Terms of Service

1. Parties & Definitions

These Terms of Service ("Terms") constitute a legally binding agreement between you ("Client", "you") and Nexuuscore Ltd, a company registered in England and Wales ("Nexuuscore", "we", "us"). By accessing the Nexuuscore platform or purchasing any subscription, you agree to these Terms in full.

Throughout these Terms:

• "Platform" means the Nexuuscore SaaS application, APIs, dashboards, and all associated infrastructure.
• "Services" means self-serve platform modules (Nexuus Outreach, Nexuus Digital) and managed enterprise fulfillment deployments (Nexuus Enterprise Contact Centre, Nexuus Shield) offered through the Platform.
• "Instance Provisioning" means the allocation and configuration of private, dedicated server infrastructure and workspace environments for a Client's digital workforce.
• "Credits" means pre-paid usage units that may be applied to AI compute, content generation, and platform operations.

2. Subscription & Billing

2.1 Provisioning, Tiers & Credit Accounts and Allocation

Access to the Platform is granted via the Provisioning of a Private Instance. Your subscription covers dedicated workspace provisioning and high-performance compute allocation on our private UK Private UK infrastructure.

Credit Accounts and Allocation: Platform credits operate under two strictly segregated accounting balances:

• 1. Monthly Subscription Credits (Expiring Quota): Your monthly subscription allocation (1,000 / 3,500 / 12,000 credits) is granted at the start of each billing cycle. Unused monthly subscription credits expire at the end of each 30-day billing cycle upon renewal and do not roll over.
• 2. Top-Up Credits (Non-Expiring Balance): Additional credits purchased via Top-Up Packs never expire as long as your workspace remains active and in good standing.
• 3. Split Deduction & Escrow Priority: All operations automatically consume expiring Monthly Subscription Credits first, preserving your non-expiring Top-Up Credits. In multi-lead batch campaigns, credits are held in temporary escrow pending verification. If a prospect fails mailbox deliverability or verification checks, the escrowed credit is automatically returned to your available balance. If an escrow refund occurs across a billing cycle boundary, it restores to your active monthly subscription pool under anti-arbitrage governance.
• 4. 10.00 Credits per Outreach-Ready Account: Each billable outreach-ready prospect account represents exactly one target organisation paired with one qualifying contact persona and includes prospect discovery, mailbox verification, ICP qualification, and outreach preparation. Credits are held in temporary escrow upon campaign launch and debited at 10.00 Platform Credits per qualified outreach-ready account upon successful deliverability verification and campaign staging (e.g. 1,000 credits provides capacity for up to 100 accounts; 3,500 credits provides capacity for up to 350 accounts; 12,000 credits provides capacity for up to 1,200 accounts). Outbound outreach execution (up to 3 sequence attempts per verified account within the active campaign lifecycle) consumes zero additional credits.
• 5. Universal Fungibility: Credits not spent on lead prospecting can be allocated flexibly across all generative operations (Market Dossiers, SEO Audits, Content Articles, and Video Studio).

Standardized Consumption Rate Matrix:

Prices are listed in GBP and are exclusive of VAT unless otherwise stated. Current pricing is always available at nexuuscore.io/pricing.

2.2 Billing Cycles & Monthly Quota Reset

Subscriptions are billed either monthly or annually in advance. Annual subscriptions receive a 20% discount. Billing is processed through our payment processor, Stripe. On each monthly renewal date, your monthly subscription credit balance resets to your plan's full allowance (1,000 / 3,500 / 12,000 credits). Unused monthly subscription credits from the previous cycle expire upon renewal.

2.3 Top-Up Packs (Non-Expiring Lifetime Credits)

Additional compute capacity and lead prospect allocations may be purchased at any time as Top-Up Packs (Boost Pack: 500 Credits for £175 / £0.35 per credit; Growth Pack: 1,500 Credits for £450 / £0.30 per credit; Scale Pack: 5,000 Credits for £1,250 / £0.25 per credit). Unlike monthly subscription quotas, Top-Up Credits never expire while your workspace remains active and roll over indefinitely across billing cycles.

2.4 Price Changes

We reserve the right to adjust pricing with 30 days' written notice. Price changes do not affect the current billing cycle of existing subscriptions.

