Invictus Entertainment Production · Broadcast · Software

Legal

Version: 1.0
URL: https://invictusent.com/privacy.html

Invictus Entertainment, LLC Privacy Policy (Nexus and invictusent.com) Version 1.0 · Effective: October 27, 2026 · Last updated: October 27, 2026

This Privacy Policy explains how Invictus Entertainment, LLC ("Invictus", "we", "us") handles personal information when you:

  • - visit invictusent.com (the "Site");
  • - download, try or buy Nexus, our macOS app for working with NDI® sources and devices on your network (the "App");
  • - contact us.

Invictus Entertainment, LLC is the business responsible for your information (the "controller"). Privacy contact: support@invictusent.com.

NDI® is a registered trademark of Vizrt NDI AB. Nexus is an independent product of Invictus and is not operated by Vizrt NDI AB.

  • - Nexus does not collect or upload your video, audio or NDI stream content. NDI® discovery, monitoring, routing and multiview outputs run between Nexus and devices on networks you choose. Nexus's code contains no function that records frames or audio to disk or sends them to us. Optional "Stream Insight" picture analysis runs on your Mac using Apple's Vision framework.
  • - The App contains no analytics, advertising, tracking, crash-reporting or automatic-update code. Apart from links you click, the App connects to the internet only for (a) license activation and checks with our licensing provider, Keygen, and (b) time synchronization, if you turn on NTP.
  • - The free trial sends nothing to us or to Keygen. It uses no license key and makes no license checks. Like the rest of the App, it still uses your local network for NDI and, if you turn it on, time synchronization (NTP).
  • - To license a Mac, the App sends Keygen your license key and an identifier for that Mac. It labels the Mac simply "Nexus Mac".
  • - Payments are processed by Link, LLC (a Stripe affiliate), as merchant of record. Checkout and receipts are labelled "Sold through Link". Stripe uses your payment information under its own privacy policy. We never see or store your full card number.
  • - We do not sell or "share" (for cross-context behavioral advertising) your personal information.

3.1 When you use the App

  • (a) License activation and checks (sent to Keygen, our licensing provider)

When you activate a Mac, the App sends:

  • - your license key;
  • - a device identifier: your Mac's hardware platform UUID (IOPlatformUUID). If that can't be read, the App uses a random identifier it creates once and keeps in your macOS Keychain on that Mac. If the Keychain can't be used, the App uses a new random identifier for that session only. It never uses your Mac's computer name as the identifier;
  • - the platform ("macOS");
  • - a fixed label, "Nexus Mac". The App does not send your Mac's computer name.

NDI may announce your Mac's name on your local network; Nexus doesn't send it to us.

Keygen stores, for each activated Mac, the device identifier, the platform and the label, linked to your license.

License checks. To confirm your license is still valid, the App sends Keygen your license key, our product identifier and (once activated) the device identifier:

  • - when the App starts, if more than 24 hours have passed since the last successful check;
  • - when you click Refresh;
  • - when you activate.

When you deactivate a Mac, the App asks Keygen to delete that Mac's activation record. Keygen deletes it permanently. Copies remain in Keygen's backups and logs for a limited time (see section 7). If the deletion request can't reach Keygen, the App still frees the seat on your Mac. Contact us and we'll delete the record.

Connection data. As with any internet request, Keygen also receives your IP address and standard request information, such as a user-agent string that identifies the software making the request.

The App does not send your email address, name, NDI sources, network settings or usage activity to Keygen.

The 14-day trial runs entirely on your Mac and sends nothing to us or to Keygen.

  • (b) Information stored on your Mac (not sent to us)
  • - License data: a license file at ~/Library/Application Support/Nexus/license/state.json (integrity-sealed), which holds the license and activation IDs, the device identifier, a masked key hint, the trial start date, the last check time and the expiry; and your full license key, trial information and (if used) the fallback device identifier, stored in your macOS Keychain.
  • - Settings: network adapter names and IP addresses; NDI® Discovery Server address; NTP servers; tally and OSC settings; multiview and test-generator settings. These are stored in macOS preferences (com.nexus.v2) and in ~/Library/Application Support/Nexus/ndi/.
  • - Files you save (show files, multiviews, matrices, Engineering Notes) go wherever you choose.
  • - Diagnostic logs stay on your Mac, in ~/Library/Logs/Nexus/. They may include NDI source names, host names and IP addresses, Discovery Server addresses, OSC settings, saved file names, license status, license-service error messages and activation IDs. They do not include your license key. Logs are size-limited and rotated automatically. Logs reach us only if you choose to send them to support.
  • (c) Local-network activity

To do its job, Nexus discovers, connects to, checks and sends to NDI® sources and devices on your network. This includes Bonjour/mDNS; an optional NDI Discovery Server you configure; TCP reachability ("link health") checks; optional vMix or TSL tally inputs; and an optional Bitfocus Companion OSC listener. Nexus publishes its multiview and test-generator outputs as NDI sources on that network. None of this traffic is sent to Invictus. macOS will ask for Local Network permission.

