Legal & Trust

Privacy Policy

Effective Date: January 1, 2026•Entity: Nexora Spark Agency•Jurisdiction: West Bengal, India

1. Introduction

Nexora Spark Agency ("we", "us", or "our") operates the NX CRM SaaS platform located at https://nxcrm.online. This Privacy Policy explains how we collect, process, store, and protect personal information when you use our website, customer relationship management software, and official WhatsApp Cloud API integration.

2. Information We Collect

Account Registration Data: When creating a workspace, we collect your full name, work email address, and encrypted credentials.

Customer Relationship Data (CRM): Information you and your agents enter into NX CRM, including contact phone numbers (in international format), tags, notes, pipeline stages, and custom attributes.

WhatsApp Cloud API Credentials: Meta Phone Number ID, WhatsApp Business Account ID (WABA ID), and System User Access Tokens provided to enable message routing. All access tokens are AES-256-GCM encrypted.

Billing & Transaction Records: We process subscription payments through Razorpay. We do not store raw credit card numbers or banking passwords on our servers.

3. How We Use Information

To provision your multi-tenant workspace and manage user authentication.
To route inbound and outbound WhatsApp messages via Meta Graph API v22.0.
To execute automated workflow sequences, auto-replies, and AI drafts.
To generate analytics metrics (response times, resolution rates, broadcast deliveries).
To process subscription renewals and send transactional billing receipts.

4. Data Security & Storage Architecture

All customer data is hosted in encrypted PostgreSQL databases powered by Supabase with Row Level Security (RLS) policies enforcing complete isolation between client accounts. All data in transit is encrypted using TLS 1.3, and access tokens are encrypted at rest using industry-standard AES-256 algorithms.

5. Meta Platform Compliance & WhatsApp Messages

We process WhatsApp messaging payloads exclusively for the purpose of providing CRM functionality to your authorized workspace. We do not sell customer contact lists, scrape messaging directories, or share customer data with third-party advertisers.

6. User Rights & Data Deletion

You have the right to access, rectify, export, or permanently erase your workspace data at any time. To submit a formal data deletion request, visit our Data Deletion Request Page or email us at nexorasparkagencyofficial@gmail.com.

7. Contact the Privacy Officer

If you have any questions or concerns regarding our privacy practices, please contact:

Nexora Spark Agency

Attn: Privacy & Data Protection Compliance

Email: nexorasparkagencyofficial@gmail.com

Address: Sripur Bazar, Balagarh, West Bengal 712514, India

Jurisdiction: West Bengal, India