Privacy Policy

This Privacy Policy explains how NexaraGrowth ("NexaraGrowth," "we," "us," or "our") collects, uses, discloses, and protects information when you use our CRM platform (the "Service"). It applies to account holders and users of the Service ("Customer Data" belonging to you) as well as visitors to our marketing site. This Policy does not apply to the end customers or leads that you, as a Customer, manage within the Service — you are the data controller for that Customer Data, and we process it on your behalf as described below.

Account information you provide when you register, such as your name, email address, phone number, business name, industry, and password (stored using industry-standard hashing).

Customer Data you input or generate while using the Service — contacts, leads, notes, job/dispatch records, campaign content, photos, call recordings and transcripts, and appointment data.

Payment information, processed directly by our payment processor, Stripe. We do not store full card numbers on our servers.

Communications data generated when you send or receive SMS, calls, or emails through the Service via our providers (including Twilio), including message content, timestamps, and phone numbers, where necessary to deliver the feature.

Usage and device data, such as log data, IP address, browser type, pages viewed, and actions taken in the app, collected automatically to operate and secure the Service.

Integration data from third-party accounts you connect, such as Google (Calendar, Business data) — limited to the scopes you authorize.

• Provide, operate, maintain, and improve the Service;
• Process payments and manage subscriptions;
• Enable features you activate, including AI-assisted lead scoring, campaign generation, voice agents, and reporting;
• Send transactional communications (billing, security, service notices) and, where you have opted in, product updates;
• Detect, investigate, and prevent fraud, abuse, and security incidents; and
• Comply with legal obligations and enforce our Terms of Service.

Where the Service uses AI models (including third-party providers such as Anthropic) to score leads, summarize activity, draft messages, or power the voice agent, relevant Customer Data is sent to that model provider solely to generate the requested output and is not used by us to train third-party foundation models.

We do not sell your personal information. We share information only as follows:

• Service providers who process data on our behalf under contract, including Stripe (payments), Twilio (SMS/voice delivery), Google (calendar/maps integrations), Anthropic (AI processing), Vercel (hosting and file storage), and our database provider;
• Within your organization — data is visible to other users you invite to your account or agency, according to the roles and permissions you configure;
• Legal and safety reasons — where required to comply with law, legal process, or to protect the rights, property, or safety of NexaraGrowth, our users, or others; and
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

We use technical and organizational safeguards designed to protect information, including encryption in transit (TLS), password hashing, and access controls limiting who can view Customer Data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We retain account and Customer Data for as long as your account is active and as needed to provide the Service. If you close your account, we will delete or anonymize your data within a commercially reasonable period, except where we are required to retain it for legal, tax, security, or dispute resolution purposes.

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to opt out of certain processing. This includes rights available under the Iowa Consumer Data Protection Act and comparable state privacy laws (such as California, Colorado, Connecticut, Utah, and Virginia) for residents of those states. To exercise these rights, contact us at darrick@nexaragrowth.com. We will verify your request and respond within the timeframe required by applicable law. If you are a lead or contact managed inside a customer's NexaraGrowth account, please direct your request to that business directly, as they control that data.

Phone numbers and message content used for SMS, voice, and email outreach are processed solely to deliver the communications our Customers initiate through the Service. We do not use contact phone numbers or message content collected through outreach features for our own marketing. Message and data rates may apply based on the recipient's carrier plan. See Section 6 of our Terms of Service for outreach compliance obligations that apply to our Customers.

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. You can control cookies through your browser settings; disabling them may limit some functionality.

The Service is intended for business use by adults and is not directed to children under 16. We do not knowingly collect personal information from children.

NexaraGrowth is operated from and governed by the laws of the United States and the State of Iowa. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States.

We may update this Privacy Policy from time to time. Material changes will be indicated by an updated effective date, and where appropriate, additional notice will be provided.

Questions about this Privacy Policy or your data can be sent to darrick@nexaragrowth.com.