1. Who We Are
Nexus Ivy ("we," "us," or "our") is a food ordering platform built for campus communities, operated by Nexus Ivy LLC. We provide the Nexus Ivy mobile application, the website at nexusivy.com, and related services (collectively, the "Service"). Contact us at privacy@nexusivy.com.
2. Information We Collect
Information you provide directly
- Account registration: name, phone number, and optionally a .edu email address
- Profile details: profile photo, dietary preferences, campus and university name
- Payment information: credit/debit card details and Apple Pay/Google Pay tokens, processed by Stripe. We never store full card numbers.
- Order information: items ordered, pickup details, and order notes
- Communications: support tickets, chat messages, and any content you submit to us
- Birthday month and day, if you choose to provide it (we do not collect birth year)
Information collected automatically
- Device identifiers and push notification tokens (for order status alerts)
- App usage data: screens viewed, features used, session duration
- Crash reports and performance diagnostics via Firebase Crashlytics
- IP address and approximate location (city-level, for campus verification; not stored)
Information from third parties
- If you sign in with Apple or Google, we receive your name and email address from those providers
- Payment confirmation data from Stripe (transaction IDs, last 4 digits, card brand)
3. Our Website and Waitlist
When you join our waitlist or contact us through a form on nexusivy.com, we collect what you enter and nothing else. The waitlist form collects your email address, the school or campus you name, and, if you choose to give it, your first name. The restaurant partner form collects your business name, contact name, phone number, email address, business address, nearest college or university, the type of food you serve, and any note you add.
Both forms are submitted to Nexus Ivy's own servers. If our servers cannot be reached, the submission falls back to our form provider, Formspree, which processes it on our behalf and passes it to us. We use this information only to contact you about Nexus Ivy — to tell you when we launch at your school, or to follow up on a partner enquiry — and you can ask us to delete it at any time at privacy@nexusivy.com.
Our website does not use advertising or analytics cookies. If you join the waitlist, your browser remembers that you joined so the form does not ask you again. You can clear it by clearing your browser's site data.
4. How We Use Your Information
- Create and manage your account and verify your .edu email address, if you choose to
- Process food orders and payments, and relay order details to partner restaurants
- Send real-time order status notifications via push notification and email
- Manage NI Points, including earning and redeeming points at the restaurant where you earned them
- Answer support requests you send us, and investigate order problems and refunds
- Detect and prevent fraud, abuse, and violations of our Terms of Service
- Comply with legal obligations
- Send service-related emails (order confirmations, support replies, account notices). We do not send marketing emails without your consent.
5. How We Share Your Information
We do not sell your personal information. We share data only in these limited circumstances:
- Partner restaurants: When you place an order, we share your name and order details with the restaurant fulfilling it. Restaurants do not receive your email address or payment information.
- Payment processors: Stripe processes all payments. Your payment data is governed by Stripe's Privacy Policy.
- Service providers: We use Firebase (Google) for database and authentication, SendGrid for transactional email, Formspree for website forms, Anthropic and OpenAI for AI features, and Sentry for error monitoring. These providers process data on our behalf and are contractually prohibited from using it for other purposes.
- Legal requirements: We may disclose data if required by law, court order, or to protect the rights and safety of our users or the public.
- Business transfers: If Nexus Ivy is acquired or merges with another company, your data may transfer as part of that transaction. We will notify you via the app or email before that happens.
6. .edu Email Verification (Optional)
Nexus Ivy is open to everyone. College students may optionally add a valid .edu email address to their profile. No part of the Service is currently restricted to verified students. We do not contact your university or share your registration status with your institution. Your .edu email is used only for verification and service communications.
7. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we delete your personal profile, dietary preferences, and payment tokens within 30 days. Order history is retained for 7 years for tax and accounting compliance, stored in anonymized form after account deletion. Aggregate analytics data (order counts, revenue summaries) with no personally identifiable information may be retained indefinitely.
8. Your Rights and Choices
Depending on where you live, you may have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Update or correct inaccurate information in your profile
- Deletion: Delete your account and associated personal data in the app (Profile → Settings → Delete Account) or by emailing privacy@nexusivy.com
- Portability: Request an export of your data in a machine-readable format
- Opt out of marketing: Use the unsubscribe link in any marketing email or adjust notification settings in the app
To exercise any of these rights, contact privacy@nexusivy.com. We will respond within 30 days.
9. Push Notifications
We send push notifications about your orders: confirmed, preparing, ready for pickup, cancelled, and refunded. That is all we send today. We do not send marketing or promotional push notifications. If that changes we will update this policy first, and any promotional notifications would be opt-in. You can turn off push notifications at any time in your device's Settings app. This doesn't affect your ability to use the app or place orders.
10. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (consistent with COPPA). If we become aware that a child under 13 has created an account, we will delete that account and its data. Users under 18 may use the Service only with the consent of a parent or legal guardian, as described in our Terms of Service. If you believe a child under 13 has provided us with personal information, contact privacy@nexusivy.com.
11. Security
We use industry-standard security measures, including TLS encryption for all data in transit, Firebase Security Rules for database access control, Stripe for PCI-compliant payment processing, and server-side authentication for backend requests. No method of transmission over the internet is 100% secure. If you believe your account has been compromised, contact support@nexusivy.com immediately.
12. Third-Party Links and Services
The Service may contain links to third-party websites or services (such as restaurant websites). This Privacy Policy does not apply to those services. We encourage you to review their privacy policies.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via push notification or email at least 30 days before the change takes effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy. The current version is always available at nexusivy.com/privacy.
14. Contact Us
Email: privacy@nexusivy.com
Support: support@nexusivy.com
Nexus Ivy LLC