Privacy Policy

When you use NexusLead, we may collect the following types of information:

• Personal Information: Name, email address, and profile data when you register or authenticate via Google or standard email sign-up.
• Usage Data: Information on how you interact with our platform, including IP addresses, browser types, and pages visited.
• Customer Data: Leads and data you scrape or store using our platform. You retain full ownership of this data.

We use the collected information for various purposes, including:

• To provide, maintain, and improve our Service.
• To process transactions and send related information, including invoices and confirmations.
• To manage your account and provide customer support.
• To send you technical notices, updates, security alerts, and administrative messages.
• To facilitate the sending of email campaigns on your behalf.

We may share your data with trusted third-party service providers who assist us in operating our platform, conducting our business, or serving our users. These include:

• Authentication & Database: Supabase for secure data storage and user authentication.
• APIs: Google Cloud APIs (such as Places API) for scraping functionality.
• Payment Processors: Gumroad for secure payment processing. We do not store your full credit card information on our servers.
• Manual Payments: We also accept manual payments (Crypto/PayPal/UPI). Payments made via manual methods are subject to manual verification, and the account upgrade process typically takes 6 hours, but can take 24-48 hours on busy days or weekends. Manual payment details are processed confidentially.

• Gmail App Passwords:
  We require a Google App Password strictly for sending campaign emails on your behalf via SMTP.

  How to generate a Google App Password:

  1. Go to your Google Account > Security.
  2. Enable 2-Step Verification if not already on.
  3. Search for "App Passwords" in the search bar.
  4. Create a new App Password named "NexusLead", copy the 16-digit code, and paste it securely into our dashboard.

  We strictly encrypt this 16-digit code. It only allows us to send emails via SMTP and does NOT give us access to read your personal inbox or change account settings.

• Custom SMTP Credentials: If you connect a custom SMTP provider, we securely store the SMTP host, port, username, and app password/credential in encrypted form solely to send campaigns you initiate. We do not use these credentials for any purpose outside outbound delivery on your behalf.
• Proposals & Invoices: The client data you input to generate proposals and invoices is processed locally in your browser. We DO NOT store your invoice or proposal data on our servers.
• Email Tracking: We use industry-standard tracking technologies, including a 1x1 tracking pixel and tracked links, to provide campaign analytics such as opens and clicks.

The Nexus Connect desktop application operates on a strict Local-First Architecture. Your WhatsApp session data, local contact lists, and message contents are processed exclusively on your machine. NexusLead does NOT sync, read, or upload your private message history to our cloud servers.

Because the software initializes and executes all messaging logic directly from your local environment, we maintain zero visibility into the specific content of your outgoing communications or the identities of your recipients. This decentralized approach ensures that your business intelligence and client relationships remains entirely within your control and sovereign infrastructure.

Users are solely responsible for the physical and digital security of the hardware used to run Nexus Connect. Since session data is stored locally to facilitate human-like automation, we strongly recommend utilizing device encryption and secure access protocols to protect your local database and WhatsApp authentication tokens.

We prioritize the security of your data and use industry-standard measures to protect it against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.

Your Rights: You have the right to access, update, or delete the personal information we hold about you. You can manage your account settings or contact us directly to exercise these rights.

Service Responsibility: While we provide infrastructure for email outreach, you are responsible for your own domain health (SPF/DMARC). NexusLead.live is not liable for deliverability issues, spam filtering, or domain reputation damage resulting from missing or incorrect technical records.

We value your data privacy and practice data minimization.

• Retention Period: User-generated lead data is stored on our secure servers for a maximum of 30 days.
• Automated Cleanup: Our system performs an automated purge of data older than 30 days. This process is irreversible.
• User Control: You retain full ownership of your data and can export it at any time within the retention window.