Privacy policy

Draft, being finalised. This page describes what we do today and may change before it is final. Questions: support@nexusauditor.com.

Who we are

Nexus Auditor is a product of Rad Rebel Developer. It helps US CPA firms decide where their clients have sales tax nexus. Questions about this policy or about your data: support@nexusauditor.com.

This policy covers the website (nexusauditor.com), the application (app.nexusauditor.com), the pilot application form and email you send us.

What we collect

• Your account: your name and work email, the firm workspace you belong to and your role in it, and sign-in records (each session with the IP address and browser it came from).
• Client files your firm uploads: sales data exports (our CSV or XLSX template, or QuickBooks Online reports), which can include your clients' customer names and shipping and billing addresses, plus the presence facts and registrations your firm enters. Your firm decides what to upload. We use it only to produce your firm's nexus results, and it stays in your firm's workspace.
• Activity in the application: who in your firm uploaded, confirmed, changed or undid what, and when, so every result can be traced.
• Pilot applications: what you type into the application form, for example your name, firm, email and how you check nexus today.
• Billing: your firm's billing contact (name, email, firm name and address) and its invoices and payments. We bill by invoice or a Stripe payment link; card details go to Stripe and never reach us.
• Email you send us: the message and your address.
• Server logs: IP address, browser and the pages requested, kept for security and troubleshooting.

How we use it

To sign you in, run the analysis your firm asks for, show the official source behind each result, answer support requests and pilot applications, bill for the service, and keep the service secure. We do not sell personal information, and we do not use client files for advertising.

Who processes it for us

• Supabase (database and file storage, AWS us-east-1, United States): accounts, workspaces, client files and results.
• RackNerd, managed through xCloud (hosting, Los Angeles, United States): runs the website and the application and keeps the server logs.
• Emailit (transactional email): sends sign-in codes, sign-in links and application notices.
• Formaloo (forms): runs the pilot application form, which is embedded from Formaloo on our home page, and stores what applicants type.
• Google reCAPTCHA (through Formaloo): checks that the pilot application form is filled in by a person. Google receives the browser and interaction data it needs for that check.
• Stripe (payments): processes payments made through a Stripe payment link, with the billing contact and payment details you give it.
• Hostinger (email hosting): hosts the support@nexusauditor.com mailbox and the messages you send to it.
• Cloudflare Turnstile (bot check on sign-in, only while we have it switched on): checks that a sign-in comes from a person, using the browser's data.
• GitHub (source code and scheduled law-source monitoring): hosts our code and runs the daily check of official law pages. It does not receive account data or client files.

Cookies

The site and the application set first-party cookies they need: your sign-in session, the workspace you last opened, the language and display settings you choose, and an invite or referral code when you arrive through one. The site runs no analytics, so there are no analytics cookies, and there are no advertising cookies.

The pilot application form on the home page is embedded from Formaloo. It loads from Formaloo's site (with Google reCAPTCHA) when that part of the page comes into view, which sends your IP address and browser details to them, and Formaloo and Google may set their own cookies. To avoid that, write to support@nexusauditor.com instead of using the form.

How long we keep it

Account and workspace data is kept while your firm's account is open. Retention periods for closed accounts, server logs, billing records and pilot applications will be stated in the final version of this policy.

Your choices

Write to support@nexusauditor.com to see, correct, export or delete personal information we hold about you. Client files belong to the firm that uploaded them, so for those we act on the firm's instructions.

Changes

We date every change at the top of this page.