Privacy Policy

Nexus is the internal operating platform of SVJ Brands (“SVJ”, “we”, “us”). It is used by SVJ employees and by partners whom SVJ invites; there is no public sign-up. This policy explains what information Nexus handles, why, and the choices you have.

• Account information: your name, work email address, role and the permissions SVJ assigns to you.
• Business records: orders, invoices, payments, inventory, customers, stores and contacts that SVJ imports from its business systems (such as its distributors, marketplaces and ERP) or that users enter in Nexus.
• Activity records: what was changed, by whom and when, kept so the business can audit its work.
• Email data: if you choose to connect a Google mailbox, the Google user data described below.

Nexus uses a single session cookie to keep you signed in. It does not use advertising cookies, analytics trackers or third-party profiling.

Connecting a Google mailbox is optional and is done by the mailbox owner through Google’s own consent screen. Nexus requests these permissions: your basic identity (openid and your email address) and Gmail access (gmail.modify).

Nexus uses that access only to:

• confirm which Google account was connected;
• send email from the mailbox when you, or people and campaigns you have explicitly allowed, send a message from Nexus;
• read replies to messages Nexus sent, and import messages only for conversations that are linked to Nexus, so the conversation and any follow-up can be shown and handled in Nexus;
• check mailbox changes so that new replies in those linked conversations are picked up.

Nexus does not read, import or act on other email in your mailbox. Google user data is not sold, is not used for advertising, is not used to train artificial-intelligence or machine-learning models, and is not transferred to anyone except as needed to provide these features, for security, or to comply with law. People at SVJ do not read your email unless you give permission, it is necessary for security or abuse investigation, or the law requires it.

Nexus’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google access tokens are stored encrypted in AWS Secrets Manager and are never shown to other users. Nexus never sees or stores your Google password. You can revoke Nexus’s access at any time from your Google Account permissions; Nexus can then no longer read or send from the mailbox. To have the stored tokens and imported email deleted, write to amine@svjbrands.com.

We use the information above to run SVJ’s business through Nexus: reporting on sales, inventory and finance, managing customer relationships, field visits and outreach, and keeping records secure and auditable. We do not sell personal information.

Nexus runs on Amazon Web Services in the United States (us-east-1). Data is encrypted in transit and stored in encrypted databases and secret stores. Service providers that process data for us, such as Amazon Web Services and, for connected mailboxes, Google, do so only to operate Nexus.

Business records are kept for as long as SVJ needs them for its operations and legal obligations. Email imported for a linked conversation stays with that conversation’s record. You may ask us to delete Google user data that Nexus stored for your mailbox by writing to amine@svjbrands.com; we will do so unless the law requires us to keep it.

Access to Nexus requires an account set up by SVJ, and every action is checked against the permissions SVJ assigns. Credentials and tokens are kept in dedicated secret storage, never in source code.

We will update this page when our practices change and revise the effective date above. Questions or requests about privacy: amine@svjbrands.com.