Privacy Policy

1. Scope and Our Role

1.1 This Privacy Policy applies to (a) visitors to our Site, and (b) the businesses and individuals who register for, subscribe to, or use the Services (each, a “Client”). It describes the personal information for which Nexer acts as a controller – meaning we determine how and why it is processed.

1.2 Information We Process on Behalf of Clients. When a Client uses the Services, it may upload, import, or generate information about its own customers, contacts, leads, or patients (“Client Data”). With respect to Client Data, the Client is the controller and Nexer acts as a processor and service provider, processing Client Data solely on the Client’s instructions and as set out in our Master Subscription Agreement and Data Processing Addendum. If you are an individual whose information appears in a Client’s account, please direct your privacy requests to the relevant Client; we will support the Client’s response. This Privacy Policy does not govern Client Data.

1.3 Protected Health Information. Where Nexer creates, receives, maintains, or transmits protected health information (“PHI”) on behalf of a healthcare Client, that PHI is governed by the Health Insurance Portability and Accountability Act (“HIPAA”) and the Business Associate Agreement between Nexer and that Client, and not by this Privacy Policy.

2. Information We Collect

2.1 Information you provide to us. When you contact us, request a demo, register for an account, or use the Services, we may collect:

• identification and contact details, such as your name, business name, email address, telephone number, and mailing or billing address;
• account and onboarding information, such as login credentials, business details, industry or niche, and preferences you provide when configuring the Services;
• billing information; payments are processed by our third-party payment processor (Stripe), and we do not collect or store full payment-card numbers ourselves;
• communications and support information, including the contents of messages, inquiries, and correspondence you send to us; and
• marketing information, including information you provide when you subscribe to communications, complete forms, or respond to our outreach.

2.2 Information we collect automatically. When you use the Site or Services, we and our analytics and advertising providers may automatically collect:

• usage and log data, such as pages viewed, features used, actions taken, access times, and referring pages;
• device and connection data, such as IP address, browser type, operating system, and device identifiers; and
• information collected through cookies, pixels, and similar technologies, as described in Section 3.

2.3 Information from third parties. We may receive information about you from our service providers (such as our payment processor and analytics and advertising providers), and from publicly available or lead sources, which we may combine with information we already hold.

3. Cookies and Tracking Technologies

3.1 We and our providers use cookies, web beacons, pixels, and similar technologies to operate and secure the Site, remember preferences, measure performance, and support marketing. These include strictly necessary, functional, analytics, and advertising technologies.

3.2 Analytics and advertising. We use Google Analytics to understand how the Site is used, and the Meta Pixel to measure and support our advertising. These technologies may share online identifiers and activity data with the relevant providers. Under certain U.S. state privacy laws (including in California), the use of such advertising technologies may be considered “sharing” for cross-context behavioral advertising, or a “sale.” See Section 9 for how to opt out.

3.3 Your choices. You can manage cookies through your browser settings and, where offered, our cookie controls. We honor recognized opt-out preference signals, including the Global Privacy Control (GPC), where required by law. Disabling certain cookies may affect how the Site functions.

4. How We Use Information

4.1 We use personal information that we control to:

• provide, operate, maintain, and secure the Site and the Services;
• process registrations, payments, and transactions, and manage Client accounts;
• respond to inquiries and provide customer support;
• send administrative, transactional, and (where permitted) marketing communications, from which you may opt out;
• analyze usage, conduct benchmarking, and develop, test, train, and improve our Site, Services, systems, and artificial-intelligence features;
• detect, prevent, and address fraud, abuse, security incidents, and technical issues; and
• comply with law and enforce our agreements.

4.2 De-identified and aggregated data; limits on AI training. Where we use information for analytics, benchmarking, or to train or improve artificial-intelligence features, we do so using de-identified or aggregated data, or personal information that we control. We do not use Client Data, and in no event any PHI, to train artificial intelligence or for our own purposes, except in de-identified or aggregated form or as permitted by our agreement with the relevant Client. De-identified and aggregated data does not identify any individual, and we maintain it as non-identifiable.

