Privacy Policy

We collect information you provide directly to us, such as when you create an account, fill out a form, or contact us for support. This includes: • Personal Identifiers: Name, email address, phone number, and company name. • Account Credentials: Username and password (stored securely with bcrypt). • Billing Information: Credit card details processed securely by Stripe. We never store raw card data on our servers. • Usage Data: Pages visited, features used, clicks, and session duration. • Device Data: IP address, browser type, operating system, and referring URLs.

We use the information we collect to: • Provide, maintain, and improve our services. • Process transactions and send related information, including purchase confirmations and invoices. • Send promotional communications about products, features, and events. • Monitor and analyze trends, usage, and activities in connection with our services. • Detect, investigate, and prevent fraudulent transactions and other illegal activities. • Comply with legal obligations and resolve disputes.

We do not sell, trade, or rent your personal information to third parties. We may share your information with: • Service Providers: Vendors who perform services on our behalf (e.g., Stripe for payments, Supabase for database hosting, Resend for transactional email). • Business Transfers: If Nexabilis is involved in a merger, acquisition, or sale of assets, your information may be transferred. • Legal Requirements: When required by law, subpoena, or similar legal process, or when we believe disclosure is necessary to protect our rights or the safety of others.

We retain your personal data for as long as your account is active or as needed to provide our services. You may request deletion of your account and associated data at any time by contacting us at support.nexabilis@gmail.com. Some information may be retained for longer periods as required by law (e.g., financial records for 7 years).

We take the security of your data seriously. We implement industry-standard safeguards including: • AES-256 encryption for data at rest. • TLS 1.3 for all data in transit. • Regular third-party penetration testing. • Role-based access controls for all internal systems. • Annual SOC 2 Type II audits. Despite these measures, no security system is impenetrable. We encourage you to use a strong, unique password and enable two-factor authentication.

Depending on your location, you may have the following rights: • Access: Request a copy of the personal data we hold about you. • Rectification: Correct inaccurate or incomplete data. • Erasure: Request deletion of your personal data ("Right to be Forgotten"). • Portability: Receive your data in a structured, machine-readable format. • Objection: Object to the processing of your data for direct marketing. • Restriction: Request that we limit the processing of your data. To exercise any of these rights, please contact us at support.nexabilis@gmail.com.

We use cookies and similar tracking technologies to track activity on our service. For detailed information, please review our Cookie Policy. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

Our service is not directed to children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and become aware that your child has provided us with personal data, please contact us.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the service after any change constitutes your acceptance of the new terms.

If you have any questions about this Privacy Policy, please contact us at: • Email: support.nexabilis@gmail.com • Postal Address: Nexabilis Inc., 101 Innovation Way, San Francisco, CA 94107, USA

Nexabilis's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. • Access: Nexabilis accesses your Gmail data strictly to display customer emails inside your Unified Inbox and allow you to send/reply to sales inquiries. • Use: Google user data is used exclusively to provide and improve customer relationship management and automated response features. • Storage: OAuth tokens and message metadata are stored securely using industry-standard AES-256 encryption. • Sharing: Google user data is never shared, sold, or transferred to third parties or data brokers.