  • (d) Optional time synchronization

NTP is off by default. If you switch the time source to NTP, the App queries time servers about every 32 seconds. The defaults are pool.ntp.org, time.apple.com and time.google.com, or servers you enter. Those operators receive your IP address and a standard time request.

  • (e) Links you click

Links open in your browser and are governed by the destination's own policies: Buy opens our Site's pricing page, which links to Stripe checkout; Support opens your email app or our Site; ndi.video is operated by Vizrt NDI AB; Open Web GUI opens your own device.

  • (f) Crash reports

The App has no crash-reporting service of its own. If you've allowed macOS to share analytics with Apple, Apple handles that under its own privacy policy.

3.2 When you buy a subscription

Purchases use Stripe checkout pages hosted by Stripe at buy.stripe.com. Link, LLC (a Stripe affiliate) acts as merchant of record. Checkout and receipts are labelled "Sold through Link", and your card statement shows "LINK.COM*". Link processes the payment, sends your receipts and invoices, handles payment disputes, and provides payment and subscription support, including cancellation through the Manage subscription button in your receipt email.

Stripe and its affiliates are independent controllers of what you give them at checkout and in Link, such as payment card details, billing address, Link account data, and device and fraud-prevention signals. They use it under the Stripe Privacy Policy (https://stripe.com/privacy), the Link Privacy Center (https://link.com/privacy-center) and Stripe's Sold Through Link Terms (https://stripe.com/legal/consumer). We don't control that processing. For it, contact Stripe or Link.

Stripe shares your order data with us, and we are its controller. Based on our checkout settings, it includes:

  • - your name and, if you give it, your business name;
  • - your email address;
  • - your billing address;
  • - your tax ID, if you choose to give it for business invoices;
  • - the plan, quantity, price, discount code, amounts charged, currency, and the order, invoice, customer and subscription IDs, payment status and renewal dates;
  • - limited payment-method details visible in our Stripe account (card brand, last four digits, expiry).

We don't collect phone numbers at checkout, and we don't ask for marketing consent there. We never receive your full card number or security code.

If you ask Stripe or Link to delete your data, Stripe handles that request under its own policy. Copies we hold outside Stripe (our licensing, email and support records) are covered in section 9. Ask us directly to delete them.

3.3 Delivering your license

When your payment is confirmed, Stripe notifies our license server, which we run on Northflank (a hosting provider acting as our processor). The server then creates your license in Keygen, recording your name (or, if no name is available, your email address), your Stripe customer, subscription and price IDs, and your plan; and emails your license key to you through Resend, from support@invictusent.com. That email contains your name, email address and full license key.

Later Stripe events (renewal, failed payment, cancellation, refund, plan change) update your license's status in Keygen, for example renewing it, suspending it, or moving it to a new plan.

3.4 Transactional emails

We send license and service emails through Resend, from invictusent.com. These include the license-key email and may include renewal reminders, price-change notices and cancellation confirmations. Resend processes your email address, name, the email content (including your license key) and delivery metadata. Open and click tracking are off. Receipts and invoices come from Link, not from us.

3.5 When you contact us

Site contact form. We collect your name, email address and message. The form sends them to us by email through Resend, to our support mailbox (hosted by Google Workspace), so we can reply to you directly. We don't store submissions in a database on our website. Two hidden fields block spam: an empty "honeypot" field and the time the form was loaded. To limit abuse, our server keeps a hashed form of your IP address and the times of your recent submissions, and uses it only to block repeated submissions. Our web host receives your IP address and browser information when you submit (see section 3.6).

Email. When you email support@invictusent.com, we receive whatever you send, including any logs or files you attach.

3.6 When you visit the Site

  • - Cookies and analytics: the Site's own code sets no cookies and uses no analytics, advertising pixels or local storage.
  • - Fonts: the Site's fonts are served from our own web host, not from a third-party font service.
  • - Server logs: our web host (HostGator, part of Newfold Digital) records standard access logs (IP address, date and time, page requested, browser and operating system).
  • - Downloads: when you download Nexus, the server hosting the download receives your IP address and standard request data.

