Privacy Policy
Last updated: [DATE]
Before you dive in
- We collect account info, activity/fraud-prevention data, and cookies — no more than the Service needs to run.
- Completing an offer or PTC ad shares data with that third-party network directly; we don't control their practices.
- We never sell your personal information, and don't knowingly collect data from anyone under 13.
- If you're in the EEA/UK or California, you have specific rights described below.
- Payouts are processed by Tremendous, who receives what's needed to send your reward.
This summary is for convenience only. The full policy below is what actually governs how we handle your information.
This Privacy Policy explains how the operator of Earn Nexus ("we," "us," "our") collects, uses, discloses, and protects information in connection with earn-nexus.com and related services (the "Service"). It's part of, and should be read together with, ourTerms of Service. If you don't agree with this Policy, don't use the Service.
1. Eligibility and Children's Privacy
The Service is not directed to, and must not be used by, anyone under 13. We do not knowingly collect personal information from children under 13, in line with the U.S. Children's Online Privacy Protection Act (COPPA) and comparable laws elsewhere. If we learn that we've collected personal information from a child under 13, we will delete it as soon as reasonably possible.
Users between 13 and 17 may only use the Service with the express consent and supervision of a parent or legal guardian, and are subject to the fuller eligibility terms inSection 1 of our Terms of Service.
2. Information We Collect
We collect the following categories of information:
- Account information: the email address and password you use to sign up and sign in through Supabase Auth, and any profile details you add.
- Activity data: the offers, PTC ads, and surveys you view or complete, your Credit balance and transaction history, referral activity, and withdrawal requests.
- Device and fraud-prevention data: IP address and general location it maps to, device/browser fingerprint, and similar technical signals we use to detect multiple accounts, bots, and other abuse described in Section 6 of our Terms.
- Communications: messages you send us, such as support requests or payout disputes.
- Cookies and local storage: including your theme preference (light/dark/system) and session identifiers needed to keep you signed in.
We do not intentionally collect sensitive categories of personal information (such as government ID numbers, precise geolocation, or health data), and ask that you not send us any in support requests.
3. How We Use Information
We use the information above to:
- operate the Service — creating and authenticating your account, tracking and crediting Credits, and processing withdrawals;
- detect and prevent fraud, multiple accounts, bots, and other conduct prohibited under our Terms;
- communicate with you about your account, payouts, or support requests;
- maintain the security, integrity, and reliability of the Service; and
- comply with legal obligations and enforce our Terms.
We don't use your information to build advertising profiles of you for third parties, and we don't sell personal information.
4. Third-Party Services and Data Sharing
Earning and paying out Credits necessarily involves sharing some information with third parties. Specifically:
- Offer and survey networks (offerwalls): when you start an offer or survey, the network's own SDK or redirect link is used, and it receives a click/transaction identifier plus whatever information you submit directly on its site or the completion event it reports back to us (e.g. offer ID, completion status, reward amount). We don't control what these networks separately collect from you — see their own privacy policies before completing an offer.
- PTC advertisers: viewing or advertising a PTC ad shares the ad's view/click record with us; advertisers see aggregate performance, not your personal information.
- Tremendous (payouts): to send a withdrawal, we share the information Tremendous needs to process it (such as your email and the reward amount). Tremendous's own privacy policy governs its handling of that data.
- Supabase (infrastructure): our database, authentication, and backend run on Supabase, which stores and processes the data described in this Policy on our behalf.
- Cloudflare: our hosting, bot/abuse-challenge (Turnstile), and related infrastructure run on Cloudflare, which processes technical and security-related data as part of delivering the Service.
We don't share your personal information with any other third party for their own marketing purposes, and we require the services above to use what they receive only to provide their function to us or to you directly.
5. Cookies and Similar Technologies
We use strictly necessary cookies/local storage to keep you signed in and to remember your theme preference, and use device signals described in Section 2 for fraud prevention. We don't currently use third-party advertising or cross-site tracking cookies of our own. Offer, survey, and ad networks you interact with may set their own cookies once you leave to their site or load their content — those are governed by their own policies, not this one.
Most browsers let you block or delete cookies through their settings. Blocking strictly necessary cookies may prevent you from staying signed in or using core features of the Service.
6. Your Privacy Rights
If you're in the European Economic Area, the UK, or a similar jurisdiction (GDPR/UK GDPR): our legal bases for processing are performance of our contract with you (running your account and paying Credits), our legitimate interests (fraud prevention and Service security), and legal compliance. Subject to applicable conditions and exceptions, you may request access to, correction of, deletion of, or a portable copy of your personal information, object to or restrict certain processing, and lodge a complaint with your local data protection authority.
If you're a California resident (CCPA/CPRA): you have the right to know what personal information we collect, use, and disclose, to request deletion or correction of it, and to non-discrimination for exercising these rights. We do not sell or "share" personal information as those terms are defined under California law.
To exercise any of these rights, contact us using the details in Section 10. We may need to verify your identity before acting on a request, and some requests may be limited where we have a legal basis to retain the information (for example, fraud records tied to an account termination).
7. Data Retention
We keep account, activity, and payout records for as long as your account is active, plus a reasonable period afterward to satisfy tax, accounting, fraud-prevention, and legal obligations, and to resolve disputes under the appeals window described in our Terms. Fraud-related device and IP signals tied to a terminated account may be retained longer to prevent repeat abuse across accounts.
8. Data Security
We use reasonable technical and organizational measures — including access controls and row-level security on our database — to protect your information. No method of transmission or storage is completely secure, and we can't guarantee absolute security of information you provide.
9. International Data Transfers
Our infrastructure providers may process and store information in countries other than the one you live in, including the United States. Where required, we rely on appropriate safeguards (such as our providers' standard contractual clauses) for these transfers.
10. Contact Us
Questions about this Policy, or requests relating to your personal information:[CONTACT EMAIL]
11. Changes to This Policy
We may update this Policy at any time. For material changes, we'll update the "Last updated" date above and, where appropriate, post a notice on the Service. Continuing to use the Service after a change means you accept the revised Policy.
This page is a template and not legal advice. Sections 4, 6, and 9 in particular should be reviewed against the laws of wherever you and your users are actually located, and against the actual third-party services in use, before launch.