Information collected
Data Nexcorum may collect
The information collected will depend on how the user uses the platform, the integrations connected, the subscribed plan, support requests, and the features used.
- Account data
- We may collect name, email address, user identifiers, authentication information, account status, subscribed plan, role, language preferences, and data required to manage access to Nexcorum.
- Integration data
- When the user connects external services, Nexcorum may process data required to operate those integrations, such as identifiers, OAuth permissions, metadata, emails, events, rows, channels, messages, calendars, webhooks, or related settings.
- Automation data
- We may process automation configurations, triggers, actions, payloads, results, execution status, errors, technical logs, and metadata required to execute, audit, and improve the service.
- Payment and subscription data
- We may process information related to plans, subscription status, customer identifiers, billing, payments, cancellations, and data received from payment providers. Nexcorum does not directly store full card details when payment is processed by third parties.
- Technical and security data
- We may collect IP address, session identifiers, access logs, browser, device, security events, errors, account activity, and other technical information required to protect the platform and prevent abuse.
- Support and communication data
- When the user contacts Nexcorum, we may process the content of their requests, email address, account information, and data required to respond to inquiries, resolve incidents, or handle claims.
Data from integrations
Information processed through connected applications
This explanatory section complements the existing privacy information. It describes how application connections take part in work requested by the user.
Google Workspace
Google Workspace uses five current permissions for Gmail, Sheets, Calendar and specific or discoverable Drive resources. The user can disconnect the account and withdraw access.
How Google Workspace is usedMicrosoft 365
Outlook email sending and Microsoft 365 files are separate connections. One does not silently activate the other.
How Microsoft 365 is usedGoogle Workspace API data and Limited Use
Depending on the features activated by the user, Nexcorum may process Gmail message content and metadata, Google Drive file metadata or content, Google Sheets spreadsheet data, and Google Calendar event information.
Google Workspace API user data is accessed and processed only to provide the specific Nexcorum functionality requested, configured, or initiated by the user.
When a user explicitly enables or invokes an AI-powered Nexcorum feature, the minimum Google Workspace data necessary to perform that requested function may be transmitted to OpenAI, acting as an AI processing service provider, solely to generate the requested output or perform the requested automation. Nexcorum does not transfer Google Workspace data to OpenAI or any other AI service provider for generalized model training.
Nexcorum does not use raw, aggregated, anonymized, or derived Google Workspace API user data to create, train, retrain, fine-tune, or improve foundational or generalized artificial intelligence or machine-learning models.
Google Workspace API user data is not sold or used for advertising, advertising personalization, unrelated profiling, generalized analytics, unrelated research, or generalized product or model improvement.
The general analytics, service improvement, product development, performance optimization, and similar purposes described elsewhere in this Policy do not apply to Google Workspace API user data. Such data is used only to provide or improve the specific user-facing functionality requested or configured by the user, in accordance with Limited Use.
Limited portions of Google Workspace data may be retained in automation execution history when necessary to display results, diagnose errors, or provide the requested functionality. The retention and deletion terms below continue to apply to that historical data.
OAuth credentials are stored encrypted. When the user disconnects the Google integration, Nexcorum deletes locally stored OAuth credentials and associated authorized resources, disables dependent Google automations, clears related temporary state, and attempts to revoke the authorization with Google. Disconnecting Google does not change the separate retention terms that apply to historical automation execution data.
Nexcorum’s use and transfer of raw or derived user data received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Read the Google API Services User Data PolicyPurposes
How we use information
Nexcorum uses information to provide, protect, manage, support and improve the service, meet legal obligations and carry out the advertising measurement described below, subject to applicable consent requirements.
- 01Create, manage, verify, and protect user accounts.
- 02Execute automations, process triggers, complete actions, and maintain connected integrations.
- 03Manage plans, subscriptions, payments, cancellations, billing, and related communications.
- 04Provide support, respond to requests, diagnose errors, and resolve technical incidents.
- 05Maintain security, audit, fraud prevention, abuse control, and compliance records.
- 06Improve the stability, performance, user experience, and overall quality of the platform.
