Privacy Policy

1.1 Personal Information

"Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an identifiable individual or household.

Personal Information does not include information that has been lawfully made public, deidentified information, aggregated information, or information excluded from the definition of personal information under applicable law.

1.2 Customer Materials

"Customer Materials" means content, information, data, files, branding, trademarks, logos, photographs, videos, recordings, documents, website materials, social media materials, business information, and other materials that a user uploads, submits, connects, imports, or otherwise provides to NexoFlow.

Customer Materials do not include Generated Outputs or NexoFlow Technology.

1.3 Generated Outputs

"Generated Outputs" means text, images, videos, graphics, audio, captions, blog posts, articles, campaigns, recommendations, analyses, reports, content plans, marketing materials, and other outputs created, generated, assembled, transformed, enhanced, or modified through the Services.

Generated Outputs include materials produced:

• by artificial intelligence or machine-learning systems
• through automated workflows
• in response to user prompts, instructions, selections, or Customer Materials
• through NexoFlow templates, systems, tools, or agents
• through a combination of automated systems and human input

1.4 Account Content

"Account Content" means Customer Materials, Generated Outputs, account settings, project information, scheduled content, drafts, calendars, campaign information, and other materials associated with an account or workspace.

1.5 NexoFlow Technology

"NexoFlow Technology" means the Services and all related software, source code, object code, user interfaces, designs, databases, data structures, models, agents, systems, prompts, prompt chains, templates, taxonomies, workflows, processes, algorithms, scoring systems, automation logic, methodologies, documentation, analytics, internal configurations, and proprietary materials developed or used by NexoFlow.

2.1 Account and Contact Information

We may collect:

• name
• email address
• telephone number
• mailing address
• company or business name
• job title
• account username
• login credentials
• account preferences
• team and workspace membership
• profile information
• communications preferences

2.2 Billing and Transaction Information

We may collect:

• billing name and address
• subscription plan
• payment status
• transaction history
• invoices
• tax information
• payment-related identifiers
• limited payment-card information provided by our payment processors

Payment-card information may be collected and processed directly by third-party payment processors. NexoFlow may not receive or store complete payment-card numbers.

2.3 Customer Materials

We may collect Customer Materials that you upload, connect, import, or submit, including:

• logos and branding materials
• photographs, images, videos, and audio
• business descriptions
• website content
• social media content
• marketing materials
• text documents and PDFs
• product and service information
• customer or lead information
• business contact information
• prompts and instructions
• content guidelines
• project information
• other materials submitted through the Services

You should not provide sensitive Personal Information unless it is reasonably necessary for an authorized use of the Services and you have all required permissions.

2.4 Generated Outputs and Platform Interactions

We may collect and store:

• prompts and instructions
• Generated Outputs
• revisions and editing history
• content approvals and rejections
• publication and scheduling activity
• content-performance information
• feedback and ratings
• user selections
• agent and workflow interactions
• conversations with AI-assisted features
• requested output formats
• generation settings
• information about how Generated Outputs are used

2.5 Third-Party Integrations

When you connect a third-party service, we may receive information authorized through that integration.

Third-party services may include:

• Google Business Profile
• Google Analytics
• Google Search Console
• Google Drive
• YouTube
• Facebook
• Instagram
• LinkedIn
• TikTok
• X
• Pinterest
• Canva
• Dropbox
• WordPress
• content-management systems
• customer-relationship-management systems
• scheduling platforms
• advertising platforms
• other services supported by NexoFlow

Information received depends on the integration, the third-party service's policies, and the permissions you authorize. It may include account identifiers, profile information, posts, analytics, performance data, files, account settings, comments, reviews, messages, website data, and publishing permissions.

You may revoke an integration through your NexoFlow account, through the applicable third-party service, or by contacting us. Revocation does not necessarily delete information previously received or processed.

