§ Imprint

Disclosure pursuant to § 5 ECG, § 14 UGB & § 25 MedienG (Austrian law)

§ Privacy Policy

Last updated: October 2026

1. Data controller

Himmelbauer Digital Innovations e.U., Hannovergasse 27/1, 1200 Vienna, Austria. Contact for all privacy requests: florian@himmelbauer.eu

2. Local-first by default

By default, all your project data is stored in your browser (localStorage) and never leaves your device. Without an account, we process no personal data beyond the technical server logs and the anonymous usage statistics described below (and, if you contact us, the data you send).

3. Data we collect

• Account data (optional): your email address if you sign in (via Supabase Auth)
• Project data (optional): the projects, service links, and layout you save, if you enable cloud sync
• Payment data: your plan/subscription status (via Stripe; we never see or store card details)
• Contact and withdrawal data: name, email address and message if you use the contact form or the withdrawal function; for withdrawals also the contract concerned and the time of receipt
• Server logs: IP address, timestamp, and requested URLs, processed by our hosting provider for delivery, security and abuse prevention
• Rate-limit data: your IP address, stored temporarily (at most 24 hours) to limit the number of requests

4. Purpose & legal basis

We use your data exclusively to operate your account, sync your dashboard across devices, bill your subscription, answer your messages and process withdrawals, and prevent abuse. Legal basis: performance of contract (Art. 6(1)(b) GDPR), our legal obligations such as bookkeeping and confirming withdrawals (Art. 6(1)(c) GDPR), and our legitimate interest in a secure, functioning service (Art. 6(1)(f) GDPR). We do not use your data for advertising and do not sell or pass it on to third parties beyond the processors listed below.

Is providing data required? (Art. 13(2)(e) GDPR)

You can use Nexus without giving us any personal data. An email address is needed only if you want an account, cloud sync or a Pro plan, because we cannot provide those without it. Your name and email address are needed for the contact form and for a withdrawal, so that we can reply and send the legally required confirmation. Payment details are required only for a purchase.

5. Third-party processors

Where providers process data on our behalf, this happens under data processing agreements (Art. 28 GDPR), which Supabase, Stripe, Vercel and Upstash offer as part of their standard terms. The same applies to our email delivery provider.

Supabase (database & authentication) — stores account and synced project data. Privacy policy

Stripe (payments) — PCI-DSS-compliant payment processing; card details go directly to Stripe. Privacy policy

Vercel (hosting & analytics) — hosts the app and keeps short-lived server logs. We use Vercel Analytics, which collects anonymized, aggregated usage statistics without cookies and without tracking individual visitors across sites. Privacy policy

Google Favicon Service — the app loads favicons for the URLs you add from Google’s favicon service; your browser transmits the domain of the requested favicon (and your IP address, as with any web request) to Google. Privacy policy

Microlink (screenshots) — if you use the screenshot preview feature, the URL you request is sent to Microlink’s API from our server to generate the preview image. Privacy policy

Upstash (rate limiting & abuse prevention) — to protect the service against abuse, your IP address is processed when you use certain functions (sign-in, contact form, withdrawal function, screenshots) and temporarily stored in a Redis database to limit the number of requests per time window. Data is stored on servers in Frankfurt, Germany (EU). Entries expire automatically after the respective time window, at the latest after 24 hours. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in IT security and abuse prevention). Privacy policy

Email delivery — confirmation emails, withdrawal receipts and replies to your messages are sent through a transactional email provider that processes them on our behalf. Messages you send through the contact form reach our mailbox.

Transfers to third countries: Stripe, Vercel, Google and Microlink (and, depending on the provider, our email delivery provider) may process data in the USA. Where the provider is certified under the EU-U.S. Data Privacy Framework, the transfer rests on the Commission’s adequacy decision; otherwise we rely on Standard Contractual Clauses. Supabase stores data in the region configured for this project.

If you use the link health check, our own server pings the URLs you saved. No tracking of your browsing takes place.

6. Cookies

We use only technically necessary storage: a Supabase session cookie for authentication (only if you sign in) and localStorage for your dashboard data and settings. These are required to operate the service and therefore need no consent banner. There are no tracking or advertising cookies.

7. Data deletion & retention

To delete your account, send a request to florian@himmelbauer.eu from the email address associated with your account. Your account and all associated personal data will be deleted within 30 days of the request. Contact messages are kept until your request is dealt with and for as long as needed to document it. Local data can be removed at any time by clearing your browser storage. Payment and withdrawal records are retained as long as required by Austrian tax and commercial law (§ 132 BAO: 7 years).

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection at any time (Art. 15–21 GDPR). To exercise any of these rights, contact florian@himmelbauer.eu. Nexus additionally offers full data export directly in the app. You also have the right to lodge a complaint with the supervisory authority — in Austria: Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.

§ Terms of Service

Last updated: October 2026

1. Scope

These terms govern all use of the platform “Nexus” between Himmelbauer Digital Innovations e.U. (the “Provider”) and its users. Consumers within the meaning of these terms are natural persons using the platform for private purposes (§ 1(1)(2) KSchG).

