← Back to NEXUS DSP

Privacy Policy

NEXUS DSP™ · VELLOX LTD

Last updated: April 2026

Data Controller: VELLOX LTD, Company No. 17136312, registered in England and Wales. ICO Registration: ZC115373.

1. Who We Are

NEXUS DSP is an intelligence platform operated by VELLOX LTD, purpose-built for Amazon Delivery Service Partners (DSPs). We provide performance tracking, operational analytics, and service review tools for DSP operations in the United Kingdom.

2. What Data We Collect

We collect the following categories of data:

Account Data: Name, email address, organisation name, station code, and role when you register.

Operational Data: Performance metrics, scorecard data, delivery concession records, and compliance data that you upload to the platform. This data relates to your DSP operations and delivery associates.

Usage Data: Browser type, IP address, pages visited, and interaction patterns to improve the platform experience.

Communications: Emails sent through our support channels and any feedback you provide.

3. How We Use Your Data

We use your data to provide and improve the NEXUS DSP platform, including generating performance analytics, trend analysis, forensic intelligence, and operational insights for your DSP. We do not sell your data to third parties. We do not use your data for advertising.

4. Data Storage and Security

All data is stored securely using Supabase (hosted on AWS in the EU region) with row-level security policies on all database tables. We are Cyber Essentials certified (IASME verified). All data transmission is encrypted via TLS. Access to your organisation's data is restricted to authenticated members of your organisation only.

5. Data Retention

Operational data is retained for as long as your account is active. Upon account deletion, all associated data is permanently removed within 30 days. You may request data export or deletion at any time by contacting us.

6. Your Rights (UK GDPR)

Under UK GDPR, you have the right to: access your personal data, rectify inaccurate data, erase your data, restrict processing, data portability, and object to processing. To exercise any of these rights, contact us at privacy@nexusdsp.ai.

7. Cookies

We use essential cookies required for authentication and session management. We do not use advertising or tracking cookies. Analytics are privacy-preserving and do not track individual users across sites.

8. Third-Party Services

We use the following third-party services: Supabase (database and authentication), Vercel (hosting), Cloudflare (DNS and CDN), Resend (transactional email), and Sentry (error monitoring). Each processes data in accordance with their own privacy policies and GDPR compliance frameworks.

9. Contact

For privacy inquiries: privacy@nexusdsp.ai

For general support: support@nexusdsp.ai

VELLOX LTD, registered in England and Wales, Company No. 17136312.