Privacy policy
Version of October 18, 2026current
This English version is a translation provided for convenience. The Spanish version is the official text and prevails in case of any discrepancy. Read the Spanish version.
This policy explains how Nexus Labs processes the personal data it receives through the Middleout website, in particular the data submitted through its waitlist and contact forms. Nexus Labs is a Chilean company, and we drafted this policy in accordance with Law No. 19.628 on the Protection of Private Life (Ley N° 19.628 sobre protección de la vida privada) and Law No. 21.719, which amends it. If you are in another country, we also recognize the rights granted to you by the data protection law that applies to you, such as the European Union's General Data Protection Regulation or Brazil's General Data Protection Law (Lei Geral de Proteção de Dados).
1. Who is responsible for your data
The data controller is NEXUS LABS SpA (“Nexus Labs”), RUT 78.527.203-K. Middleout is a product of Nexus Labs.
For any question about your data or to exercise your rights, write to us at support@bynexuslabs.com. That is our official channel for receiving and responding to requests about personal data.
2. What data we collect
When you sign up for the waitlist, you provide us with:
- Your name and your work email.
- Your country, your company's name, its size, its industry and your job title.
- Your answer to the commercial communications checkbox (whether or not you accept), with the date and the version of the text you saw.
When you write to us through the contact form, you provide us with your name, your email, your message and, if you wish, your company's name.
In addition, to protect the forms against abuse, we use your IP address temporarily: we convert it into a code from which it cannot be recovered, and we delete that code within two days at most. Our servers also log technical data about each request (date, path and result) for security purposes and to fix errors. Before a form is sent, Cloudflare Turnstile checks that a person, not an automated program, is sending it; to do so, your browser provides Cloudflare with your IP address and technical data about your browser and device.
This website does not use tracking cookies or analytics or advertising tools.
3. What we use it for
- Responding to your access request. We use your data to evaluate your request, contact you about it and give you access to Middleout when it is your company's turn. We do this because you asked us to. These notices respond to your request and are not commercial communications, so you receive them even if you have not agreed to receive news.
- Replying to your message. We use the data from the contact form only to read your message and reply to you by email. We do this because you wrote to us. Writing to us does not subscribe you to commercial communications.
- Sending you commercial communications about Middleout and other Nexus Labs products, only if you checked the corresponding box. You can withdraw that permission at any time, free of charge, and doing so does not affect your access request.
- Keeping the website secure and preventing abusive use of the forms.
We do not sell your data.
4. Who we share it with
Only with providers that render services to us and process the data on our behalf, following our instructions:
- Google Cloud, which hosts the website and the database.
- Resend, which sends the emails that notify us of each sign-up and deliver the messages from the contact form to us.
- Cloudflare, which checks that whoever sends a form is a person (Cloudflare Turnstile).
These providers store data in the United States, and Cloudflare also processes it in the countries where it has servers, so your data is transferred outside Chile and, if you live in another country, outside yours. We do so with the safeguards of the data processing agreements we sign with each provider, which include standard contractual clauses for international transfers.
We may also disclose data when required by law or by a competent authority.
5. How long we keep it
- Waitlist data, for up to 24 months from your most recent sign-up, unless you ask us to delete it sooner or you become a customer.
- Messages from the contact form, which we keep not on the website but in the team's email, for up to 24 months from our most recent exchange, unless you ask us to delete them sooner or you become a customer.
- The record of your consent, for up to 5 years after your data is deleted, so that we can demonstrate that you gave or withdrew it. During that period we keep it without your email in readable form.
- The codes used against abuse, for up to two days.
6. Your rights
With respect to your personal data, you can ask us to:
- Give you access to it and tell you how we process it.
- Rectify it if it is inaccurate or incomplete.
- Erase it.
- Stop processing it for a specific purpose to which you object.
- Provide it to you in a structured format so you can take it to another service.
- Temporarily block its processing.
- Stop sending you commercial communications, by withdrawing your consent to them.
To exercise these rights, write to us at support@bynexuslabs.com from the email address you used in the form. We will respond within 30 calendar days of receiving your request. If we need more time, we will let you know, and that period may be extended only once by up to 30 additional calendar days. If you are not satisfied with the response, you may file a complaint with the competent data protection authority.
7. How we protect it
Data travels encrypted between your browser and our servers. Waitlist data is stored in a database and contact messages in an email inbox, both with access restricted to the people at Nexus Labs who need them for the purposes described.
8. Minors
Middleout is a product for businesses. This website is not directed at people under 18 years of age, and we do not knowingly collect their data.
9. Changes to this policy
If we change this policy, we will publish the new version on this same page with its update date. If the change affects a consent you gave us, we will ask you for it again.
Versions of this policy
- October 18, 2026current
- October 17, 2026
- October 9, 2026
- October 8, 2026