5. How We Share Information

5.1 We do not sell your personal information for monetary consideration. We share personal information only as described below:

• Service providers and subprocessors. We share information with vendors that perform services on our behalf, by category: cloud hosting and content-delivery providers (such as Cloudflare), communications and telephony providers, email-delivery providers, artificial-intelligence providers (such as Anthropic), payment processing (Stripe), and analytics and advertising providers (such as Google and Meta). These providers are permitted to use the information only to provide services to us.
• Advertising partners. As described in Section 3, our use of advertising technologies may involve “sharing” of certain online identifiers under some state laws; you may opt out as described in Section 9.
• Legal and protection. We may disclose information where required by law, subpoena, or legal process, or to protect the rights, property, safety, or security of Nexer, our Clients, or others, or to enforce our agreements.
• Business transfers. We may disclose or transfer information in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to this Privacy Policy.
• With your direction or consent. We may share information at your direction or with your consent.

6. Data Retention

6.1 We retain personal information for as long as necessary to provide the Services and for the purposes described in this Privacy Policy. Following the termination of a Client’s account or relationship with us, we retain the associated personal information for a period of one (1) month, after which it is permanently deleted, except where we are required or permitted to retain it longer by applicable law or to resolve disputes or enforce our agreements.

7. Data Storage, Location, and International Access

7.1 Personal information processed through the Services is stored on cloud infrastructure located in the United States.

7.2 Access to personal information is limited to our personnel and contractors, the relevant Client, and the service providers described in Section 5. Our personnel, contractors, and service providers may be located outside the United States, and personal information may therefore be accessed from, or processed in, jurisdictions other than your own. Where required, we implement appropriate safeguards for such access and transfers.

8. Data Security

8.1 We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and destruction, including access controls and encryption in transit. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

9. Your Privacy Rights (United States)

9.1 Depending on your state of residence and applicable law (such as the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and comparable laws in other U.S. states), you may have the right to:

• know and access the categories and specific pieces of personal information we have collected about you;
• request correction of inaccurate personal information;
• request deletion of your personal information;
• obtain a portable copy of your personal information;
• opt out of the “sale” or “sharing” of personal information and of targeted advertising;
• limit the use of sensitive personal information, where applicable; and
• not receive discriminatory treatment for exercising your rights.

9.2 How to exercise your rights. You may submit a request by contacting us using the details in Section 13. We will verify your request as required by law and respond within the applicable timeframes. You may use an authorized agent to submit a request on your behalf, subject to verification. If we decline a request, you may appeal where applicable law provides an appeal right.

9.3 Opting out of sale/sharing. To opt out of the sharing associated with advertising technologies, you may use our cookie controls, adjust your browser settings, broadcast the Global Privacy Control (GPC), and use the opt-out tools offered by Google and Meta.

9.4 California “Shine the Light.” California residents may request information about our disclosure of personal information to third parties for their direct-marketing purposes. We do not engage in such disclosures.

10. Additional Information for the EEA and United Kingdom

10.1 This Section applies if and to the extent that we process personal data subject to the European Union General Data Protection Regulation (GDPR) or the UK GDPR. Where it applies, Nexer is the controller of the personal data described in this Privacy Policy.

10.2 Legal bases. We process personal data on the legal bases of: performance of a contract; our legitimate interests (such as operating, securing, and improving the Services and marketing, balanced against your rights); compliance with a legal obligation; and your consent, where required.

10.3 Your rights. Subject to applicable law, you have the rights of access, rectification, erasure, restriction, objection, portability, and withdrawal of consent, and the right to lodge a complaint with your supervisory authority.

10.4 International transfers. Where we transfer personal data outside the EEA or the UK, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and the UK Addendum, or another lawful transfer mechanism.

10.5 Representative and contact. Where required by applicable law, Nexer will designate an EU/UK representative and publish their details here. You may contact us using the details in Section 13.

11. Children’s Privacy

11.1 The Site and the Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children under the age of 16. If we learn that we have collected personal information from a child without appropriate consent, we will delete it.

12. Third-Party Sites and Services

12.1 The Site and Services may link to or integrate with third-party websites and services that we do not control. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review their privacy policies.

13. Changes and How to Contact Us

13.1 Changes. We may update this Privacy Policy from time to time. We will post the updated version with a revised “Last Updated” date and, where required, provide additional notice of material changes (such as by email or through the Services). Your continued use of the Site or Services after the effective date constitutes acknowledgment of the updated Privacy Policy.

13.2 Contact. If you have questions or requests regarding this Privacy Policy or our privacy practices, contact us at: