NexusFlowHub Privacy Policy

Effective Date: April 3, 2026

1. Introduction & Scope

Welcome to NexusFlow, a brand owned and operated by NexusFlowHub ("Company," "we," "us," or "our"). This Privacy Policy describes how we collect, use, and shield the information you provide on nexusflowhub.io (the "Site") when seeking personal loan and insurance lead-matching services. We operate as a lead generator, not a lender or underwriter.

2. Information We Collect

To provide our matching services, we collect the following categories of data: • Identifiers: Name, email address, and phone number. • Self-Reported Financial Profile: Desired loan amount, credit score range (we do not pull credit reports), annual income, and employment status. • Technical Data: IP address, browser type, and device identifiers collected via cookies and tracking technologies (Meta Pixel, GA4, and Base44 Analytics).

3. Data Protection & Encryption Practices

We employ rigorous security protocols to protect your sensitive financial profile: • Encryption in Transit: All data submitted through our lead funnel is encrypted using 256-bit SSL/TLS encryption. • Encryption at Rest: Data stored on our servers and via our platform provider, Base44.com, is protected by advanced firewalls and industry-standard encryption at rest. • Internal Access Controls: We utilize "Least Privilege" access. Your sensitive income and employment data are accessible only to authorized personnel via secure, encrypted administrative portals. • Notification Security: To prevent data leaks, we have configured our system to exclude sensitive personal information (PII) from unencrypted email notifications. • GLBA Safeguards: In compliance with the GLBA Safeguards Rule, we maintain physical, electronic, and procedural safeguards to protect your non-public personal information.

4. How We Use and Share Your Information

We share your data with third-party lenders and insurance providers to fulfill your request for quotes. • Non-CRA Disclosure: NexusFlowHub is not a Credit Reporting Agency. Any credit score range provided is self-reported and used for preliminary matching only. • No Unrelated Sales: We do not sell your personal information to third-party "data brokers" for products unrelated to your inquiry. • Platform Provider: Our site is built on Base44.com, which processes data on our behalf under strict confidentiality and security agreements.

5. Analytics & Advertising (Meta, Google, & Base44)

We use the Meta Pixel, Google Analytics 4 (GA4), and Base44 Analytics to optimize our services. • Sensitive Category Compliance: In accordance with Meta and Google's "Sensitive Information" policies, we do not transmit specific financial details (e.g., your exact income or credit range) to these platforms. • Special Ad Categories: Our advertising complies with Meta's Special Ad Category requirements for credit and insurance. • Opt-Outs: You may opt out of tracking via Google Analytics or Meta's Ad Settings.

6. TCPA Consent & Communication

By submitting your information, you provide "express written consent" for NexusFlowHub and our partners to contact you via email, phone, or SMS (including automated technology) regarding your request, even if you are on a Do-Not-Call registry. Consent is not a condition of purchase. Text STOP to opt-out of SMS at any time.

7. Your Legal Rights

Under various US state laws (including CCPA/CPRA), you have the right to request a copy of your data, request deletion, or opt-out of the "sale" or "sharing" of your personal information for cross-contextual advertising. We honor Global Deletion Requests submitted through the California DELETE Act's centralized deletion platform (DROP) and will process verified requests within the timeframes required by law.

8. Disclaimer of Liability

NexusFlowHub is a lead generator. We do not guarantee loan approval or specific insurance rates. We are not responsible for the privacy practices of third-party lenders once you leave our Site.

9. Contact Us

For privacy inquiries or to exercise your data rights, contact us at: NexusFlowHub (DBA NexusFlow) 2801 B St PMB 3039 San Diego, CA 92102 Email: nexuscommander@nexusflowhub.io

10. Stripe Radar & Automated Fraud Detection (Partner Lead Portal)

NexusFlowHub uses Stripe Radar, an automated fraud detection service provided by Stripe, Inc., to protect against fraudulent transactions on our Partner Portal. Stripe Radar may collect and process the following data for fraud risk assessment: • Behavioral Analytics: Mouse movement patterns, typing cadence, and interaction timing. • Device Fingerprinting: Browser type, operating system, screen resolution, and installed plugins. • Network Data: IP address, geolocation (derived from IP), and VPN/proxy detection. • Transaction History: Prior payment patterns associated with your email, card, or device. This constitutes automated profiling under GDPR Article 22 and CCPA. By saving a payment method through our portal, you explicitly acknowledge and consent to this automated processing. You have the right to request human review of any fraud decision by contacting us at nexuscommander@nexusflowhub.io. For more information on Stripe's data practices, visit stripe.com/privacy.

11. California-Specific Disclosures (CCPA/CPRA 2026)

• Notice at Collection: We collect Identifiers (Name/Email/Phone) and Sensitive Personal Information (Income/Employment/Credit Range) for the primary purpose of selling or sharing this information with third-party financial providers to match you with the products you request. • Data Broker Status: NexusFlowHub operates as a lead generation platform and may be classified as a data broker under California law. We provide a clear 'Do Not Sell or Share' mechanism for all California residents. • Data Retention: We retain your lead data for a period of 7 years to comply with federal financial record-keeping and fraud prevention regulations. • Right to Limit Sensitive Data: You have the right to limit our use of your Sensitive Personal Information (Income/Employment) to only the matching services requested. • No Automated Decision Making: NexusFlow performs lead matching only. Final credit decisions are made solely by third-party lenders.