Privacy Policy

Nexus CRM stores account, workspace and operational information needed to provide the service. Client organisations are responsible for ensuring they have a lawful basis to upload and process their own customer and employee data.

Account information

We may process names, business emails, registered mobile numbers, login records, subscription status and support information. Registered Admin mobile numbers are used for OTP authentication and account follow-up.

CRM data

Client workspaces can contain leads, contacts, deals, employee records, attendance, communications, integrations, files and industry-specific records.

Security

The application uses tenant boundaries, server-side sessions and encrypted integration secrets. Production operators should also enable secure infrastructure, backups, access logging, MFA/OTP and monitoring.

Third parties

Data may be exchanged with configured providers such as payment gateways, email/SMS/WhatsApp providers and AI services only as required for enabled features.

Contact and deletion

Clients should have a documented process for data correction, export and deletion requests. Subscription cancellation does not automatically erase business records.