Privacy Policy
Last updated: October 2026
Nexa AI Workforce provides AI-powered customer messaging and lead automation for businesses, including automated replies on messaging channels such as Instagram Direct Messages and website chat. This policy explains what information we and the businesses using our service may process, how it is used, and what rights you have.
Information we process
When you send a message to a business that uses Nexa AI Workforce, or interact with a Nexa-powered chat, the following information may be processed:
- Messages — the content of your messages and the AI replies sent to you.
- Contact details — your name, phone number, or email address if you share them in a conversation, and the messaging-channel identifiers (such as your Instagram or WhatsApp handle) needed to reply to you.
- Lead information — details the business's AI assistant collects to help the business follow up, such as your interest, requested services, or appointment preferences.
- Conversation metadata — timestamps, the channel used, and whether a conversation was handled by AI or a human.
- Business account information — for business customers: name, email, billing details, and configuration of their AI employees.
How the information is used
We and the business you are messaging use this information to:
- Generate automatic replies to your messages using AI.
- Route conversations to a human when needed.
- Record leads and appointment requests so the business can follow up.
- Operate and improve the service, including measuring usage and reliability.
- Send administrative communications to business customers.
The AI assistant is instructed to answer only using the business's own approved information and to request a human when it cannot. Automated systems, including AI, may still make mistakes — you can always ask to speak with a person.
Who the data is shared with
Information may be processed by:
- The business you contacted — they see the conversation, leads, and appointments in their dashboard.
- Meta Platforms — when conversations happen through Instagram or Messenger, message delivery is handled by Meta under their own terms and policies.
- Our cloud database and hosting provider — conversations, leads, and account data are stored on a managed cloud database (Supabase) with access restricted to the relevant business and authorized administrators.
- Google (Gemini) — when an AI reply is generated, the conversation context is sent to the Google Gemini model through our AI gateway to produce the response.
We do not sell your personal information.
Data protection
Access to business conversation data is restricted by role-based access controls so each business can only see its own conversations. Administrative access is limited to authorized personnel. We do not claim any security certifications, and no system is completely secure; if you believe your data has been mishandled, contact us using the details below.
Retention
Conversations, leads, and appointments are stored while a business uses the service so the business can manage follow-ups. Business account data is retained while the account is active. When a business account is deleted, its associated data is deleted. If you would like your information removed sooner, you can request deletion as described below or ask the business you contacted directly.
Your rights
Depending on where you live, you may have rights to access, correct, or delete your personal information, and to object to certain processing. To exercise these rights, contact us or the business you messaged. We respond to requests within the timeframe required by applicable law.
Contact us
For privacy questions or to request access to or deletion of your information, email jallohs2580@gmail.com. Requests are handled manually by our team within applicable legal requirements.
See also our Terms of Service and Data Deletion pages.