Privacy Policy

Welcome to Nexus from Multiwork, the AI agent of the Multiwork professional network, operated by AI Department Incorporated("AI Department", "Multiwork", "we", "us"). Your privacy is important to us, and this Privacy Policy outlines how we collect, use, and protect your personal information when you use joinmultiwork.com, the Multiwork app, and Nexus by phone, text message or in the app.

Nexus collects a range of personal data directly from users through interactions, including but not limited to:

• Names
• Email addresses
• Phone numbers
• Professional information, such as your role, company, LinkedIn profile, goals and who you want to meet
• Content of calls, text messages and in-app conversations with Nexus, including call recordings and transcripts
• Any other information you choose to provide during interactions

If you give us your mobile number and agree to receive text messages (for example on our text messaging sign-up form), Nexus will send you conversational messages about your membership, such as check-ins, replies, curated suggestions and introductions. Message frequency varies. Message and data rates may apply. You may opt out at any time by replying STOP, or reply HELP for help. We do not send marketing text messages.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, or religious beliefs. However, if you choose to share this information, it may be collected as part of our interactions.

AI Department processes your personal data under the following legal bases:

• Consent (Article 6(1)(a) GDPR): text messages and marketing emails, sharing contact information with matches after double opt-in, and newsletter subscriptions.
• Contract Performance (Article 6(1)(b) GDPR): processing necessary to provide introduction and matching services, and maintaining user profiles for service delivery.
• Legitimate Interests (Article 6(1)(f) GDPR): service improvement and analytics, platform security and abuse prevention, and customer support.
• Legal Obligation (Article 6(1)(c) GDPR): compliance with applicable laws and regulations.

The personal data collected is used to:

• Facilitate introductions between users and relevant contacts.
• Curate people, events, companies, jobs, content and tools for you.
• Improve our services.
• Send the text messages, calls and emails you have agreed to receive, including check-ins, introductions, updates and personalized opportunities (you may opt out at any time).

AI Department uses third-party services for data processing, storage, communications and analytics. These partners are essential to providing our service and are bound by strict confidentiality obligations.

• AI Processing Partners:we use Telnyx and the AI models it hosts to power Nexus's voice and text conversations. These services may process your conversations, profile information, and call recordings and transcripts according to their own privacy policies and security standards.
• Infrastructure Partners: Vercel and Neon (hosting and database), Notion and Slack (member records and community workspace), Stripe (payments), Resend (email), CoreSignal (professional data), and Luma and Partiful (events).
• Website Analytics: we use PostHog to measure how visitors use our website and app, as detailed in our Website Analytics section.

On our website and app we use PostHog to understand how visitors use the site and to fix issues. PostHog sets analytics cookies so we can recognize your browser across visits and records anonymous usage (such as pages viewed and clicks), linked to your account once you sign in.

We may also record session replays of your interactions with the website. Session replay captures a reconstruction of the page including mouse movement, clicks, scroll, and visible text and images. Form input values you type are masked and not recorded. We do not capture audio, video, or microphone input. You can opt out by blocking cookies in your browser settings or by contacting us at conor@joinmultiwork.com.

We do not share your phone number, email address or SMS consent with Meta or any other advertising platform, and we do not use your information to build custom or lookalike advertising audiences.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the categories of sharing in this policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Mobile numbers are shared only with the service providers that deliver our messages and calls, solely to provide the service.

See the text messaging terms for program details. Reply STOP to opt out or HELP for help at any time.

Your data may be shared with third parties in the following circumstances:

• When introducing you to relevant contacts: your email address and/or phone number will only be shared with another user after both parties have explicitly opted in to connect with each other.
• With partners who assist in providing or improving our service, as listed above.
• When required by law, or to protect the rights, property or safety of AI Department, our users or others.
• In connection with a merger, acquisition or sale of assets, with notice to users.

We do not sell your personal data to third parties.

We retain personal data for the following periods:

• Profile and matching data: retained while your account is active and for 2 years after account deletion.
• Communication records: retained for 3 years for service improvement and support.
• Marketing data: retained until you opt out, then deleted within 30 days.
• Legal compliance data (including records of SMS consent): retained as required by applicable law.

To delete or anonymize your data, please contact us at conor@joinmultiwork.com. We will process your request promptly.

We implement robust security measures to protect your data, especially business and mission-critical information, from unauthorized access, disclosure, alteration, or destruction.

Through our product, we may access sensitive, proprietary, and mission-critical information from businesses. We maintain security protocols for all corporate data:

Technical Safeguards

• Encryption for data in transit.
• Multi-factor authentication for system access.

Access Controls

• Role-based access limiting internal visibility to business data.
• Employee access restricted to essential personnel only.

Processing Safeguards

• Business information used only for specifically authorized purposes.
• No training of AI models on proprietary business information without consent.
• Clearly defined data retention policies.

Third-Party Protection

• Third-party processors bound by data security agreements.

Incident Response

• Breach response protocol.
• Post-incident analysis and remediation planning.

In the event of a personal data breach that poses a high risk to your rights and freedoms, we will notify you without undue delay and provide information about:

• The nature of the breach.
• Likely consequences.
• Measures taken or proposed to address the breach.

Under GDPR, you have the following rights:

• Right of Access (Article 15): you can request information about what personal data we process and obtain a copy of your personal data.
• Right of Rectification (Article 16): you can request correction of inaccurate personal data.
• Right of Erasure (Article 17): you can request deletion of your personal data in certain circumstances.
• Right to Restrict Processing (Article 18): you can request that we limit how we use your personal data in certain situations.
• Right to Data Portability (Article 20): you can request your personal data in a structured, machine-readable format.
• Right to Object (Article 21): you can object to processing based on legitimate interests or for direct marketing purposes.
• Rights Related to Automated Decision-Making (Article 22): you have rights regarding automated decision-making, including AI-powered matching.

To exercise any of your rights, please contact us at conor@joinmultiwork.com. We will respond within one month of receiving a valid request.

You may withdraw your consent at any time by:

• Text messages and marketing communications: replying STOP to SMS or using unsubscribe links in emails.
• Profile matching: contacting conor@joinmultiwork.com to remove your profile.
• All processing: requesting account deletion via conor@joinmultiwork.com.

Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

Nexus and Multiwork are not directed to anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. Any material changes will be communicated to users via email or platform notifications at least 30 days before they take effect. For changes affecting data processing under GDPR, we may require renewed consent where legally required. Continued use of the service after changes have been made will constitute acceptance of the revised Policy.

• General and privacy inquiries: conor@joinmultiwork.com
• Data protection inquiries: conor@joinmultiwork.com

If you have any questions or concerns about this Privacy Policy, please contact us using the information above. See also our Terms and Conditions.