← Back to Nexus

Privacy Policy

Last updated: 2026-06-03

Your data never touches our servers.

Nexus is a local-first CLI tool. It runs on your machine, reads files on your machine, and exposes an MCP server on your machine. PixelDesigns LLC, the operator of Nexus, does not host a backend for the product and does not receive your data.

What we collect from the CLI

Nothing. The @pixeldesigns/nexusCLI does not include analytics, telemetry, crash reporting, usage pings, or account creation. There is no Nexus user account because there is no Nexus server to hold one. When you run Nexus, it reads the local files you point it at (CSV, XLSX, SQLite, or a Google Sheets URL you've authenticated against) and serves them to your local AI agent over MCP. None of that traffic is observable to us.

The CLI source is public and MIT-licensed at https://github.com/scottshapiro142/nexuscli - you can verify these claims yourself.

Google account access

If you connect a Google Sheets source, Nexus uses Google OAuth to authenticate you against your own Google account. We request a single scope: https://www.googleapis.com/auth/spreadsheets.readonly, which permits read-only access to spreadsheets you already have access to.

The OAuth refresh token is stored on your machine at ~/.nexus/auth/google.json with file permissions 0600 (readable only by your user). The token is used by the CLI to call the Google Sheets API directly from your machine. PixelDesigns never receives the token, and the Sheets data never passes through PixelDesigns infrastructure. You can revoke access at any time from your Google Account permissions page, or by deleting the local file.

Optional cloud publishing

A future version of Nexus may offer optional "selective cloud publishing" - letting you explicitly upload specific derived artifacts to a hosted endpoint. When that feature ships, this section will describe exactly what gets uploaded, where it is stored, and how to delete it. Today, the product does not include cloud publishing, and nothing is uploaded.

The website (nexuscli.dev)

nexuscli.dev is a static marketing site hosted on Vercel. The site runs two first-party Vercel services to help us measure performance:

We do not use Google Analytics, Facebook Pixel, or any other third-party tracker. Beyond the two Vercel services above, the site does not include analytics, tracking pixels, or advertising scripts.

Vercel also receives standard HTTP request metadata (IP address, user-agent, timestamp) as part of serving the page - this is inherent to any web hosting. We do not access, retain, or aggregate that data separately from the analytics above.

Contact

Nexus is operated by PixelDesigns LLC. For privacy questions or requests:

Changes to this policy

If this policy changes, we'll update this page and revise the "Last updated" date at the top. Material changes that affect data handling will also be noted in the project's release notes on GitHub.