4. Acceptable Use

4.1 Permitted Use

You may use the Platform for lawful business purposes consistent with the functionality of your chosen plan. This includes operating automated AI agents, generating reports, managing sales pipelines, and conducting digital marketing, all within the bounds of applicable UK law.

4.2 Prohibited Use

You shall not use the Platform to:

• Conduct illegal web scraping, data harvesting, or any activity that violates the Computer Misuse Act 1990
• Send unsolicited bulk communications in violation of the Privacy and Electronic Communications Regulations 2003 (PECR)
• Engage in black-hat search engine manipulation, link farming, automated comment spamming, PBN link building, or activities violating search engine webmaster guidelines (including Google Search Essentials)
• Attempt to reverse-engineer, decompile, or extract model weights, training data, or proprietary algorithms from the Platform
• Circumvent rate limits, usage quotas, or security controls
• Use AI-generated outputs to impersonate real individuals without their explicit consent
• Store, process, or transmit content that is unlawful, defamatory, or that infringes third party intellectual property rights
• Access or probe the Platform's infrastructure, internal APIs, or GPU clusters outside your authorised scope

4.3 Enforcement

We reserve the right to suspend or terminate your account immediately and without prior notice if we reasonably determine that you have breached this Acceptable Use policy. No refund shall be issued for accounts terminated due to policy violations.

4.4 Telephony, Emergency Services & AI Voice Compliance

You acknowledge that Nexuuscore is a Voice-over-IP (VoIP) and AI Telephony infrastructure provider and does not provide native access to Emergency Services (911, 999, 112). Where outbound AI Telephony is deployed via Nexuus CallCentre, the Platform automatically broadcasts an un-mutable legal audio disclosure identifying the calling organization and commercial intent before unmuting bi-directional conversational audio. You explicitly warrant that: (i) all outbound numbers have been screened against national preference registries (including the UK TPS/CTPS and US National DNC); (ii) telemarketing to consumers without prior express written consent is strictly prohibited; and (iii) live calls into jurisdictions requiring presumed consent (such as Germany under §7 UWG) possess a documented, verifiable factual basis.

4.5 Prohibited Data Classes

You are strictly prohibited from submitting "High-Toxicity" data to the Platform, including but not limited to: (i) primary payment card numbers (PCI-DSS); (ii) Protected Health Information (PHI) under HIPAA or similar regulations; and (iii) government-issued identification numbers in unencrypted formats.

4.6 Developer API Keys, 2FA & Programmatic Token Policy

Where your subscription plan includes Developer API access (Scale tier and bespoke enterprise deployments), Nexuuscore provides cryptographically generated API tokens (prefixed sk-nexuus-live-). You are solely responsible for maintaining the confidentiality and secure storage of all API keys issued to your organization. To protect account integrity, workspace administrators are strongly required to maintain hardware-backed Two-Factor Authentication (2FA TOTP) via standard authenticator applications. Programmatic API calls executed using valid API keys consume monthly lead quotas and compute credits identically to manual dashboard interactions. Nexuuscore shall have zero liability for credit depletion, unauthorized data retrieval, or workflow mutations resulting from compromised, leaked, or mishandled client API credentials. You agree to immediately revoke any compromised token via your client dashboard.

4.7 Automated Algorithmic Circuit Breakers & Threat Isolation

You acknowledge and agree that Nexuuscore deploys autonomous security governors, admission threat scoring, and reactive IP rate-limiting filters across its API gateways. If our systems detect anomalous traffic velocity, prompt injection patterns, or credential brute-forcing, the Platform reserves the right to automatically apply temporary rate limits or temporary IP quarantines without prior notice to protect shared multi-tenant infrastructure integrity.

4.8 Outreach Deliverability, Statutory Governance & Required Tenant Identity

Outbound cold outreach generated and transmitted through the Nexuuscore Outreach subsystem operates under conservative platform compliance policies that may be stricter than the minimum statutory requirements of applicable law. All client organisations must maintain a verified legal business name and operating physical postal address in workspace settings prior to launching campaigns. The Platform will refuse campaign creation and message dispatch if this identity package is unconfigured. Furthermore: (i) all outbound messages deterministically include public data source provenance citations and 1-click suppression links that cannot be removed; (ii) drafted cold outreach campaigns require client operator review and batch approval, remaining in a pending review state with a 15-minute cancellation window prior to physical dispatch; and (iii) the Client assumes sole responsibility for reviewing drafted copy and ensuring lawful recipient targeting under applicable local laws.

