Privacy Policy

01Summary at a glance

This summary is provided for convenience only. The detailed sections below control.

• Who we are. NexliOne LLC, a US limited liability company, headquartered in the United States.
• What we collect on this website. Information you give us through forms (name, email, company, message), automatic technical information (IP address, browser, pages viewed), and a single first-party preference cookie.
• What we don't do. We do not sell or rent personal information. We do not share personal information with advertising networks. We do not knowingly collect information from children under 16. We do not use cookies, pixels, or SDKs for cross-context behavioral advertising.
• How long we keep it. Contact-form submissions are retained for as long as the conversation is active and for a reasonable period afterward, typically up to 24 months for record-keeping. Server access logs are retained for up to 90 days.
• Your choices. You can email support@nexlione.com at any time to access, correct, or delete information we hold about you, opt out of marketing, or exercise rights under applicable US state privacy laws.
• Where to reach us. NexliOne LLC, United States · support@nexlione.com.

02Scope of this policy

This policy applies to personal information we collect from or about:

• Visitors to nexlione.com and any related subdomains other than app.nexlione.com;
• People who fill out forms on our website, including contact, demo-request, partner-application, and careers-application forms;
• Recipients of our marketing communications;
• Job applicants who submit information through our careers channels;
• Representatives of prospective and current business customers who interact with our sales, marketing, or support teams.

It does not apply to:

• Personal information that NexliOne processes on behalf of an enterprise customer through the platform at app.nexlione.com. That information is processed under the customer's instructions per the customer's subscription agreement and Data Processing Addendum. If you are an end user of a NexliOne customer, please refer to that customer's privacy notice and contact your administrator for any rights requests.
• Information about NexliOne employees or contractors, which is governed by separate internal notices.
• Anonymized, aggregated, or de-identified information that cannot reasonably be linked to an individual.

03Information we collect

3.1 Information you provide directly

When you interact with us, you may give us:

• Identity and contact information — name, business email address, business phone number (optional), company name, job title, and country.
• Inquiry content — the substance of any message, demo request, support question, partner application, careers application, or other communication you send us.
• Account information — if you sign up for a trial of the platform, the registration information you submit (covered in greater detail by the platform-side notice and your subscription agreement).
• Marketing preferences — your choices for newsletters, product announcements, and similar communications.
• Application materials — for job applicants, your résumé, cover letter, work history, references, and any other information you submit.
• Correspondence — any email, chat, call notes, or other records of communications between you and NexliOne.

3.2 Information collected automatically

When you visit the website, we and our service providers automatically collect:

• Device and connection data — IP address, approximate geographic region derived from IP, browser type and version, operating system, device type, screen size, language preference, and time-zone offset.
• Usage data — pages and resources requested, referring URL, links clicked, time spent on pages, and the date and time of each request.
• Server logs — standard web-server logs containing the items above for security, debugging, and abuse prevention.
• Cookies and local storage — see Cookie Policy and Section 6 below.

3.3 Information from third parties

We may receive information about you from:

• Business-data providers — public business directories, professional networking sites, and similar sources we use for sales prospecting at the company level.
• Referrals — partners, advisors, or existing customers who introduce you to us.
• Public sources — your employer's public website, conference attendee lists you have made public, or other publicly available information.
• Service providers — vendors that help us deliver the website (for example, our hosting and email-delivery providers may surface technical metadata about message delivery).

3.4 Sensitive personal information

We do not seek or knowingly collect "sensitive personal information" as defined under California or other US state privacy laws (such as Social Security number, driver's license number, precise geolocation, racial or ethnic origin, religious beliefs, union membership, health information, biometric identifiers, or sexual orientation) through the website. If you voluntarily include such information in a free-text field, we will treat it consistently with this policy and the security safeguards described in Section 8, but we ask that you not submit sensitive personal information through public web forms.

04How we use information

We use information we collect for the following business and commercial purposes:

4.1 Operating the website

• To deliver the pages and resources you request;
• To diagnose technical problems, prevent fraud and abuse, and maintain the security and integrity of the website;
• To remember your preferences (for example, your cookie choice).