2.6 Device, Usage, and Technical Information

We may automatically collect:

• IP address
• browser type
• device type
• device identifiers
• operating system
• language
• approximate geographic location
• referral and exit URLs
• pages and features viewed
• access dates and times
• session information
• clickstream data
• cookie and similar technology identifiers
• API requests
• error logs
• system activity
• diagnostic information
• network information
• performance measurements
• security and fraud signals

2.7 Communications and Support Information

We may collect information you provide when you:

• contact customer support
• send us an email
• participate in a call or demonstration
• submit a complaint
• respond to a survey
• request a feature
• report a problem
• participate in onboarding
• otherwise communicate with us

Calls or meetings may be recorded or transcribed where permitted by law and after any notice or consent required by law.

2.8 Information About Other People

Users may provide information about employees, contractors, customers, leads, clients, business contacts, social media users, website visitors, or other individuals.

The user providing such information is responsible for having a lawful basis and all required permissions to provide and process it through the Services.

2.9 Sensitive Information

The Services are not designed for the routine processing of:

• Social Security numbers
• government identification numbers
• complete financial-account credentials
• medical records or protected health information
• genetic data
• biometric identifiers used for identification
• precise geolocation
• information about children
• passwords for third-party services submitted outside an authorized connection process
• other highly sensitive information

Do not submit such information unless NexoFlow has expressly agreed in writing to process it and appropriate safeguards are in place.

NexoFlow is not a healthcare provider or HIPAA-covered service unless expressly agreed in a separate written agreement.

5.1 Contract

Processing may be necessary to provide the Services, administer an account, process payments, provide requested features, or perform our contractual obligations.

5.2 Legitimate Interests

We may process Personal Information for legitimate interests such as:

• operating and improving the Services
• securing our systems
• detecting fraud and abuse
• communicating with users
• analyzing product performance
• supporting customers
• enforcing agreements
• developing our business

We consider the impact on individuals before relying on legitimate interests.

5.3 Consent

We may rely on consent for certain cookies, marketing communications, connected services, or other processing where consent is required. Consent may be withdrawn, but withdrawal will not affect processing already lawfully performed.

5.4 Legal Obligations

We may process information to comply with applicable laws, regulations, court orders, subpoenas, tax obligations, and lawful government requests.

5.5 Protection of Rights

We may process information when necessary to protect legal rights, security, safety, property, users, or the public.

6.1 AI-Assisted Services

NexoFlow uses artificial intelligence, machine learning, automation, and related technologies to process Customer Materials and produce Generated Outputs.

Processing may involve:

• language models
• image-generation models
• video-generation models
• speech and audio systems
• computer-vision systems
• embedding systems
• retrieval systems
• ranking systems
• recommendation systems
• classification systems
• quality-scoring systems
• content-analysis systems
• automated agents and workflows

6.2 Third-Party AI Providers

We may transmit prompts, Customer Materials, Personal Information, and other information to third-party AI or infrastructure providers when necessary to provide the Services.

These providers may process information as service providers, processors, independent controllers, or other legally recognized roles depending on the provider and service.

We select and configure providers using commercially reasonable measures, but third-party services remain subject to their own terms, technical limitations, and privacy practices.

6.3 Platform Improvement

We may use platform interactions, feedback, Generated Outputs, usage information, performance information, and deidentified or aggregated data to:

• evaluate output quality
• improve recommendations
• improve retrieval and ranking
• improve consistency
• test features
• detect errors
• improve workflows
• enhance safety
• prevent abuse
• improve the Services

Unless expressly disclosed or authorized, NexoFlow does not intentionally use private Customer Materials to train publicly available third-party foundation models.

This restriction does not prevent NexoFlow from using Customer Materials as necessary to provide requested Services, improve an individual customer's experience, maintain security, investigate abuse, or develop NexoFlow's own private systems as permitted by the Terms of Service and applicable law.

6.4 Human Review

Authorized personnel and service providers may review prompts, Customer Materials, Generated Outputs, and related interactions where reasonably necessary to:

• provide support
• investigate technical problems
• improve output quality
• test features
• prevent fraud or abuse
• enforce agreements
• address safety concerns
• comply with law

Access is limited according to business need and applicable safeguards.