- 07Comply with legal obligations, respond to valid requests from competent authorities, and defend the rights of Nexcorum, users, or third parties.
Security
Information protection measures
Nexcorum will apply reasonable technical, administrative, and organizational measures to protect information processed through the platform, considering the nature of the service, foreseeable risks, available resources, and the state of technology.
However, no internet-connected technology system can guarantee absolute security. The user must also protect their accounts, credentials, permissions, devices, and connected integrations.
- Use of authentication, access controls, permissions, logs, and technical protection measures.
- Protection of credentials, tokens, configurations, and sensitive information according to the purpose of the service.
- Monitoring, technical records, and prevention measures against unauthorized access, abuse, or fraud.
- Backups and operational continuity mechanisms where technically applicable.
- Corrective or preventive measures in response to incidents, risks, vulnerabilities, or legal requirements.
Retention and deletion
Data retention and deletion
Nexcorum retains personal data and integration-related information only for as long as necessary to provide the service, execute user-configured automations, maintain security and audit records, comply with legal obligations, and resolve disputes.
Retention periods may vary depending on the type of data and service configuration. Users may disconnect integrations and may request deletion of their personal data where legally applicable.
Data that is no longer required for these purposes is deleted or anonymized in accordance with Nexcorum’s applicable retention procedures.
Data subject rights
Rights over personal data
In accordance with applicable regulations, data subjects may request the exercise of rights related to their information. Nexcorum will handle requests according to the law, verifying identity and legitimacy where applicable.
- Request access to personal data processed by Nexcorum.
- Request rectification or update of inaccurate, incomplete, or outdated data.
- Request deletion of data where legally applicable and subject to applicable retention obligations.
- Object to or request restriction of processing where legally applicable.
- Request data portability where technically possible and legally applicable.
Advertising measurement
Google Ads: confirmed registrations and purchases
Nexcorum uses Google Ads to measure confirmed email registrations and completed purchases, attribute them to advertising campaigns when technically possible, and assess campaign effectiveness. This measurement is separate from the information needed to operate your account.
Registration events send a conversion destination, a random event identifier for deduplication and limited site addresses. Purchase events send a transaction identifier and, when available in USD, the value and currency. These events contain no names, email addresses, passwords, authentication tokens, card details or Google Workspace API data. Technical identifiers may be personal data; they are not necessarily anonymous.
When consent permits, Google's tag may read or write advertising cookies, including _gcl_* cookies, and use available ad-click identifiers such as gclid. Google may receive IP addresses, browser and device information, and timestamps. Processing depends on consent, browser restrictions and Google's tag behavior; attribution is not guaranteed.
Advertising storage and advertising data use are denied by default. The optional, initially unchecked advertising checkbox is separate from accepting the Terms and Privacy Policy. A successful email registration applies the choice: checked means granted; unchecked means denied. Google sign-in does not apply this choice. Personalized advertising and analytics storage remain denied. Refusal does not prevent registration or change your subscription.
The global Google tag loads with denied consent. Under Consent Mode, Google may receive limited signals without advertising cookies even when consent is denied. Nexcorum additionally blocks its confirmed-registration event until advertising storage and advertising data use are granted.
Google receives measurement data under its applicable privacy and business-data terms, potentially outside your country. The links below explain Google's purposes, processing, retention and safeguards. Cookie lifetimes depend on Google's configuration and your browser. Nexcorum stores the choice, policy version and date locally in this browser until withdrawal, deletion of site data or a new consent version; this record contains no account data.
Withdraw consent at any time with the button below or the same control in Settings. Withdrawal immediately communicates denied consent and saves it for this browser; choices are restored on later visits and synchronized between open tabs on this site. Withdrawal affects future processing; it does not undo earlier transmissions or automatically delete Google's data. You may also clear advertising cookies and contact privacy@nexcorum.com to exercise applicable rights. Other browsers and devices have separate choices.
Advertising measurement consent is denied in this browser.
Contact
Privacy inquiries and requests
The user or data subject may contact Nexcorum to exercise rights, ask questions about privacy, request information about data processing, or report an incident related to their information.
Contact email: privacy@nexcorum.com