Privacy
What we collect, and what we don't.
Effective 18 August 2026
This describes exactly what happens to information you send us. It is written from how the system actually works, not from a template.
What we collect
Only what you type into the intake form at /start, and only when you submit it:
- Your name, business name, and email address (required)
- Phone, website, and social profile (optional)
- Industry, business size, and a description of your business (optional)
- Your answers about the project — the problem, your current process, the outcome you want
- Any files you choose to attach — up to 5, 10 MB each
We do not collect anything else. There is no analytics script, no advertising pixel, no session recording, and no third-party tracker anywhere on this site.
Cookies
This site sets no cookies and uses no browser storage. That is why you were not shown a cookie banner — there is nothing to consent to.
Where it goes
Your submission passes through exactly three services:
- Vercel — hosts this site and runs the code that receives your form.
- Supabase — stores your submission in a database, and any files you attach in a private storage bucket. The bucket is not publicly readable; no link to your files exists on the internet.
- Resend — delivers your confirmation email and notifies us of your submission.
We do not sell your information, share it with advertisers, or add you to a marketing list. The confirmation email is a transactional reply to something you did, not a subscription.
Who can see it
Thee Mystik Universal Holdings Corp., operating as NEXIS. In practice that is a small team, and often one person — the same person who would build your system.
Access is restricted at the database level rather than by policy alone. The public website holds no credential capable of reading submissions; it can only write new ones through a single locked-down function. Reading requires separate administrative access.
What we ask you not to send
Please do not submit protected health information, substance-use treatment records, financial account numbers, government identification numbers, or other regulated sensitive data through this form.
This is not a formality. The intake product is a general business tool and is not built, priced, or contractually structured for regulated data. If your project involves that kind of information, say so in your submission and we will scope it properly rather than sell you something unsuitable.
How long we keep it
Submissions are retained while we are in contact with you about the project and for our business records afterwards. We have not set a fixed deletion schedule — stating one we did not follow would be worse than saying so plainly.
You can have your submission and any attached files deleted at any time by emailing us. We will confirm once it is done.
Your choices
Email nexis@nexis-os.com to ask what we hold about you, correct it, or have it deleted. Include the reference number from your confirmation email if you have it — it makes finding your record immediate.
Changes
If what we collect or where it goes changes, this page changes with it and the effective date above moves. We will not quietly broaden what we collect.
Contact
Thee Mystik Universal Holdings Corp.
Columbus, Ohio
nexis@nexis-os.com