4.9 AI Digital Personas, Neural Voice Cloning, Biometric Likeness & Telephony/Video Compliance

Where you utilize the Platform’s AI Digital Personas, Voice Cloning, or Presenter Likeness features (whether via direct microphone recording, live webcam capture, or file upload), you explicitly warrant, represent, and certify that: (i) you are either the individual whose voice or likeness is submitted or you possess verifiable, written legal authorization and explicit consent from the depicted individual across all allocated channels (including Video Synthesis, Outbound AI Telephony, and Voice Briefings); (ii) you shall not submit audio or image samples to generate deepfakes, deceptive impersonations, defamatory statements, or content intended to defraud third parties; and (iii) you shall strictly adhere to third-party social platform disclosure rules (including mandatory AI-Generated Content / AIGC tags on TikTok, YouTube, Instagram, and LinkedIn) as well as statutory telecommunications AI disclosures. Right to Revoke & Purge: You may at any time revoke consent or retire any registered AI Persona or voice profile via the Uploaded Media & Asset Vault in your workspace dashboard. Consent revocation immediately invalidates the associated version governance hash and blocks the persona from all future video generation, telephony call routing, and audio synthesis pipelines. You agree to defend, indemnify, and hold Nexuuscore harmless against any claims, fines, or damages arising from unauthorized voice cloning, unlawful telephony impersonation, or non-compliant media distribution.

4.10 Platform-Wide Lead Exclusivity, Anti-Collision & Statutory Suppression Precedence

Upon campaign settlement and allocation of billable outreach-ready accounts, the Platform grants the Client a time-bounded 60-day commercial exclusivity reservation over the designated prospect contact and/or corporate entity within the Client's selected exclusivity scope (Individual Contact, Industry Sector, or Corporate Account). During this active 60-day window, platform safety controls prevent competing client organisations from claiming or initiating automated outreach to the reserved contact.

Statutory Opt-Outs & Exclusivity Termination: If an individual or organisation exercises their statutory right to object or opt-out under UK GDPR Article 21, PECR Regulation 22/23, or applicable privacy law, or requests suppression via platform unsubscribe mechanisms, the Platform will immediately suppress the associated contact from all future outbound campaigns. The Client acknowledges that statutory suppression requests immediately terminate active commercial exclusivity over that prospect across all client workspaces. Platform compute and verification fees incurred prior to suppression remain non-refundable.

Zero Cross-Tenant Data Pooling Warranty: Nexuuscore warrants that prospect contact records, engagement histories, and custom campaign criteria generated within a Client's workspace remain strictly tenant-isolated and are never shared, syndicated, pooled, or resold to other tenants. Exclusivity checks operate strictly via irreversible cryptographic hashes without revealing prospect identities across tenant boundaries.

4.11 Nexuus Shield & Automated Penetration Testing Rules of Engagement (RoE)

Where the Client initiates automated external vulnerability scanning, reconnaissance, or attack surface assessments through Nexuus Shield (including pentest_recon and pentest_full operations), the parties agree to the following statutory Rules of Engagement:

