Privacy Policy

1. Who We Are

NEXA 360 is operated by Nexa Agency, located in the United States. Contact: support@nexaagency360.com.

2. What Data We Collect

Account data: Name, email address, city, service type, and optional website/Instagram link that you provide during registration.

Usage data: Scans performed, campaigns created, leads saved, emails sent, and feature usage for improving the Service.

Payment data: Processed by Stripe. We never see or store your credit card number.

Business data displayed: Business names, addresses, phone numbers, ratings, and photos from Google Maps and other publicly available sources. This is not personal data — it is public business information.

3. What We Do NOT Collect

• We do not collect data from minors (users must be 18+)
• We do not store credit card numbers (Stripe handles payments)
• We do not collect browsing data outside of our platform
• We do not sell your personal data to third parties

4. How We Use Your Data

• To provide and operate the Service
• To personalize your outreach messages and campaigns
• To track usage for plan limit enforcement
• To improve the Service through anonymized, aggregated analytics
• To send you Service-related communications (account alerts, billing)

We do NOT use your data for advertising. We do NOT sell your data.

5. Data Storage and Security

Your data is stored in Supabase (hosted on AWS in the United States) with encryption at rest and in transit. Authentication is handled by Supabase Auth with secure session management. We follow industry-standard security practices.

6. Email Tracking

When you send outreach through the Service, we use standard email tracking (open tracking pixel, click tracking) to measure engagement. This data is stored in your account and visible on your dashboard. Recipients can opt out of all future communications via the unsubscribe link included in every email.

7. Third-Party Services

We use the following third-party services:

• Supabase: Database and authentication
• Stripe: Payment processing
• Google Places API: Business data lookup
• Vercel: Application hosting

Each service has its own privacy policy. We share only the minimum data required for each service to function.

8. Your Rights

You have the right to:

• Access: Request a copy of all data we hold about you
• Correction: Update or correct your personal information
• Deletion: Request deletion of your account and all associated data
• Portability: Export your data in a standard format

To exercise any of these rights, contact us at support@nexaagency360.com. We will respond within 30 days.

9. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected and the right to opt out of the sale of personal information. We do not sell personal information.

10. Cookies

We use essential cookies for authentication and session management only. We do not use advertising cookies or third-party tracking cookies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email. The "Last updated" date at the top reflects the most recent revision.

12. Contact

For privacy-related questions or requests, contact:
support@nexaagency360.com