2. Services & plans

The Provider offers a web-based dashboard for organizing projects and their connected services:

• Free plan: up to 3 projects, no account required
• Pro Monthly: €5 / month — unlimited projects, cancel anytime (subscription)
• Pro Lifetime: €29 one-time — unlimited projects for the lifetime of the product, including all future updates

“Lifetime” means for as long as Nexus is operated by the Provider. Should the service ever be discontinued, users will be notified with reasonable advance notice and can export all their data.

3. Contract formation

A contract is formed upon completion of the payment process via Stripe. By clicking the button for the paid order (“Subscribe” or “Buy”), the user submits a binding offer with an obligation to pay; the contract is accepted through Stripe’s payment confirmation. After the order we send a confirmation email with the contract information, the withdrawal notice and these terms.

4. Prices & payment

All prices are final prices. As a small business under § 6(1)(27) UStG, the Provider does not charge VAT. Payment is processed by Stripe; accepted methods are credit and debit cards and other methods offered by Stripe. The Provider may change prices for new purchases at any time. For existing monthly subscriptions, a price change takes effect only if the Provider has informed the subscriber by email at least 30 days in advance and the subscriber agrees; if the subscriber does not agree, the subscription can be cancelled at the end of the current billing period and the previous price applies until then. The one-time price of an already purchased lifetime plan does not change.

5. Subscription & cancellation

The monthly plan renews automatically each month unless cancelled. Cancellation is possible at any time, without stating reasons, effective at the end of the current billing period; access remains fully available until then. Cancellation is done self-service via the Stripe customer portal, reachable through the “Manage subscription” option in the app. For technical problems, florian@himmelbauer.eu is available. Periods already paid are not refunded, except in the case of a withdrawal under section 6.

6. Right of withdrawal

Consumers under the Austrian Distance Selling Act (FAGG) generally have a 14-day right of withdrawal from contract formation (for both the monthly plan and the lifetime plan). To exercise the right, you must inform us (Himmelbauer Digital Innovations e.U., Hannovergasse 27/1, 1200 Vienna, Austria, email: florian@himmelbauer.eu) of your decision by a clear statement (for example a letter sent by post or an email). You may use the model withdrawal form below, but it is not mandatory. To meet the deadline, it is sufficient that you send your communication before the withdrawal period has expired.

Withdraw online: you can also use our withdrawal function at /withdraw. It works without login and you receive an immediate confirmation by email. The link is also available in the header of this page and in the Pro dialog.

Effects of withdrawal: if you withdraw, we will reimburse all payments we received from you without undue delay and no later than 14 days after the day we receive your withdrawal. We use the same means of payment you used for the original transaction, and you will not incur any fees because of this reimbursement. We do not ask you to waive your right of withdrawal: even if you have already used Pro, the full amount is refunded if you withdraw within the 14 days. A monthly subscription ends with the withdrawal.

7. Your data & content

You keep full ownership of all data you store in Nexus. Export is available at any time in the app. The Provider claims no rights to your project data and uses it only to provide the service (see Privacy Policy).

8. Acceptable use

The service may not be used for unlawful purposes, to store unlawful content, to attack or overload the platform or third-party systems (e.g. abusive use of the link check or screenshot features), or to circumvent plan limits. The Provider may suspend accounts in cases of serious abuse; in that event, data export remains possible for a reasonable period.

9. Availability & warranty

The Provider strives for high availability but cannot guarantee uninterrupted operation. Planned maintenance is communicated in advance where possible. The service is provided as described on the pricing page; statutory warranty rights of consumers under the Austrian Consumer Warranty Act (VGG) remain unaffected.

10. Liability

Liability is governed by Austrian law. The Provider is liable without limitation for intent and gross negligence and for damage arising from injury to life, body, or health. In cases of slight negligence, the Provider is liable only for the breach of essential contractual obligations, limited to the foreseeable, typical damage, to the extent permitted by law. Mandatory consumer rights remain unaffected.

11. Governing law & jurisdiction

Austrian law applies, excluding the UN Convention on Contracts for the International Sale of Goods (CISG). For consumers, the statutory places of jurisdiction apply; no jurisdiction agreement to the consumer’s disadvantage is made. If you are a consumer habitually resident in another country, the mandatory consumer protection provisions of that country remain unaffected. For merchants, Vienna is the exclusive place of jurisdiction. Should individual provisions of these terms be invalid, the validity of the remaining provisions remains unaffected.

12. Changes to these terms

The Provider may update these terms; the current version is always available on this page. Changes that affect existing paid plans take effect only if the user agrees. If a monthly subscriber does not agree, the subscription can be cancelled at the end of the current billing period and the previous terms continue to apply until then. Changes that only benefit users or are required by law may take effect immediately.

§ Contact

Questions, feedback, privacy requests, withdrawal declarations: florian@himmelbauer.eu, or use the form below. To withdraw from a purchase online, use the withdrawal function.

Last updated: October 2026