Privacy Policy • Effective April 8, 2026
This policy explains what data Nuxa handles, why we handle it, how we protect it, and what rights restaurant operators, users, and visitors have when using the Service.
This Privacy Policy applies to Nuxa websites, product surfaces, APIs, and related services, including nuxa.ai and app.nuxa.ai (the “Service”).
Nuxa provides an AI operating system for restaurants. Depending on the context, Nuxa may act as a controller for website visitor, prospect, billing, and account-administration data, and as a processor or service provider for restaurant data that customers upload, connect, or instruct us to process through the Service.
Where EU, UK, or Swiss privacy law applies, we process personal data under one or more of the following legal bases: performance of a contract, legitimate interests, consent, and compliance with legal obligations.
Our legitimate interests include securing the Service, improving reliability, preventing misuse, supporting customers, and operating the business in a proportionate way.
Nuxa is based in the United States and may process information in the United States and other countries where Nuxa or its service providers operate.
When we transfer personal data subject to the GDPR or similar laws outside the originating region, we use appropriate safeguards as required by law, such as Standard Contractual Clauses, reliance on adequacy decisions where available, and comparable transfer mechanisms.
We retain personal data for as long as necessary to provide the Service, fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce agreements.
Retention periods vary by data type, customer configuration, contractual commitments, and operational needs. When data is no longer required, we delete it or de-identify it where reasonable.
We use cookies, local storage, and similar technologies for essential functions such as authentication, security, session continuity, and user preferences.
If we introduce non-essential analytics, advertising, or similar technologies in regions where consent is required, we will provide the required notice and choice before using them.
Residents of certain U.S. states, including California, may have additional privacy rights under applicable law, such as rights to know, access, correct, delete, or obtain a portable copy of personal information, and rights to appeal certain decisions.
Nuxa does not describe itself here as selling personal information or using customer data for cross-context behavioral advertising. If that changes, we will update this Policy and provide any required notices or opt-out mechanisms.
We use administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration. No system is perfectly secure, and you should also use appropriate safeguards such as strong passwords, access controls, and secure integration practices.
The Service is intended for businesses and their authorized personnel, not for children. We do not knowingly collect personal data from children in a manner requiring parental consent under applicable law.
We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version here and adjust the effective date above.
For privacy requests, complaints, DPA requests, or transfer questions, contact us at hello@nuxa.ai.