4.2 Communicating with you

• To respond to inquiries, demo requests, partner applications, support questions, and other messages;
• To schedule, conduct, and follow up on sales and product conversations;
• To send transactional and service messages such as confirmations and customer-support updates;
• With your permission where required, to send marketing communications about NexliOne products, features, events, and educational content. You can unsubscribe at any time using the link in any marketing email or by emailing support@nexlione.com.

4.3 Improving our products and the website

• To analyze usage patterns and identify improvements;
• To research, design, and develop new features and offerings;
• To measure the effectiveness of marketing campaigns and content.

4.4 Recruiting

• To evaluate job applications and conduct interviews;
• To communicate with applicants about open roles;
• To maintain a record of applicants for compliance with employment-related laws.

4.5 Legal, compliance, and protection

• To comply with applicable laws, regulations, court orders, subpoenas, and other valid legal process;
• To enforce our Terms of Service and other agreements;
• To protect the rights, safety, and property of NexliOne, our customers, our employees, and the public, including investigating and preventing fraud, security incidents, and unauthorized activity;
• To establish, exercise, or defend legal claims.

4.6 Business transactions

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, we may transfer information as part of that transaction, subject to customary confidentiality protections.

05How we share information

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising. We do not rent contact lists. We disclose personal information only as described below.

5.1 Service providers and processors

We use a small number of vendors to operate the website. We share with each only the information needed to perform the function we have engaged them for, under contracts that require them to protect the information and use it only for our purposes. Our current website-side service providers include:

Provider	Purpose	Categories shared	Location
Vercel Inc.	Website hosting, content delivery, edge functions, server logs	Identifiers, internet activity, content of inquiries	United States
Resend (Resend, Inc.)	Transactional and inquiry email delivery	Identifiers, contact information, content of inquiries	United States
Google LLC (Fonts)	Web-font delivery to your browser	Internet activity (IP address, user agent) when fetching font files	United States
Google LLC (Analytics)	Aggregate website analytics; only loaded if you accept analytics cookies in our banner	Pseudonymous identifiers, internet activity, approximate geography	United States

We may add or change service providers from time to time; we will update this section when we do.

5.2 Professional advisors

We may share information with our auditors, accountants, lawyers, insurers, and similar advisors as needed for them to provide their services to NexliOne, subject to professional confidentiality obligations.

5.3 Legal and safety

We may disclose information when we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, or legal process; (b) respond to lawful requests from public authorities, including for national-security or law-enforcement purposes; (c) enforce our agreements; (d) detect, prevent, or address fraud, security, or technical issues; or (e) protect the rights, property, or safety of NexliOne, our customers, our employees, or the public.

5.4 With your direction

We share information with third parties when you direct us to do so, for example by asking us to introduce you to a partner or share a case study.

5.5 Business transactions

As described in Section 4.6, information may transfer in a merger, acquisition, or similar transaction.

06Cookies and similar technologies

We use a single first-party preference entry stored in your browser's local storage (nexlione-cookie-consent) to remember whether you have accepted analytics cookies. If you accept, we may load Google Analytics 4, which sets its own cookies for measurement purposes. We do not use marketing or advertising cookies, web beacons, pixels, fingerprinting, or session-replay technologies on the website.

For full details — including the names, purposes, and retention of each cookie, plus instructions for managing cookies in your browser — see our Cookie Policy.

07Data retention

We retain personal information for as long as we have a legitimate need to do so, then delete or de-identify it. The following table describes our typical retention practices for website-side data. Where law requires longer retention (for example, for tax, accounting, or employment compliance), we retain the information for the longer required period.

Category	Typical retention
Contact-form and demo-request submissions	Up to 24 months after the last interaction, then deletion or de-identification.
Marketing-list email addresses	Until you unsubscribe; suppression list retained indefinitely so we can honor your unsubscribe.
Job-application materials	Up to 24 months after a hiring decision, unless you ask us to retain them longer for future opportunities or applicable law requires longer.
Server access logs	Up to 90 days.
Account / trial registration data	For the duration of the account plus the period required by your subscription agreement; backups may persist for an additional period.
Records required for tax, accounting, audit, or legal hold	For the period required by applicable law (typically 7 years), regardless of the categories above.