• Statutory Authorization & Warranty of Authority: The Client explicitly represents, warrants, and covenants that it is the sole lawful owner of, or possesses unconditional, verifiable, written legal authorization from the lawful owner to conduct security testing on, all fully qualified domain names, public IP addresses, and digital infrastructure submitted as scan targets. The Client certifies that executing Nexuus Shield operations on such targets does not violate the UK Computer Misuse Act 1990 (CMA 1990 §§ 1 and 3), the US Computer Fraud and Abuse Act (CFAA, 18 U.S.C. § 1030), or any equivalent domestic or international computer crime legislation.
• Mandatory Ownership Proof & Dual-Control Governance: External perimeter scanning is strictly conditioned upon verified ownership verification. Prior to scan dispatch, the Client must prove authoritative domain control via cryptographic DNS TXT challenge token validation (_nexuus-challenge) and must execute a non-repudiable dual-control administrative sign-off within the client dashboard. Scans targeting unverified domains or mismatched DNS endpoints are automatically blocked by automated platform authorization gates.
• Strict Prohibition on Unauthorized & Multi-Tenant Targets: The Client shall strictly refrain from submitting shared cloud hostnames, third-party software-as-a-service (SaaS) multi-tenant endpoints, government or military networks, or any infrastructure not exclusively assigned to the Client. Nexuuscore reserves the autonomous right to immediately abort in-flight scans, revoke platform access, and notify competent regulatory authorities if unauthorized target probing is detected.
• Non-Exploitation & Non-Destructive Scanning Warranty: Nexuus Shield operates strictly as a defensive discovery, port identification, service fingerprinting, and signature correlation platform. Nexuuscore warrants that the scanning engine executes non-destructive probes and does not execute weaponized exploit payloads, physical data modification, or intentional denial-of-service (DoS) stress vectors.
• Client Defense & Full Statutory Indemnity: The Client agrees to defend, indemnify, and hold harmless Nexuuscore Ltd, its directors, officers, employees, and infrastructure partners from and against any and all claims, regulatory investigations, fines, damages, expenses, and legal fees arising out of or related to unauthorized target designations, third-party network complaints, or statutory violations of the Computer Misuse Act 1990 or CFAA caused by Client instructions.

5. Data Ownership & Intellectual Property

5.1 Your Data

You retain full ownership of all data you upload to, or generate through, the Platform ("Client Data"). Nexuuscore does not claim any intellectual property rights over your Client Data.

5.2 Our Platform

All Nexuuscore technology, software, models, algorithms, documentation, and infrastructure remain the exclusive intellectual property of Nexuuscore Ltd. Your subscription grants a limited, non-exclusive, non-transferable licence to use the Platform for the duration of your active subscription.

5.3 AI-Generated Content & Model Privacy

Content generated by the Platform using your prompts and data is owned by you. Nexuuscore does not use Client Data or AI outputs to train, fine-tune, or improve its models or any third party models. All core AI model inference executes on Nexuuscore’s private UK infrastructure. Where third party sub-processors are engaged for transactional enrichment or billing (see §12.2), Client Data is transmitted strictly on a transactional basis under privacy-neutralizing safeguards and is never authorized or retained by third parties for model training.

6. Service Level & Availability

Nexuuscore targets 99.5% platform availability measured on a monthly basis. Scheduled maintenance windows will be communicated at least 48 hours in advance. The Platform's uptime monitoring is available to all active subscribers through the client dashboard.

Nexuuscore shall not be liable for outages resulting from: force majeure events, upstream provider failures (including GPU cloud providers), or Client-initiated misconfigurations.

7. Limitation of Liability

To the maximum extent permitted by law:

• Nexuuscore's total aggregate liability under these Terms shall not exceed the fees paid by you in the 12 months preceding the claim.
• Nexuuscore shall not be liable for any indirect, incidental, consequential, or punitive damages, including lost profits, lost data, or business interruption.
• Nexuuscore does not warrant that AI outputs are error-free, complete, or suitable for any particular purpose. AI-generated content should be reviewed by qualified personnel before use in critical business decisions.

7.1 Search Engine & Technical Remediation Disclaimer

Nexuuscore provides automated SEO technical audits (covering core architecture, on-page semantics, meta-data, and performance compliance), AI content generation, and site health monitoring. External third-party backlink metrics and directory aggregator integrations are planned roadmap capabilities. You acknowledge and agree that search engine indexing, domain ranking algorithms, and third party search engines (including Google and Bing) operate independently. Nexuuscore does not warrant or guarantee specific search engine ranking positions, organic search volume increases, or third-party index retention rates. Furthermore, while Nexuuscore provides automated site remediation tools with rollback capabilities, you accept sole responsibility for site code and meta-data modifications deployed under your configured Autonomy Policy or approved via your dashboard.

7.2 Social Media Syndication & Third-Party Account Disclaimer

Nexuuscore provides automated content scheduling, video asset production, and multi-channel syndication across third party social media platforms (including LinkedIn, TikTok, and Reddit). For professional direct engagement vectors (including LinkedIn Executive Drafts), Nexuuscore operates strictly via human-mediated draft staging and client-side handoffs within your Action Approvals dashboard. The Platform does not execute unauthorized background browser automation or bot dispatches. You acknowledge that third party social networks enforce independent terms of service, API rate limits, and anti-automation policies. Nexuuscore shall not be liable if a third party social network throttles, rate-limits, shadowbans, restricts, or suspends a Client’s connected account as a result of Client-selected frequencies, schedules, or manual interaction patterns.