6.5 No Guarantee of Accuracy or Uniqueness

Generated Outputs may be inaccurate, incomplete, outdated, offensive, unsuitable, or similar to outputs produced for other users.

NexoFlow does not guarantee:

• factual accuracy
• legal compliance
• intellectual-property clearance
• originality
• uniqueness
• search-engine performance
• platform approval
• commercial results
• fitness for a particular purpose

Users are responsible for reviewing Generated Outputs before use or publication.

6.6 Automated Decisions

NexoFlow does not currently use Personal Information to make decisions based solely on automated processing that produce legal or similarly significant effects concerning individuals.

If this practice changes, we will provide any notice and choices required by applicable law.

7.1 Ownership of Customer Materials

As between you and NexoFlow, you retain ownership of Customer Materials you owned before submitting them to the Services.

You represent and warrant that you possess all rights, permissions, consents, and authority necessary to submit and use Customer Materials through the Services.

7.2 License to Customer Materials

By providing Customer Materials, you grant NexoFlow a worldwide, non-exclusive, royalty-free, sublicensable license to:

• host
• store
• reproduce
• process
• analyze
• organize
• modify
• resize
• adapt
• translate
• transmit
• publish
• display
• distribute
• create derivative materials from the Customer Materials

solely as reasonably necessary to provide, maintain, secure, support, improve, and operate the Services, comply with your instructions, and exercise NexoFlow's rights under the Terms of Service.

This license continues for as long as reasonably necessary to provide the Services and fulfill the purposes described in this Privacy Policy, subject to backup retention, legal obligations, dispute preservation, and the Terms of Service.

7.3 Ownership of Generated Outputs

As between you and NexoFlow, and to the fullest extent permitted by applicable law, NexoFlow retains all right, title, and interest, if any, in and to Generated Outputs and all related intellectual-property and proprietary rights.

Generated Outputs do not become Customer Materials merely because they were:

• created in response to a user prompt
• based on Customer Materials
• created for a particular account or project
• published to a customer's website or social media account
• edited, approved, downloaded, or used by a customer
• paid for as part of a subscription

NexoFlow's ownership does not transfer ownership of your pre-existing Customer Materials, trademarks, logos, photographs, or other independently owned materials incorporated into a Generated Output.

To the extent ownership or intellectual-property rights in a Generated Output legally vest in a user, the ownership and assignment of such rights will be governed by the Terms of Service.

7.4 Customer License to Generated Outputs

Subject to your compliance with the Terms of Service and satisfaction of applicable payment obligations, NexoFlow grants you a non-exclusive, worldwide, royalty-free license to:

• use
• reproduce
• display
• publish
• distribute
• modify
• adapt
• create derivative materials from
• commercially use

Generated Outputs created for your account during an authorized subscription period.

Unless the Terms of Service or a separate written agreement states otherwise, this license is perpetual for Generated Outputs lawfully created during a fully paid subscription period.

This license does not grant ownership of Generated Outputs and does not provide rights to:

• NexoFlow Technology
• internal prompts or prompt chains
• models or model configurations
• source code
• templates
• proprietary workflows
• internal analytics
• system logs
• embeddings
• vector databases
• quality scores
• automation logic
• confidential information
• third-party materials
• materials belonging to another user
• materials for which NexoFlow lacks the right to grant a license

7.5 Third-Party Rights

Generated Outputs may contain, resemble, refer to, or be based on third-party content.

NexoFlow does not grant rights in third-party trademarks, copyrights, likenesses, confidential information, or other third-party property.

Users are responsible for obtaining any additional rights or permissions required for their intended use.

7.6 Prospective Application

The ownership provisions in this Section apply to Generated Outputs produced after the effective date of this Privacy Policy and after the user has accepted the applicable Terms of Service.

Previously generated content remains governed by the terms and agreements that applied when that content was generated, unless the parties agree otherwise in writing.

