Privacy Policy

1. Overview

NEXORA AI ("NEXORA", "we", "us") provides a business automation platform for WhatsApp, Instagram, and Facebook Messenger, available at nexora-ai.co.in. This policy explains what information we collect from you and the businesses that use our platform ("Clients"), and from the customers those businesses message through us ("End Users"), and how we use, share, and protect it.

By creating an account or using NEXORA, you agree to the collection and use of information as described in this policy.

2. Information We Collect

Account & Business Information

• •Name, email address, phone number, and password (or Google account identity, if you sign in with Google)
• •Business name, industry, address, logo, and branding details you provide
• •Subscription plan, billing history, and payment status (see Payment Information below)

Connected Channel Data

• •WhatsApp Business Account ID, phone number ID, and access tokens
• •Instagram Business Account ID, username, and access tokens
• •Facebook Page ID, name, and access tokens
• •Messages sent and received through these channels, including text, media, and template messages

Customer & CRM Data

• •Contact details (name, phone, email) that a Client adds or that are created automatically from an End User's inbound message
• •Conversation history, pipeline stage, tags, notes, and industry-specific fields a Client records about their contacts
• •Knowledge base content a Client uploads to train their AI assistant's responses

Payment Information

Paid subscriptions are processed by Razorpay. NEXORA never sees or stores your card number, CVV, or bank details — Razorpay collects these directly and gives us only a subscription ID, payment status, and invoice amounts.

Automatically Collected Data

We log basic usage data — feature usage, message counts, and error logs — to operate and improve the platform. See Section 3 below for how we use browser storage specifically.

3. Cookies & Local Storage

NEXORA does not use tracking cookies. We use browser local storage only to keep you signed in and to enforce an inactivity timeout — this data stays on your device and is not used to track you across other websites.

We use Vercel Analytics to understand aggregate site usage (e.g., which pages are visited). It is cookieless and does not use any persistent identifier to track individual visitors across sites.

4. How We Use Information

• •To operate the platform: sending/receiving messages, generating AI replies, running broadcasts and automations
• •To generate AI responses, a Client's conversation content and knowledge base are sent to our AI providers (see Section 5) at the time a reply is needed — this content is not used to train their general-purpose models
• •To process subscriptions, trials, invoices, and enforce plan limits
• •To send account, billing, and security emails (OTP codes, receipts, payment failure notices)
• •To detect abuse, enforce our Terms of Service, and comply with legal obligations

5. Third-Party Service Providers

We rely on the following providers to operate NEXORA. Each processes only the data necessary for its function:

• •Meta Platforms — WhatsApp Cloud API, Instagram Graph API, and Facebook Messenger, for sending and receiving messages on your behalf
• •Google — for "Sign in with Google", verifying your identity via your Google account email
• •Razorpay — for subscription billing and payment processing
• •Groq and OpenAI — for AI-generated reply text and embeddings
• •Supabase — our primary database
• •Upstash — caching and background job queues
• •Cloudflare R2 — storage for uploaded images and digital cards
• •Resend — transactional email delivery (OTP codes, notifications)
• •Vercel — hosting, and cookieless aggregate analytics (see Section 3)

We do not sell your data, or your End Users' data, to anyone.

6. Data Retention

We retain account and conversation data for as long as your account is active, so you can rely on your CRM history and AI configuration. If you cancel your subscription, your data is retained on the Free plan unless you request full deletion. See our Data Deletion page for how to request permanent removal of your data.

7. Data Security

Access tokens for connected channels are encrypted at rest. Passwords are hashed and never stored in plain text. All traffic to NEXORA is encrypted in transit (HTTPS). No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable technical and organizational measures to protect your data.

8. Your Rights

You may access, correct, export, or delete your data at any time from your dashboard Settings, or by contacting us. See our Data Deletion page for the exact process, including for data connected via Facebook or Instagram Login.

9. Children's Privacy

NEXORA is a business tool and is not directed at, or intended for use by, individuals under 18. We do not knowingly collect data from children.

10. International Data Transfers

Our infrastructure and service providers may process data outside your country, including in the United States and other regions where our providers operate. By using NEXORA, you consent to this transfer and processing.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be notified via email or an in-app notice. Continued use of NEXORA after a change constitutes acceptance of the updated policy.

12. Contact Us

Questions about this policy or your data can be sent to: