Privacy Policy

1. Commitment to Privacy

Nexora Spark Agency("NX CRM", "we", "us", or "our") provides an enterprise multi-tenant WhatsApp CRM, Shared Inbox, and Visual Automation SaaS platform. We are deeply committed to protecting your organizational privacy, customer phone records, and communication transcripts in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP, India), GDPR, and Meta's Platform Data Policies.

2. Categories of Information Collected

3. Multi-Tenant Isolation & Zero Data Leakage

NX CRM employs strict architectural multi-tenancy. Every database query, contact query, and message stream is scoped by a mandatory account_id:

• Row Level Security (RLS): Enforced at the PostgreSQL engine level in Supabase. User A cannot view, query, or mutate records belonging to User B under any circumstance.
• Encrypted API Keys: Third-party provider keys (OpenAI, Gemini, Anthropic, Meta App Secrets) are stored encrypted at rest. Plaintext keys are never echoed back to the browser.
• No Cross-Training: Your customer conversations and knowledge base documents are never used to train global AI models or shared with competing businesses.

4. Processing of WhatsApp Messaging Payloads

Inbound and outbound messages are routed directly through Meta's Graph API v22.0. NX CRM processes messaging payloads solely for delivering CRM inbox functionality, automated keyword triggers, and reporting. We do not sell your contact lists, scrape address books, or inject advertising into customer conversations.

5. Automated Opt-Out Compliance (Anti-Spam)

In compliance with global anti-spam mandates and Meta's Business Messaging Policies, NX CRM automatically recognizes unsubscribe keywords (such as "STOP", "UNSUBSCRIBE", "OPTOUT", "CANCEL"). When detected, the contact is automatically marked as opted-out (is_opted_out = true), and automated sequences/broadcasts are immediately barred from messaging them.

6. Data Retention & Deletion Rights

You maintain full control over your customer records. You may export your entire contact database in standard CSV format at any time from the Contacts dashboard. If you cancel your workspace and request complete erasure, all messages, contacts, and configurations are permanently deleted from our active database within thirty (30) days.

To submit a formal deletion request, visit our Data Deletion Request Page or email nexorasparkagencyofficial@gmail.com.