08Information security

We use a combination of administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include encryption in transit using TLS 1.2 or higher, encryption at rest where supported by our service providers, role-based access controls, audit logging, security headers (Content Security Policy, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy), least-privilege administrative practices, and routine review of vendor security postures.

No internet transmission, email service, or storage system is perfectly secure. While we work to protect your information, we cannot guarantee its absolute security, and we cannot promise that information about you will not be accessed, disclosed, altered, or destroyed by breach of any of our safeguards. You are responsible for safeguarding any credentials we issue you.

If we become aware of a breach affecting your personal information, we will notify you and the appropriate authorities to the extent required by applicable law.

09Your choices and general rights

9.1 Access, correction, and deletion

Subject to applicable law, you may request that we (a) confirm whether we hold personal information about you, (b) provide you with a copy, (c) correct inaccurate information, or (d) delete information we hold. To make a request, email support@nexlione.com from the address you used to communicate with us, or include enough detail for us to verify your identity. We will respond within the time frame required by applicable law.

9.2 Marketing opt-out

You can opt out of marketing emails by clicking the unsubscribe link in any marketing message or by emailing support@nexlione.com. Even after you opt out of marketing, we may still send you transactional, service, or security messages relating to your account or inquiry.

9.3 Cookie choices

See the Cookie Policy for details on managing your cookie preferences.

9.4 Authorized agents

Where applicable law allows, you may use an authorized agent to submit a request on your behalf. We will require the agent to provide proof of authorization (such as a written, signed permission from you), and we may still need to verify your identity directly before responding.

9.5 Appeals

If we deny your privacy request in whole or in part, you may appeal by replying to our denial within 30 days, and we will review and respond to the appeal within the time frame required by your state's law. If you are not satisfied with the appeal outcome, you may contact your state attorney general (see Section 11 for state-specific contact pointers).

10California residents (CCPA / CPRA)

This section supplements the rest of the policy and applies if you are a California resident as defined under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act ("CCPA").

10.1 Categories of personal information collected

In the past twelve (12) months we have collected the following categories of personal information from website visitors and inquirers:

• Identifiers — name, email, phone number, IP address, online identifiers.
• Customer-records information (Cal. Civ. Code § 1798.80(e)) — name, business address, telephone number, employer.
• Commercial information — interest expressed in our products and services.
• Internet or other electronic network activity — browsing history on our website, interaction with our website and emails.
• Geolocation — approximate, derived from IP address (city/region level only; not precise).
• Professional or employment-related information — job title, company, work history (for sales prospects and job applicants).
• Inferences — inferences drawn from the above to characterize your interest in our products.

10.2 Sources, purposes, and disclosures

We collect these categories from the sources described in Section 3 and use them for the business purposes described in Section 4. We disclose these categories to the service providers and other recipients listed in Section 5.

10.3 Sale or sharing of personal information

We do not sell personal information for money, and we do not share personal information for cross-context behavioral advertising as those terms are defined under the CCPA. In the past twelve (12) months we have not sold or shared the personal information of any consumer, including any consumer under 16.

10.4 Sensitive personal information

We do not knowingly collect sensitive personal information through the website (see Section 3.4). To the limited extent we receive any sensitive personal information through inquiry free-text fields or job applications, we use it only for the purposes for which it was provided and not for purposes that would trigger the right to limit under the CCPA.

10.5 Your CCPA rights

Subject to certain exceptions, California residents have the right to:

• Know the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes of collection, and the categories of recipients.
• Delete personal information we have collected from you.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information (we do not engage in either).
• Limit the use of sensitive personal information (we do not use sensitive personal information for purposes that trigger the right to limit).
• Non-discrimination — we will not deny goods or services, charge different prices, or provide a different level of quality because you exercised any of these rights.

10.6 How to exercise your rights

Email support@nexlione.com with the subject line "California Privacy Request" and describe the right you wish to exercise. We will verify your identity by matching the information you provide against information we already hold. We will respond within 45 days, with one 45-day extension permitted by law where reasonably necessary.