8.1 Service Providers

We may disclose information to service providers that assist with:

• cloud hosting
• data storage
• artificial intelligence
• content generation
• payment processing
• analytics
• authentication
• communications
• email delivery
• customer support
• security
• monitoring
• error tracking
• content delivery
• database management
• professional services

Service providers are permitted to process information for authorized purposes and subject to applicable contractual restrictions.

8.2 Integrations and Services You Select

We disclose information to third-party services when you connect an integration, instruct us to publish content, transfer information, or otherwise interact with that service.

Your use of a third-party service is governed by that service's terms and privacy practices.

8.3 Account Administrators and Team Members

Account owners, administrators, and authorized workspace members may access information associated with their account, workspace, projects, and users.

If your account is provided by an employer, agency, client, or other organization, that organization may control the account and access information associated with it.

8.4 Professional Advisers

We may disclose information to attorneys, accountants, insurers, auditors, consultants, and other professional advisers where reasonably necessary.

8.5 Legal and Safety Disclosures

We may disclose information when we reasonably believe disclosure is necessary to:

• comply with law
• respond to a court order, subpoena, warrant, or lawful request
• enforce our agreements
• collect amounts owed
• investigate fraud or abuse
• protect NexoFlow, our users, or third parties
• address security incidents
• prevent harm
• establish, exercise, or defend legal claims

8.6 Corporate Transactions

We may disclose or transfer information in connection with an actual or proposed:

• merger
• acquisition
• financing
• reorganization
• bankruptcy
• sale of assets
• investment
• change of control
• similar corporate transaction

8.7 With Your Direction or Consent

We may disclose information when you direct us to do so or otherwise provide consent.

8.8 Deidentified and Aggregated Information

We may disclose deidentified or aggregated information that does not reasonably identify an individual.

13.1 No Guaranteed Export Feature

NexoFlow does not guarantee that the Services will include a self-service export, bulk download, migration, backup, or data-transfer feature.

The availability, scope, and format of any export feature may depend on:

• the applicable subscription plan
• the type of content
• technical feasibility
• integration limitations
• third-party restrictions
• account status
• payment status
• security considerations
• the Terms of Service

NexoFlow may add, modify, limit, suspend, or discontinue export functionality.

13.2 Customer Responsibility to Maintain Copies

Users are responsible for maintaining their own copies and backups of Customer Materials and any Generated Outputs they wish to preserve.

Users should not rely on NexoFlow as their sole storage, backup, archival, records-management, or disaster-recovery system.

Publishing content through an integration does not guarantee that a separate exportable copy will remain available through NexoFlow.

13.3 Discretionary Account-Content Exports

NexoFlow may, but is not obligated to, provide a manual or automated export of Account Content unless an export is expressly required by:

• applicable law
• the applicable subscription plan
• the Terms of Service
• a separate written agreement signed by NexoFlow

Where NexoFlow voluntarily provides an export:

• NexoFlow may select the format
• the export may contain only reasonably available information
• formatting, metadata, links, media, revisions, or relationships may not be preserved
• NexoFlow does not guarantee compatibility with another service or content-management system
• NexoFlow does not guarantee direct transmission to another provider
• technical or administrative fees may apply where permitted by law
• NexoFlow may require payment of outstanding amounts before processing a non-legally mandated export

13.4 Excluded Materials

An Account Content export does not include, unless expressly required by law or agreed in writing:

• NexoFlow Technology
• source code
• system prompts
• prompt templates
• prompt chains
• proprietary workflows
• automation logic
• models
• model weights
• internal configurations
• embeddings
• vector-database records
• internal analytics
• quality scores
• security information
• audit information
• system logs
• fraud-prevention information
• confidential information
• trade secrets
• information about other customers
• third-party information that cannot lawfully be disclosed
• information whose disclosure would create a security or privacy risk

13.5 Privacy Portability Requests Are Limited to Personal Information

A legal right to access or receive Personal Information in a portable format does not create a right to receive all Account Content.

