# Eureka Nexus — Privacy and Data Architecture

## Website

The public website should minimise personal-data collection.

## Eureka identity prototype

The Eureka identity architecture may process user-selected profile information and generated visual identity data.

Production deployment must define and disclose:

- Data controller identity
- Purposes of processing
- Legal basis
- Data categories
- Storage location
- Retention periods
- Deletion procedure
- User access/correction rights
- Security measures
- Third-party processors
- International transfers where applicable

## Camera and microphone

Future camera, microphone and vision functions must require explicit user permission.

## Private credentials

Eureka Nexus must never request a blockchain seed phrase or private key for normal website, Miner or Eureka AI operation.

See the official website privacy notice for the current public policy.