Privacy Policy

1. Scope and roles

This Privacy Policy explains how Nexus AI Hub LLC (“Nexus,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information when people visit nexus-ai-hub.com, communicate with us, request a demonstration, purchase or use Nexus services, receive support, or otherwise interact with us.

Nexus may act in two different roles. For website visitors, prospects, account contacts, billing contacts, and our own business operations, Nexus generally determines why and how personal information is used. For contacts, callers, message recipients, and other individuals whose information a business customer uploads to or processes through a customer workspace (“Customer Data”), the customer generally controls the processing and Nexus generally acts as its service provider or processor. Requests about Customer Data should normally be directed first to the relevant Nexus customer.

2. Information we collect

Category	Examples
Identity and contact	Name, business name, title, email, telephone number, postal address, authorized representative information.
Account and authentication	User identifiers, access permissions, login events, security and authentication information.
Commercial and billing	Order Forms, subscriptions, purchases, invoices, transaction records, payment status, tax information; full payment-card data is generally handled by payment processors.
Customer Data	Contacts, leads, reservations, orders, forms, notes, workflows, calendars, communications, files, and other information supplied by a customer.
Communications content	Email, SMS/MMS, chat, call audio, recordings, transcripts, voicemails, support tickets, and message metadata where enabled.
AI data	Prompts, knowledge-base content, inputs, outputs, evaluations, and usage metadata generated through AI features.
Device and usage	IP address, browser, device, operating system, pages, clicks, referrer, timestamps, approximate location, diagnostics, cookies, and similar identifiers.
Compliance and onboarding	Business registration, A2P brand/campaign information, consent evidence, sample messages, telephone-number and verification records.
Integration data	Data obtained from or sent to third-party systems that a customer connects, according to the customer’s settings and permissions.

3. Sources

Directly from you, your organization, authorized users, forms, purchases, calls, messages, support requests, and onboarding submissions.
From Nexus customers that upload or connect Customer Data.
Automatically from websites, applications, cookies, pixels, logs, and communications infrastructure.
From HighLevel, Extendly, telecommunications carriers, payment processors, AI providers, analytics and advertising providers, and customer-selected integrations.
From public sources, business directories, referral partners, and service providers, where permitted by law.

4. Why we use information

Provide, configure, host, operate, secure, support, troubleshoot, and improve the Services.
Create accounts, authenticate users, manage permissions, and prevent fraud or abuse.
Onboard customers, configure automations and AI agents, provide white-label support, and respond to requests.
Process transactions, subscriptions, usage charges, invoices, taxes, refunds, and collections.
Route calls, messages, emails, reservations, orders, and other customer-directed communications.
Generate AI outputs and measure AI, telephony, messaging, storage, and other usage.
Register and verify telephone numbers and messaging campaigns and comply with carrier requirements.
Communicate service, security, billing, support, and administrative information.
Market Nexus services where permitted, measure campaigns, personalize content, and honor opt-outs.
Comply with law, enforce agreements, protect rights and safety, investigate incidents, and establish or defend legal claims.
Conduct analytics, research, and product improvement using aggregated or de-identified information where appropriate.

5. Legal bases where applicable

Depending on the jurisdiction and context, we rely on performance of a contract, steps requested before a contract, legitimate interests, compliance with legal obligations, consent, and other lawful bases. Where we rely on consent, it may be withdrawn for future processing, but withdrawal does not affect earlier lawful processing. A customer is responsible for establishing the lawful basis for Customer Data it instructs us to process.

6. How we disclose information

We may disclose personal information to the following categories of recipients for the purposes described above:

HighLevel LLC, which supplies the underlying white-label software platform and related services.
Extendly for HighLevel / Wahi Inc., which may provide backend support, customer onboarding, training, and operational infrastructure on Nexus’s behalf.
Telecommunications carriers, number providers, email providers, messaging aggregators, A2P and Toll-Free verification providers.
AI model, speech, transcription, recording, content-generation, and data-processing providers used for enabled features.
Hosting, security, analytics, advertising, customer-support, professional-services, and payment providers.
Customer-selected integrations and third parties when an authorized user enables or directs the connection.
Nexus customers, authorized users, and recipients as necessary to deliver requested communications or workflows.
Government authorities, courts, regulators, carriers, or other parties when required by law or reasonably necessary to protect rights, safety, security, or the Services.
A buyer, investor, lender, adviser, or successor in a merger, financing, reorganization, asset sale, or similar transaction, subject to appropriate safeguards.

These providers may process information in the United States and other countries. Their own terms and privacy notices may apply when they act independently. Nexus does not sell personal information for money. Some advertising or analytics activities may be treated as “sale,” “sharing,” or targeted advertising under certain U.S. state laws; where applicable, we provide the choices required by law.