7.3 B2B Prospecting, Sender Reputation & Email Deliverability

Nexuuscore provides AI lead generation and automated B2B sales outreach infrastructure. The Client agrees to strictly adhere to the Privacy and Electronic Communications Regulations 2003 (PECR) corporate subscriber rules and applicable anti-spam laws. The Client is solely responsible for maintaining clean recipient target criteria and domain authentication (SPF, DKIM, DMARC). Nexuuscore makes no guarantees regarding email inbox placement or deliverability rates, and shall not be liable for email deliverability degradation, domain blacklisting, or reputation score impacts caused by Client target selection, message content, or recipient spam complaints.

7.4 Third-Party CMS & WordPress Direct Auto-Publishing Disclaimer

Nexuuscore provides automated content publication connectors allowing direct deployment of AI-generated articles and metadata to Client-connected WordPress or third party CMS instances via application credentials. You acknowledge and agree that the Client is solely responsible for reviewing and verifying the factual accuracy, legality, copyright, and layout formatting of any content prior to or upon publication. Nexuuscore does not warrant uninterrupted compatibility with custom third party plugins, themes, or database schemas, and shall not be liable for any CMS corruption, layout distortion, or unintended content modifications resulting from Client-authorized automated publishing actions.

7.5 Market Signals, Telemetry & Commercial Decision Disclaimer

Nexuuscore aggregates and provides real-time market signals, macroeconomic industry feeds, keyword opportunity scores, company registry intelligence (Companies House, SIC codes), and commodity arbitrage indicators derived from public news indices, RSS streams, and regulatory registries. You acknowledge and agree that all market signals, opportunity scores, demand forecasts, and strategic takeaways are automated algorithmic estimations and do not constitute financial, investment, legal, tax, or professional advisory services. Nexuuscore makes no representations or warranties regarding the commercial viability, accuracy, or profitability of business ventures, product launches, marketing initiatives, or capital allocations executed by the Client in reliance on platform intelligence. The Client exercises independent professional judgment and assumes sole responsibility for all commercial decisions and risk allocations.

7.6 Third-Party CRM, RevOps & Integration Connectors

Nexuuscore provides automated integration connectors and webhook dispatchers for third-party customer relationship management (CRM) platforms (including HubSpot and Salesforce), corporate mailbox providers (Google Workspace, Microsoft 365, and SMTP relays), team communication channels (Slack and Microsoft Teams), and workflow automation middleware (Zapier and custom webhooks). The parties agree to the following operational allocation of responsibilities:

• Independent Third-Party APIs: Third-party platforms operate independently and enforce autonomous terms of service, API quotas, and rate-limiting policies. Nexuuscore deploys jittered retry algorithms and error buffering; however, Nexuuscore shall not be liable for downstream synchronization delays, API throttling (HTTP 429), or record ingestion failures caused by third-party outages or exhausted client quotas.
• Field Mapping & Schema Integrity: The Client is responsible for configuring and verifying custom field mappings in destination CRMs. Nexuuscore provides schema validation and Dead-Letter Queue diagnostics, but shall not be responsible for rejected records resulting from unconfigured mandatory fields or incompatible data types in Client schemas.
• Mailbox Deliverability & Warm-Up Governors: Nexuuscore enforces automated per-mailbox rate-limiting and sending ramp-up governors (including automatic warm-up resets following 14 consecutive calendar days of dispatch inactivity); however, the Client retains sole responsibility for maintaining required domain DNS records (SPF, DKIM, DMARC) and complying with applicable anti-spam laws (PECR and CAN-SPAM).
• Webhook Endpoints & Replay Defense: Clients deploying custom webhooks are responsible for validating the cryptographic HMAC signature (X-Nexuus-Signature) and verifying timestamp headers to defend against replay attacks.

7.7 AI Video Synthesis, Likeness Consent & AIGC Platform Compliance

Nexuuscore provides automated kinetic video synthesis, presenter avatar generation, and neural voice cloning capabilities. The Client warrants and represents that any photographic likeness, headshot, or voice audio sample uploaded to the Platform is fully authorized under explicit, verifiable consent from the depicted individual for commercial synthetic media production. Generating non-consensual deepfakes or unauthorized likenesses is strictly prohibited and constitutes grounds for immediate account termination without refund.

