NexusAI ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard data when you interact with Sofia, our AI-powered real estate assistant, or when you use any of our services, including paid subscription plans.
When you interact with Sofia through our chat widget, we may collect the following information that you voluntarily provide:
When you sign up for a paid plan, we also collect:
We also automatically collect technical information such as your IP address for security and rate-limiting purposes. This data is not used for profiling or marketing.
The information you provide is used exclusively to:
We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.
We do not store credit card numbers, debit card information, or any sensitive payment data on our servers. All payment processing is handled securely by our third-party payment processor.
We only retain the following billing-related records on our end:
Your full payment details (card number, CVV, expiration date) are transmitted directly to our payment processor and are never stored on NexusAI servers. All transactions are encrypted using TLS.
Your data is stored securely in our database hosted by Supabase, located in the United States (us-east-1, North Virginia). We implement the following security measures:
We retain your personal information for as long as necessary to fulfill the purposes described in this policy, or as required by law. Typically, lead data is retained for up to 12 months from the date of collection.
After this period, data is permanently deleted from our systems unless you have an ongoing relationship with one of our partner real estate agencies.
Billing records and transaction history are retained for up to 7 years to comply with applicable accounting and tax regulations.
We respect the privacy rights of all users regardless of their country or state of residence. If you interact with our services, you have the following rights:
These rights apply to all users. Residents of California (CCPA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Florida (FDBR) and Canada (PIPEDA) have additional protections under their respective laws — we honor all of them under this single policy.
To exercise any of these rights, contact us using the information below. We will respond within 45 days.
We use the following third-party services to operate our platform:
Each of these providers maintains their own privacy and security standards. We encourage you to review their respective policies.
Our website does not use tracking cookies or third-party analytics services. We do not use advertising pixels or behavioral tracking technologies.
Supabase Auth may use session tokens stored in your browser to keep you logged into the dashboard. These are strictly necessary for authentication and are deleted when you log out.
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately.
This Privacy Policy is governed by and construed in accordance with the laws of the United States. For California residents, additional rights apply under the California Consumer Privacy Act (CCPA) as described above.
By using our services, you acknowledge that your data may be processed and stored in the United States, regardless of your country of residence.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
Continued use of our services after any changes constitutes your acceptance of the updated policy.
If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your data, please contact us:
NexusAI
Email: nexus.b2b.systems@gmail.com
For data deletion requests, please include your full name and email address so we can locate your records. We will respond within 45 days.