7. HighLevel, Extendly, and customer access

Because Nexus operates a supported white-label service, authorized Nexus, HighLevel, and Extendly personnel may access customer accounts and Customer Data when reasonably necessary to onboard users, configure features, provide support, investigate security or abuse, maintain the platform, process service requests, or comply with law. Access should be limited to authorized personnel and business needs. Customers must provide their own end users with a privacy notice that accurately explains this processing and obtain any consent required by law.

8. AI features

When AI features are enabled, prompts, knowledge-base content, communications, audio, transcripts, outputs, and related metadata may be sent to AI and supporting providers to generate a response or perform the requested function. AI output may contain errors and should be reviewed by the customer. Customers must not submit information to AI features unless they have authority and a lawful basis to do so, and should avoid sensitive information unless the applicable configuration and agreements expressly permit it.

9. Calls, messages, recordings, and transcripts

Customers may configure voice, SMS/MMS, email, recording, transcription, voicemail, and related features. Nexus processes the resulting content and metadata to deliver the configured service, provide support, measure usage, maintain security, and meet legal or carrier requirements. The customer is responsible for providing notices and obtaining consent for calls, messages, recording, transcription, and AI participation. Individuals should contact the business that initiated the communication with questions or opt-out requests; Nexus will assist that business as required by applicable law and contract.

10. Cookies, analytics, and advertising

We may use necessary, preference, analytics, and advertising cookies or similar technologies. These technologies can remember settings, secure sessions, measure website and campaign performance, and help deliver relevant advertising. The actual cookie banner and settings must match the technologies deployed on the website. You can use browser controls and any cookie-preference tool we provide. Blocking cookies may affect functionality.

Current policy references Google Analytics, Google Ads, Meta/Facebook remarketing, and Matomo.

11. Marketing communications

You may opt out of marketing email through the unsubscribe link and marketing SMS by replying STOP where supported. You may still receive transactional, security, billing, or service communications. Consent to marketing texts is not a condition of purchase. Message frequency varies; message and data rates may apply. Reply HELP where supported or contact us using Section 18.

12. Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, follow customer instructions, maintain security and backups, comply with law and carrier rules, resolve disputes, collect fees, and enforce agreements. Retention depends on data type, account settings, contractual instructions, legal requirements, and provider capability. After termination, data may be deleted or de-identified after any applicable export period, although limited copies may remain in backups or legal records. Customers are responsible for choosing appropriate retention settings and instructing deletion for Customer Data.

13. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information and the Services. No Internet transmission or storage system is completely secure. Customers and users must protect credentials, enable multi-factor authentication where available, manage user access, and notify Nexus promptly of suspected unauthorized access.

14. International transfers

Nexus and its providers may process information outside the individual’s state, territory, province, or country, including in the United States. Where required, Nexus uses an appropriate transfer mechanism or contractual safeguard. Customers are responsible for determining whether their instructions require additional transfer terms or data-localization measures.

15. Privacy rights and choices

Depending on applicable law and subject to exceptions, individuals may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information; withdraw consent; opt out of targeted advertising, sale, or sharing; limit certain sensitive-information uses; and appeal a denied request. We will verify requests and may ask for information necessary to confirm identity, authority, and the relevant account. Authorized agents may submit requests where permitted by law. We will not unlawfully discriminate for exercising privacy rights.

If the information is Customer Data controlled by a Nexus customer, submit the request to that customer. Nexus may refer the request to the customer and assist it. To exercise rights regarding information Nexus controls, contact [email protected].

16. Children

The Services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal information directly from children under 13 through our own website. Customers must not use the Services to process children’s information without all permissions and protections required by law. If you believe a child has provided information improperly, contact us.

17. Changes to this Policy

We may update this Policy to reflect changes in law, technology, providers, or practices. We will post the updated version and change the effective date. Where required by law, we will provide additional notice or obtain consent before a material change applies.

18. Contact

Nexus AI Hub LLC
ABA Corporation Building, Units 1–4, 1st Floor, Gualo Rai
Saipan, MP 96950, CNMI

Privacy requests: [email protected]
General inquiries: [email protected]

19. Jurisdiction-specific notices

California and other U.S. state privacy disclosures, including category tables, statutory retention language, and “Do Not Sell or Share” mechanics if thresholds or practices trigger them.
Guam applicability and any territorial privacy, recording, consumer-protection, or breach-notification requirements.
GDPR/UK GDPR representative, controller identity, transfer mechanism, and complaint rights if Nexus targets or monitors relevant individuals.
Nevada, Canadian, Australian, New Zealand, or other notices if Nexus’s actual customer base and marketing activities trigger them.
A Data Processing Addendum and subprocessor list for business customers.