Privacy Policy

When you use NexusLead, we may collect the following types of information:

• Personal Information: Name, email address, and profile data when you register or authenticate via Google or standard email sign-up.
• Usage Data: Information on how you interact with our platform, including IP addresses, browser types, and pages visited.
• Customer Data: Leads and data you scrape or store using our platform. You retain full ownership of this data.

We use the collected information for various purposes, including:

• To provide, maintain, and improve our Service.
• To process transactions and send related information, including invoices and confirmations.
• To manage your account and provide customer support.
• To send you technical notices, updates, security alerts, and administrative messages.
• To facilitate the sending of email campaigns on your behalf.

We may share your data with trusted third-party service providers who assist us in operating our platform, conducting our business, or serving our users. These include:

• Authentication & Database: Supabase for secure data storage and user authentication.
• APIs: Google Cloud APIs (such as Places API) for scraping functionality.
• Payment Processors: Gumroad for secure payment processing. We do not store your full credit card information on our servers.
• Manual Payments: We also accept manual payments (Crypto/PayPal/UPI). Payments made via manual methods are subject to manual verification, and the account upgrade process typically takes 6 hours, but can take 24-48 hours on busy days or weekends. Manual payment details are processed confidentially.

• Gmail App Passwords:
  We require a Google App Password strictly for sending campaign emails on your behalf via SMTP.

  How to generate a Google App Password:

  1. Go to your Google Account > Security.
  2. Enable 2-Step Verification if not already on.
  3. Search for "App Passwords" in the search bar.
  4. Create a new App Password named "NexusLead", copy the 16-digit code, and paste it securely into our dashboard.

  We strictly encrypt this 16-digit code. It only allows us to send emails via SMTP and does NOT give us access to read your personal inbox or change account settings.

• Custom SMTP Credentials: If you connect a custom SMTP provider, we securely store the SMTP host, port, username, and app password/credential in encrypted form solely to send campaigns you initiate. We do not use these credentials for any purpose outside outbound delivery on your behalf.
• Proposals & Invoices: The client data you input to generate proposals and invoices is processed locally in your browser. We DO NOT store your invoice or proposal data on our servers.
• Email Tracking: We use industry-standard tracking technologies, including a 1x1 tracking pixel and tracked links, to provide campaign analytics such as opens and clicks.

To power the Auto-Blogger feature, we securely store your provided Third-Party credentials, including Gemini API Keys, Notion Integration Tokens, WordPress Application Passwords, and Google Cloud Service Account JSONs.

These credentials are encrypted in our database and are used exclusively to execute your requested automated blog generation tasks (such as writing content and publishing to your connected CMS). We will never share, sell, or use your API keys for any internal or cross-account operations.

API Key Usage & Strict Deduction Policy: Please note that any issues arising from the usage of your provided API keys (e.g., rate limits, invalid keys, exhausted credits) are strictly your responsibility. As outlined in our Terms of Service, if a campaign fails mid-generation due to a faulty or rate-limited API key, your generation count will still be deducted. We strongly recommend using dedicated, isolated API keys specifically for NexusLead to ensure smooth operation.

We prioritize the security of your data and use industry-standard measures to protect it against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.

Your Rights: You have the right to access, update, or delete the personal information we hold about you. You can manage your account settings or contact us directly to exercise these rights.

Service Responsibility: While we provide infrastructure for email outreach, you are responsible for your own domain health (SPF/DMARC). NexusLead.live is not liable for deliverability issues, spam filtering, or domain reputation damage resulting from missing or incorrect technical records.

We value your data privacy and practice data minimization.

• Retention Period: User-generated lead data is stored on our secure servers for a maximum of 30 days.
• Automated Cleanup: Our system performs an automated purge of data older than 30 days. This process is irreversible.
• User Control: You retain full ownership of your data and can export it at any time within the retention window.