Privacy Policy

Last updated: 14 August 2026

This Privacy Policy explains how InstruNexus ("we", "us", "our") collects, uses, and protects information when you use HAZOPNexus (the "Service").

1. Information We Collect

• Account information — name, email, company, phone, and password (stored as a salted hash, never in plain text).
• Study data — HAZOP/LOPA/SIL study content you create, including deviations, causes, consequences, safeguards, recommendations, risk assessments, uploaded P&IDs and documents, and Knowledge Base content.
• Billing information — plan, billing cycle, and transaction records. Card and payment details are handled directly by our payment processors (PayPal, Razorpay) — we do not store full card numbers.
• Usage information — login timestamps, IP address, and basic application logs, used for security (e.g. login lockout) and troubleshooting.

2. How We Use Information

• To provide, maintain, and secure the Service, including multi-tenant data isolation between accounts.
• To process subscription payments and send billing-related notices.
• To send transactional email (welcome, password reset, subscription, team invitations) and, where permitted, product updates.
• To power optional AI-assisted features — content you submit to those features (e.g. a node description or P&ID excerpt) is sent to our AI provider (Anthropic) solely to generate the requested suggestion, and is not used to train their models under our agreement with them.
• To improve the Service and diagnose issues.

3. Data Sharing

We do not sell your data. We share information only with:

• Service providers who process data on our behalf (hosting, payment processing, AI providers, email delivery), under confidentiality obligations.
• Other members of your own team account, as intended by the Service's collaboration features.
• Authorities, where required by law or to protect our rights or the safety of others.

4. Data Retention

We retain Customer Data for as long as your account is active, plus a reasonable period after cancellation to allow export or reactivation, after which it may be deleted. Billing records are retained as required for tax and accounting purposes.

5. Data Security

We apply reasonable technical and organizational measures to protect your data, including password hashing, per-account data isolation, encrypted connections (HTTPS), and role-based access control. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. You can update most account information directly in Settings, or contact us at support@instrunexus.com for other requests, including account deletion.

7. Cookies

We use essential session cookies to keep you signed in and to protect against cross-site request forgery. We do not use third-party advertising cookies.

8. International Transfers

Your data may be processed in countries other than your own, including where our hosting and service providers operate. We take steps to ensure such transfers are subject to appropriate safeguards.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via the Service or by email.

10. Contact

Questions about this Privacy Policy or your data can be sent to support@instrunexus.com.