Privacy Policy

Nexora is a customer engagement platform built for the MENA region. This policy explains what personal data we handle, why we handle it, and the choices you have. We've written it in plain language on purpose - if anything here is unclear, email us and a real person will answer.

It covers two different relationships. When you visit our website, open an account, or talk to our team, Nexora decides how your data is used - so we're the "controller". When our customers use Nexora to reach their own audiences, they decide what happens to that audience data - so they're the controller and we act as their "processor", handling data on their instructions.

Information you give us

Account and contact details (name, work email, company, role), anything you send us through forms or support conversations, and billing information if you're a paying customer. Payments themselves are handled by our payment providers - we don't store full card numbers.

Information we collect automatically

When you use our website or dashboard we collect standard technical data: IP address, browser and device type, pages viewed, and how you got here. We use cookies and similar technologies for this - you can read the details and set your choices on our Cookie page.

Customer audience data (processed on our customers' behalf)

Businesses that use Nexora upload or stream data about their own end users - profiles, events, contact details and consent records - so they can send relevant messages. We process this data only to provide the service, following each customer's instructions. If you're an end user with a question about this data, contact the brand that messaged you; we'll support them in responding to you.

We use personal data to run and improve Nexora, and nothing more. Specifically:

• To provide the platform - authenticate you, deliver messages, build segments, run journeys and show analytics.
• To support you - answer questions, investigate issues and share product updates you've asked for.
• To keep things safe - detect abuse, prevent fraud and protect the service and its users.
• To handle billing - process subscriptions and send invoices and receipts.
• To improve the product - understand which features help teams and where we can do better.
• To meet legal obligations - respond to lawful requests and keep the records regulators require.

We do not sell personal data, and we don't use the audience data our customers entrust to us to train models for anyone else.

Where the law requires a legal basis to process personal data, we rely on one of the following:

• Consent - for example, when you opt in to marketing emails. You can withdraw it at any time.
• Contract - to deliver the service you or your company signed up for.
• Legitimate interests - to secure, maintain and improve Nexora, balanced against your rights.
• Legal obligation - when a law or regulator requires us to keep or disclose certain information.

We share personal data only when it's needed to run the service or required by law. That includes:

• Sub-processors - vetted vendors that help us operate (cloud hosting, messaging carriers, email and payment providers, support tooling). They act on our instructions under contract.
• Channel and delivery partners - to actually send the messages a customer schedules (for example, a WhatsApp Business Solution Provider or an SMS carrier).
• Professional advisers and authorities - where we're legally obliged to disclose, or to protect our rights and users.
• In a business transfer - if Nexora is ever involved in a merger or acquisition, with notice to you and the same protections carried over.

A current list of sub-processors is available on request, and via the Trust Center.

Nexora runs on managed regional cloud infrastructure. Where a transfer of personal data outside its region of origin is necessary, we put appropriate safeguards in place as required by applicable data protection law.

We keep personal data only as long as we need it for the purposes above, then delete or anonymise it. Account data is kept while your account is active and for a reasonable period afterwards. Customer audience data is kept according to each customer's own retention settings and instructions, and is deleted or returned when their contract ends.

We encrypt data in transit and at rest, restrict access on a need-to-know basis, log administrative actions, and monitor for abuse. Sensitive-data guardrails are on by default to keep regulated data classes out of the wrong flows. No system is perfectly secure, but we take protecting your data seriously and keep improving our controls. You'll find more detail in the Trust Center.

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, object to or restrict certain processing, receive a portable copy, and withdraw consent you've given. To exercise any of these, email techsupport@usenexora.com and we'll respond within the timeframe the law allows.

If you're an end user of a brand that uses Nexora, the quickest route is usually to contact that brand directly - they control the data and can act on your request immediately. We'll help them where needed.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the site is used. You can review each category and change your choices on our Cookie page.

Nexora is a business tool and isn't intended for children. We don't knowingly collect personal data from children. If you believe a child has provided us data, contact us and we'll delete it.

We'll update this policy as our product and the law evolve. When we make a material change, we'll update the date at the top and, where appropriate, let you know directly. Continuing to use Nexora after a change means you accept the updated policy.

Questions about privacy, or want to reach our Data Protection Officer? Email techsupport@usenexora.com or use the contact page. We aim to reply within four business hours.