed with a memory-hard algorithm; session tokens are stored only as digests; Google authorizations are encrypted at rest with a key held only on the server. Each organization's data is isolated in the application layer and covered by automated tests. Sign-in attempts and request volume are rate limited. Platform support access is restricted to named staff and every such access is recorded. No method of transmission or storage is completely secure, and we do not claim any third-party security certification.
8. Access by our team
A small number of CTR Nexus operators can view operational information across organizations — organization and business names, member email addresses and roles, audit status and failure reasons, usage of the Google Places service, and payment orders — to run the service, confirm Pix payments and investigate problems. They do not see your password and cannot edit your audit results; re-running an audit on your behalf creates a new record. Every operator action, including reads, is written to an append-only trail.
9. Your choices and rights
- You can sign out at any time; this revokes the session.
- Changing your password signs out every other session of your account.
- You control which competitors are included in your audits and can approve, defer or ignore each opportunity.
- If you connect a Google Business Profile, you can disconnect it from the Reviews page or revoke it from your Google Account.
- AI explanations are only generated when you request them.
Depending on where you are, you may have rights under applicable data-protection law (including, for people in Brazil, the Lei Geral de Proteção de Dados) to access, correct, port or delete personal data, or to object to certain processing. Because self-service tools for deletion and export do not exist yet, such requests are handled manually by CTR Nexus.
A public contact channel for privacy requests has not been published yet. This section will be updated with the contact details as soon as CTR Nexus designates one.
10. Changes to this policy
We will update this page when the product's data handling changes, and the effective date at the top will change with it. Material changes that affect you will be visible in the product before or when they take effect.