Privacy Policy

1. Scope

This policy applies to data processed through Nexus websites, dashboards, APIs, and integrations, including WhatsApp messaging and chatbot workflow features.

2. Data We Collect

Depending on how Nexus is used, we may process:

• account data (name, email, profile image, authentication data);
• session and device data (IP address, user agent, login/session records);
• organization data (team members, roles, branches, permissions);
• customer data provided by our business users (names, phone numbers, email, notes, labels, statuses);
• communication data (chat content, message metadata, WhatsApp message IDs, delivery/read status, media references);
• system logs and diagnostics used for security and troubleshooting.

3. How We Use Data

• to provide and operate CRM, ERP, chat, and chatbot services;
• to authenticate users and secure accounts;
• to route, track, and automate customer messaging workflows;
• to maintain service reliability, monitor abuse, and prevent fraud;
• to communicate service notices and support updates;
• to comply with legal obligations and enforce our terms.

4. Legal Bases for Processing

We process personal data based on contractual necessity, legitimate business interests (such as security and product improvement), compliance with legal obligations, and consent where required by law.

5. Data Sharing

We may share data with:

• service providers that host infrastructure, authentication, or email;
• messaging and communication platforms you connect (e.g., WhatsApp);
• authorized team members within your organization account;
• authorities when required by applicable law or lawful request.

We do not sell personal data as part of our core business model.

6. Meta Platform Data

If you connect Nexus to Meta services (including WhatsApp Cloud API), we may receive and process platform data such as business account identifiers, phone number identifiers, messaging events, delivery/read statuses, message metadata, and customer communication content needed to operate your workflows.

This data is used to deliver messaging functionality, customer support operations, and chatbot automation configured by your organization. Meta data is handled according to this policy, our security controls, and applicable platform terms.

7. International Transfers

Data may be processed in countries other than where you are located, depending on hosting or integration providers. We take reasonable steps to ensure appropriate safeguards for cross-border data processing.

8. Data Retention

We retain data for as long as needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type, account status, and regulatory requirements.

9. Security

We use technical and organizational safeguards to protect personal data, including authentication controls, access restrictions, and audit/logging mechanisms. No security measure is perfect, and you should also protect your account credentials and connected systems.

10. Your Rights

Subject to applicable law, you may request access to, correction of, deletion of, or restriction of processing of your personal data, and may object to certain processing. You may also request data portability where available.

11. Egypt Data Protection Notice

For users and processing activities connected to Egypt, Nexus aims to process personal data in line with applicable Egyptian laws, including Law No. 151 of 2020 (Personal Data Protection Law) and related executive regulations as applicable.

12. Data Deletion for Meta Users

Meta users can submit deletion requests through our data deletion callback or by following the public instructions at /data-deletion. If your request is submitted by Meta callback, a confirmation code and status URL are returned to Meta.

13. Children's Privacy

Nexus is intended for business use and is not directed to children. We do not knowingly collect personal data from children in violation of applicable law.

14. Updates to This Policy

We may update this Privacy Policy from time to time. Material updates become effective when posted on this page, unless a different date is indicated.