• Platform AIGC Labeling: The Client agrees to comply with third-party social media platform policies requiring disclosure of AI-Generated Content (including TikTok AIGC attestation and YouTube altered media flags).
• Credit Escrow & 100% Render Refund: Compute credits for video rendering are held in temporary compute escrow during rendering and debited only upon verified MP4 asset delivery. If a render fails, times out, or is cancelled prior to completion, the escrowed credits are automatically released and 100% restored to the workspace.
• Likeness Revocation & Takedown Procedure: Clients retain the autonomous right to revoke likeness consent at any time via the dashboard. Upon revocation, the Platform immediately halts in-flight rendering jobs and attempts automated provider-supported content deletion across connected social channels where platform APIs permit, recording provider responses and surfacing unresolved items in the client dashboard.

7.8 Cybersecurity Posture, External Perimeter Probing & Compliance Attestation Disclaimer

Nexuuscore provides automated external attack surface discovery, port vulnerability audits, and defensive security posture reports through Nexuus Shield. The Client acknowledges and agrees to the following technical boundaries:

• Point-in-Time Technical Telemetry: Vulnerability scans, security posture scores, and diagnostic findings reflect empirical external perimeter observations at the precise timestamp of execution. Nexuuscore does not warrant or guarantee that scan reports identify all latent vulnerabilities, misconfigurations, or logic flaws, nor does Nexuuscore guarantee that the Client's infrastructure will remain immune to unauthorized intrusion, sophisticated targeted cyberattacks, or unpatched security vulnerabilities.
• Upstream ISP, Cloud Edge & Firewall Throttling: Nexuus Shield transmits scanning probes from authenticated UK IP blocks. The Client acknowledges that third-party hosting providers, content delivery networks (CDNs), and security firewalls (such as Cloudflare or AWS CloudFront) may autonomously rate-limit, throttle, or temporarily block scanning IPs. Nexuuscore shall have no liability for scan timeouts, incomplete telemetry, or upstream edge blocks triggered by client firewall rules.
• Independent Technical Diagnostic (Not Accredited Institutional Certification): Nexuus Shield vulnerability assessments, maturity scorecards, and remediation blueprints represent algorithmic technical evaluations and guidance. They do not constitute official government, legal, or accredited institutional certifications (including accredited Cyber Essentials Plus, third party vendor SOC 2 Type II, or ISO/IEC 27001 registrar attestations). Formal regulatory accreditation requires independent, certified third-party auditing bodies.

8. Termination

You may cancel your subscription at any time through your client dashboard or by contacting [email protected]. Upon cancellation:

• Your subscription remains active until the end of the current billing period.
• You may export your data for 30 days following the end of your subscription. To request a data export during this window, contact [email protected].
• After 30 days, your data will be permanently and irreversibly deleted from our systems.

Nexuuscore may terminate your account for material breach of these Terms, with written notice and a 14-day cure period (except in cases of Acceptable Use violations, which may result in immediate termination).

8.1 Security Incident Notification

In the event of a confirmed security incident involving Personal Identifiable Information (PII) attributable to Nexuuscore's infrastructure, Nexuuscore shall:

• In the event of a security incident involving Personal Data processed through the Platform: (a) where Nexuuscore acts as a data processor, Nexuuscore shall notify the affected Client (data controller) without undue delay after becoming aware of a Personal Data Breach, providing information reasonably required to meet statutory reporting duties; (b) where Nexuuscore acts as a data controller and the statutory risk threshold is met, Nexuuscore shall notify the UK Information Commissioner's Office (ICO) without undue delay and, where feasible, within 72 hours of becoming aware of the breach under UK GDPR Article 33, and shall communicate high-risk breaches to affected data subjects where required under Article 34.
• Provide affected customers with a written summary of the nature of the incident, the categories of data involved, the likely consequences, and the measures taken or proposed to address the breach.

9. Governing Law & Disputes

These Terms are governed by and construed in accordance with the laws of England and Wales. Any disputes arising from these Terms shall be subject to the exclusive jurisdiction of the courts of England and Wales.

