Sub-processors

Running NexumeLab means relying on a small number of other companies. Each one is bound by a data processing agreement, may only act on our instructions, and may not use your data for their own purposes.

This page describes where your data goes and what it is used for. It is part of our Privacy Policy, and we update it when that changes.

Storage and hosting

The platform runs on infrastructure operated by an established cloud provider in the United States. Everything you put into NexumeLab — your account, your career content, and the files you upload — is held there. The provider stores and serves that data on our instructions and does nothing else with it.

AI features

Parts of NexumeLab are built on AI models we do not run ourselves. When you use one of those features, the career content relevant to your request is sent to the model provider, used to produce the result you asked for, and returned to you. Nothing else is sent, and the result is not used for any other purpose.

Under our agreement with the provider, data sent to the models is not used to train them and is retained only briefly for abuse monitoring.

The AI features are optional. If you would rather no AI feature ever ran against your data, do not use them — the rest of the platform works without them.

Payments

Payments are handled entirely by Stripe. When you pay us, you give your card details to Stripe directly, along with your name and email. We never see or store your card details; we keep only the record that a payment succeeded and what it was for.

Stripe is a payment processor in its own right and is responsible for the payment data it collects. Its handling of that data is governed by Stripe's privacy policy.

Signing in with Google

If you choose to sign in with Google, Google tells us your email address, your name, and an account identifier so we can create or find your account. This happens only if you use that option.

Transfers outside the UK and EEA

Data held in the United States leaves the UK and EEA. Those transfers rely on the UK International Data Transfer Agreement and the EU Standard Contractual Clauses, plus the relevant adequacy decision where the recipient is certified under the EU–US and UK–US Data Privacy Framework.

You can ask us for a copy of the safeguards for any specific transfer at privacy@nexumelab.com.

Changes

We will update this page before a new third party starts handling personal data. If you have a commercial agreement with us that entitles you to advance notice, we will follow whatever that agreement says.