3.7 Nexus news (marketing email)

  • - Sign-up. If you sign up for Nexus news on the Site, we collect your email address and use it to send you Nexus launch updates and product news. When you sign up, we send a confirmation email to that address, and we add you to the list only after you click the link in it. If you don't confirm, we don't add you. Our website doesn't keep unconfirmed addresses. Resend, our email processor, keeps a copy of the confirmation email and a log of the request to send it for up to 30 days (plus 7 days in backups). If the confirmation email bounces or is marked as spam, Resend adds the address to a suppression list, and Resend then stops our emails to that address (see section 7). The confirmation link expires after 48 hours.
  • - Consent record. We keep a record of your sign-up (the date and time, the page you signed up on and the wording you agreed to) so we can show that you asked to hear from us. We don't store your IP address with your sign-up.
  • - Sending. We store the list and send these emails through Resend, our email processor (see section 5).
  • - Unsubscribe. Each news email has an unsubscribe link. You can also email support@invictusent.com. When you unsubscribe, we stop sending you news. We keep your email address and your sign-up record, marked as unsubscribed, so we never send you news again by mistake and can show what you agreed to. If you want that record deleted too, email support@invictusent.com and we'll delete it. After that, you'll only get news again if you sign up and confirm again.
  • - We don't sell or share the list, and we don't use it for advertising on other sites.
  • - License and service emails (section 3.4) aren't marketing. You'll still get them if you unsubscribe from news.

3.8 Categories of personal information (California)

  • - Identifiers (name, email, IP address, license key, device identifier, Keygen and Stripe IDs). Source: you, your Mac, your browser. Disclosed to: Keygen, Resend, Google Workspace, Northflank, our web host and download host.
  • - Customer records (name, billing address, business name, tax ID). Source: you, through Stripe. Held in our Stripe account.
  • - Commercial information (plan, purchases, subscription status). Source: Stripe, Keygen. Disclosed to: Keygen, Resend.
  • - Internet or network activity (server logs, license-check times, rate-limit records). Source: your browser, the App, Stripe. Disclosed to: our web host, Keygen, Northflank.
  • - Geolocation: approximate only (from IP address or billing address). No precise geolocation.
  • - Sensitive personal information: none collected, except that your license key could be treated as account log-in information; we use it only to provide your license. Card data is held by Stripe.
  • - Inferences or profiles: none.
  • - Provide, activate and enforce your license; prevent license misuse; let you move a seat (license key, device identifier, IP address, license status): performance of our contract with you, and our legitimate interest in preventing license abuse.
  • - Create and deliver your license and keep its status in step with your subscription (name or email, Stripe IDs, plan, license key): contract.
  • - Payments, subscriptions, renewals and refunds, with Link as merchant of record (order data): contract; legal obligations such as tax and accounting.
  • - Transactional and legally required notices, such as renewal, discount-ending and price-change notices (email, name, plan, dates): contract; legal obligation.
  • - Support and contact-form replies (name, email, message, attachments): contract for customers, otherwise legitimate interests.
  • - Operate and secure the Site and prevent spam (server logs, spam-check fields, rate-limit records): legitimate interests.
  • - Nexus news (email address, sign-up record): your consent, which you can withdraw at any time by unsubscribing.
  • - Keeping an unsubscribed address and its sign-up record so we don't email you again and can show what you agreed to: legitimate interests.
  • - Complying with law, tax, export and sanctions rules, and defending claims (as needed): legal obligation; legitimate interests.

We do not use personal information for automated decision-making with legal or similarly significant effects, or for profiling.

We share personal information with these service providers (processors), acting on our instructions:

  • - Keygen (keygen.sh): license activation, checks and license records. Data: license key, device identifier, label, platform, IP address, user agent, license name or email, Stripe IDs. Location: USA (AWS US-East, Virginia), with encrypted backups elsewhere in the US. Keygen's own subprocessors are listed at keygen.sh/privacy.
  • - Resend: transactional email (license keys, and delivery of contact-form messages to us) and the Nexus news list and sending. Data: email address, name, message or email content, license key, sign-up record, delivery and unsubscribe metadata. Location: USA.
  • - Google (Workspace): our support mailbox. Data: contact-form submissions and support emails. Location: US and other countries.
  • - Stripe, Inc., for services it performs for us (our Stripe account). Data: order data. Location: US and other countries.
  • - HostGator (Newfold Digital): website hosting and contact-form processing. Data: server logs, form data in transit, rate-limit records. Location: USA; Newfold staff in other countries, including India and the Philippines, may access data.
  • - Northflank (Northflank Ltd, UK): hosts our license-delivery server. Data: Stripe event data (name, email, Stripe customer, subscription and price IDs, invoice data), license key, the data sent to Keygen and Resend, and server logs. Location: Northflank's cloud infrastructure, which may be in the UK, the EU or the US.
  • - The provider that hosts Nexus downloads. Data: IP address and request data.

Link, LLC and Stripe, as merchant of record and Link provider, are not our processors. They act as independent controllers for checkout, payment, fraud prevention, disputes, receipts and Link support (section 3.2).