Before initiating court proceedings, both parties agree to attempt resolution through good-faith negotiation for a period of not less than 30 days.

10. Changes to These Terms

Nexuuscore reserves the right to update these Terms at any time. Material changes will be notified via email to the address associated with your account at least 30 days before taking effect. Continued use of the Platform after such notice constitutes acceptance of the revised Terms.

11. Shared Responsibility & Authoritative Evidence

11.1 Shared Responsibility & Autonomy Governance: Nexuuscore provides automated infrastructure for digital workforce operations. The Platform operates across a 5-Level Autonomy Framework (ranging from Mode 1 Observe & Assist to Mode 5 Escalate & Intervene). The Client acknowledges that human-in-the-loop (HITL) review is strongly recommended for all outbound communications, SEO code modifications, and high-impact actions. The Client remains solely responsible for all actions, communications, site code modifications, and data mutations executed by agents that are approved via the client dashboard or configured for automated execution under the Client’s self-selected Autonomy Policy. Outbound message dispatches with unresolvable or invalid recipient parameters are automatically quarantined by platform safety controls and held for reconciliation prior to delivery. Marketing Summaries & Contractual Precedence: High-level marketing summaries and slogans (such as references to human-in-the-loop governance) describe the Platform's standard operational design for client business workflows under default governance modes (such as Mode 3 batch approval). They do not limit, alter, or override the Platform's automated defensive security controls, emergency threat quarantines, statutory opt-out suppressions, or customer-selected Mode 4 autonomous execution policies set forth in these Terms.

11.2 Authoritative Evidence: Nexuuscore generates Immutable Activity Logs cryptographically sealed at regular intervals. In the event of a dispute, these logs serve as the authoritative and definitive record of all system actions, Automated decisions, and data mutations.

12. Data Protection & Your Rights

Nexuuscore Ltd acts as a Data Controller for personal data processed through the Platform, and as a Data Processor for Client Data you submit. We are registered with the UK Information Commissioner's Office (ICO Registration No. ZC208682).

12.1 Your UK GDPR Rights

As a data subject under UK GDPR, you have enforceable statutory rights including Access (SAR), Rectification, Erasure, Data Portability, and Restriction. To submit a statutory request, please email our dedicated Data Governance team at [email protected] with the subject line "UK GDPR Data Subject Request". We will respond within thirty (30) calendar days of receipt.

12.2 Sub-Processors

In delivering the Platform, Nexuuscore engages a limited number of sub-processors operating under written Data Processing Agreements (DPAs) compliant with UK GDPR Article 28:

• Dedicated UK Server & GPU VPS Infrastructure: Dedicated UK server compute, relational database storage, encrypted MinIO Object Lock backups, and dedicated GPU inference nodes.
• Stripe Payments UK Ltd: PCI-DSS Level 1 compliant subscription billing and payment processing.
• Brevo (Sendinblue SAS): Authenticated transactional and outbound email dispatch under UK/EU Data Processing Agreements.
• Tailscale Inc.: Zero-trust encrypted private WireGuard mesh networking between internal cluster nodes.
• RocketReach LLC: Conditional B2B corporate directory verification via PII-neutralized lookups under UK/EU Standard Contractual Clauses (SCCs).
• Cloudflare Inc.: External ingress proxy, DDoS mitigation, and WAF under standard customer DPA incorporating the UK International Data Transfer Addendum (IDTA).

A full sub-processor register is available on request to [email protected].

12.3 Complaints

If you believe your data rights have not been respected, you have the right to lodge a complaint with the UK Information Commissioner's Office at ico.org.uk.

13. Contact & Communication Routing

To ensure prompt processing, communications are routed by subject matter:

• Data Protection & GDPR SARs: [email protected]
• Invoicing, Refunds & Cancellations: [email protected]
• Technical Support & SLA Inquiries: [email protected]
• Legal Notices & Terms: [email protected]
• Universal Inquiries & Catch-All: [email protected] (If you are unsure which inbox to use, contact@ will automatically route your request to the appropriate team).

Nexuuscore Ltd
71-75 Shelton Street,
Covent Garden,
London,
United Kingdom,
WC2H 9JQ
Company No. 17366355 · ICO Registration No. ZC208682
Web: nexuuscore.io