NGO Nexus is operated by Global Affinity Media Plus Ltd ("we", "us"), trading as NGO Nexus. Contact: support@ngonexus.app.

Account data is information about the people who use NGO Nexus — name, work email, role, sign-in activity. We are the controller of that data.

Workspace data is everything your organization records inside the product: employees, payroll, beneficiaries, vendors, finance entries, attachments. Your organization is the controller; we are a processor acting on your instructions under the Data Processing Addendum.

• Account details (name, email, password credentials, organization, role) — to create your workspace and authenticate you. Legal basis: performance of our contract with you.
• Usage, device and log data (IP address, browser, timestamps, actions taken) — to keep the service secure, debug faults and measure reliability. Legal basis: our legitimate interests in securing and improving the service.
• Support messages — to answer your questions. Legal basis: performance of our contract and our legitimate interest in supporting customers.
• Order and billing details (name, billing address, country, tax ID, purchase history) — collected and processed by Paddle as Merchant of Record so purchases can be completed, invoiced and taxed. Legal basis: performance of our contract and compliance with legal obligations. We never receive or store full card numbers.
• Marketing emails, where you opt in — legal basis: your consent, withdrawable at any time.

We do not sell personal data, we do not run advertising trackers, and we do not use your workspace records to train AI models. The in-product assistant only receives the text you type into it.

Humanitarian workspaces hold data about vulnerable people. Beneficiary, HR and payroll records are readable only by members of the owning organization whose role permits it, enforced at the database layer rather than in the interface. Attachments live in a private store and are served through short-lived signed links, and every download is recorded in an audit log your admins can review and export.

• Encryption in transit (TLS) and at rest.
• Row-level tenant isolation on every table, verified by automated security scans.
• Least-privilege roles; platform administrator actions are logged.
• Regular backups with point-in-time recovery.

• Paddle.com Market Ltd — Merchant of Record. Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders and handles customer service inquiries and returns. Paddle receives your billing name, email, billing address, country, tax identifiers and payment details in order to process the sale, manage subscriptions, calculate and remit tax, issue invoices and handle refunds, and acts as an independent controller for that data under its own privacy notice.
• Service providers / sub-processors — cloud hosting and managed database, transactional email delivery, and (where enabled) AI inference, each bound by confidentiality and data protection terms.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where required by law or to protect our legal rights.

The current sub-processor list is available on request from support@ngonexus.app.

Workspace data is kept while your subscription is active. After termination we hold it for 30 days so you can export, then delete it. Security and audit logs are kept for up to 12 months. Your organization can set shorter retention on its own records.

Depending on where you live, you may have the right to access, correct, delete, port or restrict processing of your personal data, and to object to it. For account data, contact us directly. For workspace data, contact the organization that holds it — we will refer your request to them and assist as their processor.

Data may be processed in regions other than where you are based. Where that involves a transfer out of the EEA or UK, we rely on Standard Contractual Clauses and the safeguards described in the DPA.

Privacy questions and requests: support@ngonexus.app. We respond within 30 days.