Privacy Policy

Nexus Technology ('we', 'us') operates the Nexus Platform for Shanagan Coal Mine. This Privacy Policy describes how we collect, use, and protect information about platform users and mine site personnel.

This policy applies to all users of the Platform and to workers whose activity is captured by the surveillance and tracking systems deployed at the mine site.

Account data: name, email address, role/title, phone number, avatar image, account creation and last-active timestamps. Authentication data: hashed passwords and session tokens managed by Supabase Auth.

Operational data: GPS location pings from worker and vehicle tracking devices (latitude, longitude, accuracy, battery level, timestamp). Camera detection data: AI-generated detection events including class name (person, vehicle, equipment, hardhat, vest), bounding box coordinates, confidence score, camera ID, and timestamp. Video footage: HLS/TS segment files from site cameras. System health metrics and alert history.

Account data is used for authentication, role-based access control, and administrative communications. GPS location data is used for fleet management, worker safety monitoring, and site operations optimisation.

Camera detection data is used for: PPE compliance monitoring, site security and hazard detection, operational analytics, and incident investigation. Video footage is used for security review and post-incident investigation only. We do not use your data for advertising or sell it to third parties.

Video footage: stored on local edge servers at the mine site (/data/footage). Automatically deleted after 7 days via rolling retention. May be retained longer if required for an active incident investigation.

Detection events: stored on local edge servers at the mine site alongside footage. Alerts and operational records: stored on Supabase cloud infrastructure. GPS location pings: retained for 30 days, then purged automatically. User profile data: retained while account is active and for a reasonable period after termination. Request deletion by contacting your administrator.

All personnel entering the Shanagan Coal Mine site are subject to continuous video recording by the NVR camera system. Camera positions are fixed and cover operational areas of the mine. Personnel are informed of this surveillance upon onboarding and through on-site signage. Camera images and any personal data derived from them are processed under the Law of Mongolia on Personal Data Protection for legitimate mine safety and security purposes.

Worker GPS tracking is active when a worker is logged in to a mobile device on site. Location data is visible to supervisors and system administrators. AI-based detection systems continuously analyse camera feeds; person and facial imagery may constitute sensitive personal data under Mongolian law and is used solely for on-site safety and access control. All analysis results are stored and associated with the relevant camera and time window.

System administrators: full access to all data for operational and security purposes. Mine supervisors (supervisor role): access to operational data, alerts, camera feeds, and worker location. Operators: access to relevant operational data within their assigned zone. Viewers: read-only access to designated data.

Nexus Technology engineering staff may access anonymised system logs for maintenance and debugging. We do not share your data with external parties except as required by Mongolian law or as described in section 7 (Third-Party Services).

Supabase (supabase.com): hosts authentication and cloud database. Subject to Supabase Privacy Policy. Data is stored in Supabase's cloud infrastructure. OpenWeather API (openweathermap.org): receives mine site coordinates (latitude/longitude) to fetch weather data. No personal data is shared.

Ultralytics YOLO: AI model runs locally on edge servers at the mine. No data is sent to Ultralytics. Esri: map tile provider for the Virtual Map feature. Tile requests include map coordinates but no personal identifiers.

Under the Law of Mongolia on Personal Data Protection you have the right to: access a copy of the personal data we hold about you, request correction of inaccurate data, request deletion of your profile and associated personal data, and withdraw consent (each subject to operational and legal retention requirements).

To exercise these rights, contact your system administrator or the mine supervisor at info@nexus-technology.mn. Note that footage and detection data associated with safety incidents may be retained regardless of deletion requests, where permitted by law. Complaints may be raised with the National Human Rights Commission of Mongolia.

Data is protected by: Supabase Row-Level Security (RLS) ensuring users only access data within their role permissions, JWT-based authentication with session management, HTTPS/TLS encryption for all data in transit, and local network isolation for camera footage and edge computing. We maintain data-security assessments as required by the Law on Personal Data Protection.

Physical access to edge servers and NVR systems is restricted to authorised technical staff. In the event of a data breach, affected users and the competent authorities will be notified in accordance with the Law on Personal Data Protection and the Law on Cyber Security of Mongolia.

Contact

For privacy questions or data requests, contact: