Privacy Notice

What this notice covers

This notice covers information processed by Nexiwo when you use its website, account workspace, published pages, Smart Links, QR campaigns, lead forms, analytics, integrations, and billing features.

A customer using Nexiwo may collect information from its own visitors and contacts. That customer decides why it needs those records and is responsible for its own privacy notice, consent choices, and communications.

Account and workspace information

Nexiwo processes details needed to create and secure an account, such as name, email address, authentication records, workspace membership, roles, settings, and recent security activity.

A workspace can contain page content, destinations, campaign details, QR assets, custom domains, API-key metadata, product and event records, notes, reminders, and publication history.

Visitor, lead, and journey information

When the relevant feature is enabled, Nexiwo can record visits, link clicks, QR scans, source and campaign parameters, approximate device or browser data, form submissions, consent status, conversations, orders, refunds, and revenue attribution.

Contact reconciliation may use normalized email addresses, phone numbers, browser sessions, and provider identifiers to connect records that appear to belong to the same person. Workspace members can review warnings before merging uncertain matches.

Connected-provider information

Nexiwo requests provider permissions only after an authorized member begins onboarding. The integration view shows requested scopes, connected account details, token or connection health, recent synchronization, and errors when that information is available.

Depending on the connection, imported data can include customers, leads, messages, campaigns, content insights, orders, abandoned checkouts, refunds, and revenue. Providers continue to process information under their own notices and controls.

Billing and payment information

Nexiwo stores the plan and order identifiers, amount, currency, payment status, access period, and refund history needed to manage billing. Payment card, bank, or wallet credentials are entered with the payment provider and are not stored in Nexiwo workspace records.

How information is used

Information is used to operate published pages and redirects, provide workspace features, authenticate users, synchronize authorized services, reconcile customer activity, calculate analytics, process billing, prevent abuse, diagnose failures, and meet legal or security obligations.

Cookies and local storage

Nexiwo uses session and security storage to keep users signed in, protect write requests, remember workspace context, and preserve editor state. Published pages may also use first-party identifiers to connect a visit with a later action when the workspace has enabled measurement.

Workspace owners must configure consent and tracking in a way that fits their audience and applicable law. Blocking optional storage can reduce attribution coverage without preventing basic public-page access.

When information is shared

Information is shared with infrastructure, security, payment, and connected-service providers only as needed to deliver the chosen features. It may also be disclosed when required by law, to protect people or the service, or as part of a business transfer subject to appropriate safeguards.

Nexiwo does not make private workspace records public. Content a workspace deliberately publishes, including page text and destination links, is available to anyone with the public address.

Retention and deletion

Workspace records are kept while the account needs them. Different records can have different retention periods because of backups, payment reconciliation, security investigations, fraud prevention, provider requirements, or legal obligations.

Disconnecting a provider revokes or removes the active connection where supported, but it does not automatically erase records already imported. Workspace owners can edit or remove managed content and request correction or deletion of customer records.

Security

Nexiwo uses role checks, protected sessions, signed webhooks, encrypted transport, restricted server configuration, and audit or connection records where supported. No system is risk free, so workspace owners should use strong account security, limit member access, rotate exposed keys, and disconnect services they no longer use.

Your choices and rights

Account holders can update settings, revoke API keys, disconnect providers, edit published content, and manage workspace access. A person whose details were collected by a Nexiwo customer should first contact that workspace owner because the owner controls the business relationship and purpose of collection.

Depending on applicable law, people may have rights to access, correct, delete, restrict, or object to processing, or receive a portable copy. Requests can require identity verification and may be limited where retention is legally required.

Children

Nexiwo is a business service and is not designed for children to create accounts independently. Workspace owners must not knowingly collect children’s information through Nexiwo without the authorization and protections required by applicable law.

Changes to this notice

The updated date at the top shows the current version. Material changes may also be announced in the product. Region-specific disclosures may supplement this notice where they are required.