Privacy rights apply only to Personal Information covered by applicable law and do not automatically apply to:

• ordinary business content
• marketing content
• website articles
• Generated Outputs
• campaign materials
• business analytics
• proprietary NexoFlow information
• content that does not relate to an identifiable individual
• content owned by or licensed from another person

A request for blog posts, website copy, images, videos, campaigns, social media content, or other business materials will ordinarily be treated as an Account Content or contractual request rather than a privacy-rights request.

Nothing in this Section limits a non-waivable right to receive qualifying Personal Information where required by applicable law.

13.6 Account Termination

Access to Account Content may end when:

• a subscription expires
• an account is canceled
• payment is past due
• the account is suspended
• the account is terminated
• an integration is disconnected
• the Services are discontinued

Following termination, NexoFlow may delete or make Account Content inaccessible according to the Terms of Service, applicable retention practices, backup cycles, and legal obligations.

Unless required by law or expressly agreed in writing, NexoFlow has no obligation to:

• preserve Account Content after termination
• restore deleted content
• maintain a canceled account
• provide post-termination migration assistance
• recreate content that is no longer reasonably available

16.1 Submitting a Request

Requests may be submitted by email to [email protected], or by mail to NexoFlow LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States.

Where legally required, additional request methods may be made available through our websites.

16.2 Verification

We may request information reasonably necessary to verify:

• your identity
• your jurisdiction
• your account relationship
• your authority
• the scope of the request
• whether you are acting for another person

We will use verification information only for verification, security, fraud prevention, and legal compliance.

16.3 Authorized Agents

Where permitted by law, an authorized agent may submit a request on your behalf.

We may require proof of the agent's authority and may separately verify your identity or confirm that you authorized the request.

16.4 Appeals

Where applicable law provides an appeal right, you may appeal a denied request by emailing [email protected] with the subject line "Privacy Request Appeal."

16.5 No Discrimination

NexoFlow will not unlawfully discriminate against you for exercising an applicable privacy right.

Different services, features, or prices may be offered where reasonably related to the value of information or otherwise permitted by law.

16.6 Limitations

Privacy rights do not require NexoFlow to disclose:

• trade secrets
• confidential information
• information about other people
• information that would compromise security
• information protected by legal privilege
• information subject to a lawful exception
• NexoFlow Technology
• information NexoFlow is not legally required to provide

17.1 California and Other U.S. States

Depending on applicable law, NexoFlow may collect the following categories of Personal Information:

• identifiers
• customer-record information
• commercial information
• internet or electronic activity
• approximate geolocation
• audio, visual, and similar information
• professional or employment-related information
• inferences
• account credentials
• other sensitive Personal Information submitted by users

We collect these categories from the sources described in Section 3 and use them for the purposes described in Section 4.

We may disclose these categories to:

• service providers
• processors
• contractors
• integration providers
• payment processors
• analytics providers
• advertising providers
• professional advisers
• government authorities
• transaction counterparties
• recipients directed by the user

NexoFlow retains these categories according to the criteria described in Section 12.

Residents of certain U.S. states may have rights to:

• know or access Personal Information
• obtain a copy
• correct inaccuracies
• delete Personal Information
• opt out of targeted advertising
• opt out of certain sales or sharing
• limit certain uses of sensitive Personal Information
• appeal a decision
• receive equal service after exercising a right

The precise rights and exceptions vary by state.

17.2 European Economic Area and United Kingdom

Where applicable, NexoFlow LLC is the controller of Personal Information collected directly through NexoFlow's websites, account administration, billing, support, and business operations.

When NexoFlow processes Personal Information contained in Customer Materials solely on behalf of a business customer, NexoFlow may act as a processor and the business customer may act as the controller.

Individuals in the European Economic Area or United Kingdom may have rights to:

• access
• rectification
• erasure
• restriction
• objection
• portability
• withdrawal of consent
• complaint to a supervisory authority

The right to portability applies only under the conditions established by applicable law and does not create a general right to export all Account Content.

17.3 Switzerland and Other Jurisdictions

Residents of Switzerland, Canada, Australia, and other jurisdictions may have additional rights under applicable privacy laws.

NexoFlow will evaluate requests according to the law that applies to the requester, NexoFlow, and the relevant processing activity.