We may also disclose information to professional advisers; where required by law, or to protect rights and safety; and to a successor in a merger or acquisition (with notice).

We do not sell personal information, and we do not "share" it for cross-context behavioral advertising, as the CCPA/CPRA defines those terms. We have done neither in the past 12 months.

Vizrt NDI AB receives no information from us. Nexus uses NDI® technology locally on your network.

Invictus and most of our providers are in the United States. Some providers' staff or subprocessors are elsewhere. If you are in the EEA, the UK or Switzerland, we rely on the EU-US Data Privacy Framework (and its UK Extension and Swiss framework) where the provider is certified, on Standard Contractual Clauses (with the UK Addendum) where a provider offers them (for example Resend), or on another lawful mechanism.

Our license server's host, Northflank, is a UK company, and some data (including its control plane and logs) may be processed in the UK or the EU, as well as in the cloud region where our server runs.

  • - License records (Keygen): for the life of your license, and afterwards only as long as we need them for support, refunds, disputes, and tax and accounting, then deleted.
  • - Mac activation records (Keygen): until you deactivate that Mac. Keygen then deletes the record permanently. Copies persist in Keygen's backups and request logs for up to 30 days and in event snapshots for up to 90 days.
  • - Keygen request logs (including IP address): 30 days (Keygen's policy).
  • - Payment and transaction records (our Stripe account): as long as tax and accounting law requires. Stripe's own retention as merchant of record follows Stripe's policy.
  • - Transactional email copies at Resend: 30 days (Resend's policy), plus 7 days in backups.
  • - Nexus news confirmation email copy and send-request log at Resend: 30 days, plus 7 days in backups.
  • - Nexus news list contact and sign-up record: until you unsubscribe and ask us to delete it. Unsubscribed contacts are kept, marked unsubscribed, so we don't email you again.
  • - Bounce and spam suppression entries at Resend: no set expiry, so the address isn't emailed again.
  • - License-server logs (Northflank): for a limited time, as needed to run and troubleshoot license delivery.
  • - Support emails and contact-form messages (our mailbox): as long as needed to answer you and keep a record of our dealings with you.
  • - Contact-form rate-limit records: only as long as needed to block repeated submissions.
  • - Web server logs: under our web host's log settings.
  • - Auto-renewal consent records: at least 3 years, or 1 year after the contract ends, whichever is longer.
  • - Data on your Mac: under your control. Deleting the App, ~/Library/Application Support/Nexus, ~/Library/Logs/Nexus and the Nexus Keychain items removes it. Deactivate first to free your seat.

We use reasonable administrative, technical and physical safeguards. App-to-Keygen traffic uses HTTPS; your license key is stored in the macOS Keychain; the local license file is integrity-sealed; diagnostic logs are kept in a private folder on your Mac; card data is handled only by Stripe; and our transactional emails don't use open or click tracking. No method is 100% secure.

Operator note. Nexus's optional Companion OSC listener has no password, and devices on the management network you bind it to can send it commands. Enable it only on a trusted control network.

Everyone:

  • - you can ask us to access, correct or delete your information;
  • - you can deactivate a Mac in Settings → License Status;
  • - you can unsubscribe from Nexus news at any time, using the link in a news email or by emailing support@invictusent.com.

Contact support@invictusent.com. We'll verify your request, for example by matching your purchase email or license key. Deleting your license data ends your ability to use a paid seat, so cancel your subscription first. For payment data held by Link and Stripe as merchant of record, contact Link support, or ask us and we'll point you there.

EEA and UK. You have the right to access, rectification, erasure, restriction and portability, and to object (including to direct marketing); to withdraw consent at any time; and to complain to your supervisory authority (in the UK, the ICO).

California. You have the right to know what we collect, use and disclose; to delete; to correct; and to opt out of sale or sharing (we do neither). You have the right to limit use of sensitive personal information (we don't use it beyond permitted purposes). You have the right not to be discriminated against for exercising these rights. You may use an authorized agent. The categories and purposes are in sections 3 and 4, and retention is in section 7.

Do Not Track and Global Privacy Control. The Site uses no tracking. We honor Global Privacy Control signals as an opt-out of sale or sharing where required.

This policy is posted on the Site and linked from the App.

Nexus and the Site are professional tools for businesses and adults. They are not directed to children under 16. We do not knowingly collect children's personal information. If you believe a child has given us information, contact us and we will delete it.

We will post any update here with a new "Last updated" date. If a change is material, we will notify customers by email or in the App before it takes effect.

Invictus Entertainment, LLC · support@invictusent.com

© 2026 Invictus Entertainment, LLC. All rights reserved. NDI® is a registered trademark of Vizrt NDI AB.