This Privacy Policy explains what information NexaFlow AI collects, how we use it, and the choices you have. It applies to visitors of our website, subscribers to our Service, and individuals ("leads") who interact with our AI chatbot on a subscriber's website.
| Who | What we collect | Why |
|---|---|---|
| Subscribers (our paying customers) | Name, business name, email, phone, payment information (handled directly by Stripe — we do not store your card details) | Account setup, billing, support |
| Leads (people who chat with a subscriber's assistant) | Name, email and/or phone, property interest, budget range, timeline, and general location, as provided during the chat conversation | Delivered to the subscribing brokerage so they can follow up with the lead |
| All website visitors | Basic technical data (IP address, browser type, pages visited) via standard web server/hosting logs | Security, diagnosing issues, understanding site usage |
We do not sell personal information to third parties.
Lead and account data is stored using Supabase, a third-party database provider. Conversations are processed using Anthropic's Claude API to generate the AI assistant's responses. Payment processing is handled entirely by Stripe — we do not receive or store full card numbers. Automated notifications (e.g., emailing a subscriber when a new lead is captured) are handled via n8n.
If you are a lead who chatted with an AI assistant on a real estate brokerage's website, your information was collected on behalf of that brokerage (our subscriber), who is the party responsible for how they subsequently contact and use your information. NexaFlow AI acts as a service provider to that brokerage. Questions about how a specific brokerage uses your information should be directed to that brokerage directly.
We retain lead and account data for as long as an account is active, and for a reasonable period afterward for legal, billing, and record-keeping purposes. You can request deletion of your data by contacting us (see below), subject to any legal retention requirements.
We use reasonable technical and organizational measures to protect personal information, including encrypted connections and access-controlled infrastructure. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. Material changes will be posted here with an updated "Last updated" date.
Questions about this Privacy Policy, or requests to access or delete your data, can be sent to godibodi990@gmail.com.