10.7 Authorized agents

You may use an authorized agent. The agent must provide written, signed permission from you, and we may still verify your identity directly. If the agent is acting under a power of attorney, we will accept the power of attorney as authorization.

10.8 Notice of financial incentive

We do not offer financial incentives or price differences in exchange for personal information.

10.9 Shine the Light

California Civil Code § 1798.83 permits California residents to request a notice describing the categories of personal information we have shared with third parties for those third parties' direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.

11Other US state residents

If you are a resident of Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia (and any other state with a comprehensive privacy law in effect at the time of your request), you have privacy rights under your state's law. We grant the following rights to all residents of these states, whether or not the law currently requires it:

• Right to confirm and access personal information we process about you.
• Right to correct inaccurate personal information.
• Right to delete personal information we hold about you.
• Right to obtain a copy of personal information you provided to us, in a portable format where technically feasible.
• Right to opt out of (a) targeted advertising, (b) the sale of personal information, and (c) profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in any of these activities through the website.
• Right to appeal our denial of a request, as described in Section 9.5. If we deny your appeal, you may contact your state attorney general.

11.1 How to exercise your rights

Email support@nexlione.com with the subject line "[Your State] Privacy Request" (for example, "Virginia Privacy Request"). We will verify your identity, respond within the time period required by your state's law (typically 45 days, with one 45-day extension where allowed), and provide you with the response in a portable, readily usable format where required.

11.2 Sensitive data

Where your state's law requires us to obtain consent before processing sensitive personal data, we will only process such data with your consent or as otherwise permitted by law. As described in Section 3.4, we do not knowingly collect sensitive personal data through the website.

12Children's privacy

The website is intended for businesses and adult professionals. We do not knowingly collect personal information from children under 16. If you are under 16, please do not submit any information through the website. If you believe a child under 16 has provided us with personal information, contact support@nexlione.com and we will delete it as required by the Children's Online Privacy Protection Act and applicable state law.

13Do Not Track and Global Privacy Control

Most modern browsers offer a "Do Not Track" (DNT) setting and a Global Privacy Control (GPC) signal. Because there is no industry-wide standard for honoring DNT, we do not currently respond to DNT signals. We do honor GPC signals as a valid opt-out of any sale or sharing of personal information for residents of states whose laws require us to honor GPC.

14Automated decision-making

We do not use the website to make decisions about you that produce legal or similarly significant effects through solely automated means. The platform at app.nexlione.com may include features that use automation or machine learning to assist customers' workflows; any use of such features for decisions about your customer's end users is governed by the customer's subscription agreement, Data Processing Addendum, and the customer's own privacy notice — not this policy.

15Visitors outside the United States

NexliOne is a US-based company, and the website is operated from and intended for users in the United States. We do not actively market to or seek business from individuals located outside the United States. If you choose to access the website or otherwise communicate with us from outside the United States, you understand and agree that any information you provide will be transferred to, stored in, and processed in the United States, where data-protection laws may differ from those in your jurisdiction.

16Third-party links and services

The website may contain links to third-party websites, services, applications, or content that are not operated by NexliOne. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy notices before providing them with information.

17Changes to this policy

We may update this Privacy Policy from time to time. The "Effective" and "Last updated" dates at the top of this page reflect the latest version. If we make material changes, we will provide notice that is appropriate to the change — for example, by posting a banner on the website, by sending an email to addresses we hold for the affected individuals, or by other reasonable means. Your continued use of the website after the effective date constitutes acceptance of the revised policy.

18Contact us

For questions about this Privacy Policy, to exercise any of the rights described above, or to submit a privacy complaint, contact:

NexliOne LLC
United States
Email: support@nexlione.com

If you are dissatisfied with our response to a privacy concern, you may contact your state attorney general or other applicable supervisory authority.

This Privacy Policy is provided as a description of our practices and is not legal advice. References to specific statutes are for convenience only and may not capture every nuance of those laws. If a provision of this policy conflicts with mandatory law, the law controls.