Privacy Policy

By accessing or using the Services you agree to this Privacy Policy. If you do not agree, please do not use the Services.

1. Information We Collect

Information you provide directly

• Account & registration data — name, email address, password, and organization name when you create an account.
• Billing information — payment card details, billing address, and transaction history. Card data is processed and stored by our payment processor (Stripe, Inc.) and is not stored on our servers.
• Business configuration data — service descriptions, service areas, knowledge-base entries, escalation rules, chat widget themes and greetings, and any other content you add to your account.
• Communications — messages you send to our support team or through any in-product feedback mechanism.

Information we collect automatically

• Usage data — pages visited, features used, timestamps, and clickstream data.
• Device & log data — IP address, browser type and version, operating system, referral URL, and error logs.
• Cookies and similar technologies — we use session cookies necessary for authentication and, with your consent, analytics cookies. See Section 6 for more detail.

Call, chat, and end-customer interaction data

When an AI agent provisioned through our platform handles a call or a chat session, we may collect and store interaction metadata (call duration, timestamps, caller phone number, chat session id, visitor IP, browser, page origin) and, depending on your account configuration, full transcripts or recordings of the conversation.

For chat sessions, this also includes the contact information your visitors provide on the pre-chat form (name, email, and an optional phone number) along with the messages exchanged between the visitor and the AI agent.

You are responsible for ensuring your end-customers — callers and chat visitors — are informed about and consent to any recording, transcription, or other data collection, as required by applicable law.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Services.
• Process payments and manage your account balance.
• Send transactional emails such as receipts, password resets, and service notifications.
• If you opt in, send text message (SMS) notifications such as new lead alerts, billing reminders, and other account or service notifications. See Section 3 for details and opt-out instructions.
• Respond to support requests and troubleshoot issues.
• Monitor for fraud, abuse, and security incidents.
• Comply with legal obligations.
• With your consent, send product updates or marketing communications (you may opt out at any time).

3. Text Message (SMS) Notifications

Messages may include, depending on the notification categories you enable: alerts about new leads or chat conversations captured by your AI agent, billing and payment notifications (such as low-balance warnings, payment receipts, and failed payment alerts), account and security notifications, and other service-related messages relating to your use of the Services.

Message frequency varies based on your account activity and the notification categories you have enabled. Message and data rates may apply, depending on your mobile carrier and plan. Nejix and your mobile carrier are not liable for delayed or undelivered messages.

You can opt out of SMS notifications at any time by replying STOP to any message you receive from us, or by disabling text message notifications in your account settings. After you opt out, you may receive a single confirmation message. Reply HELP to any message for assistance, or contact us at support@nejix.com.

We do not share mobile phone numbers collected for SMS notifications, or consent to receive SMS messages, with third parties or affiliates for their marketing or promotional purposes. Phone numbers and SMS consent information are shared only with our telephony sub-processor (see Section 4) solely for the purpose of delivering the messages you have requested.

4. How We Share Your Information

We reserve the right to sell or share personal information in the future where permitted by applicable law, including in connection with platform features that may expose business or agent information for discovery, interoperability, or transaction with other parties or agents. If our practices change in a way that constitutes a "sale" or "share" under applicable law, we will update this policy and provide any notice and opt-out mechanisms required by law. Today, we share information in the circumstances below:

Service providers and sub-processors

We engage trusted third-party vendors to help us operate the Services, including cloud hosting, payment processing, telephony, and AI inference. These providers access your data only to perform services on our behalf and are contractually bound to keep it confidential.

Key sub-processors include:

• Stripe, Inc. — payment processing
• Twilio Inc. — telephony and phone-number provisioning
• Anthropic, PBC — AI model inference for both voice and chat agent responses
• Cloud providers (AWS, GCP) — infrastructure and data storage

The use and transfer of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Customer-configured integrations and platform features

Some Nejix features let you connect external services or expose your business and its capabilities to third parties. Examples today include configuring your AI agent to send email through a mail provider, book calendar appointments, or post messages to a Slack workspace. In the future, this may also include listing your business and its available functions in any agent-facing directory, marketplace, or programmatic interface Nejix may operate, or otherwise making your business reachable and actionable by third-party agents and software.

When you enable any such feature, relevant information from your account and your customers' interactions may be transmitted to the external service, or made discoverable through the relevant platform feature, as needed to perform the action you have configured. You are responsible for ensuring your end-customers consent to those data flows as required by applicable law. Once data leaves the platform through a service you have configured or a platform feature you have opted into, Nejix is not the controller of that data.

Business transfers

If Nejix is involved in a merger, acquisition, or sale of all or substantially all of its assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Services before your data is transferred and becomes subject to a different privacy policy.

Legal requirements

We may disclose your information if we believe in good faith that disclosure is necessary to comply with applicable law, respond to a valid legal process, protect the safety of any person, or enforce our Terms of Service.

With your consent

We may share your information for any other purpose with your explicit consent.

5. Data Retention

We retain your account and configuration data for as long as your account is active. If you close your account, we will delete or anonymize your personal information within a reasonable period of time, except where we are required to retain it for legal, tax, or audit purposes.

Call and chat metadata, recordings, and transcripts are retained in perpetuity by default. You may delete individual records earlier through your account settings.

6. Data Security

We implement industry-standard technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS) and at rest, access controls, and regular security reviews.

No method of transmission over the internet is completely secure. We cannot guarantee absolute security, but we will notify you as required by law if a breach affecting your personal data occurs.

7. Cookies

We use the following categories of cookies:

• Strictly necessary — required for authentication and to keep your session active. These cannot be disabled without breaking core functionality.
• Analytics — help us understand how visitors use the Services (e.g., pages visited, session duration). We use these only with your consent.

You can control non-essential cookies through your browser settings or the cookie preference banner displayed on your first visit.

8. Your Choices and Rights

Depending on where you are located, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — request that we correct inaccurate or incomplete data.
• Deletion — request that we delete your personal information, subject to legal retention obligations.
• Portability — receive your data in a structured, machine-readable format.
• Opt-out of marketing — unsubscribe from marketing emails at any time via the link in any such email or by contacting us.

To exercise any of these rights, contact us at privacy@nejix.com. We will respond within 30 days.

9. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) grants you the following additional rights:

• Right to Know — you may request disclosure of the categories and specific pieces of personal information we have collected about you, the purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete — you may request deletion of personal information we have collected, subject to certain exceptions.
• Right to Correct — you may request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing — California residents have the right to opt out of the sale or sharing of their personal information. Nejix does not currently sell or share personal information for cross-context behavioral advertising. If our practices change in a way that triggers California's sale-or-share requirements, we will provide a "Do Not Sell or Share My Personal Information" mechanism and update this policy accordingly.
• Right to Limit Use of Sensitive Personal Information — we do not use sensitive personal information beyond what is necessary to provide the Services.
• Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA rights.

To submit a verifiable consumer request, contact us at privacy@nejix.com. You may designate an authorized agent to make a request on your behalf.

10. Children's Privacy

The Services are not directed to individuals under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected such information, we will promptly delete it. If you believe a child has provided us with personal information, please contact us at privacy@nejix.com.

11. Third-Party Links

The Services may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review their policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the top of this page. If the changes are material, we will provide additional notice — such as an email notification or an in-product banner — at least 14 days before the changes take effect. Your continued use of the Services after that date constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: