Privacy Policy
Last updated: June 14, 2026
Nexa respects user privacy and takes measures to protect the personal information entrusted to it. Use of the site constitutes agreement to this Privacy Policy.
1. What Data We Collect
The site may collect information the user voluntarily provides, including: • name • phone number • email address • property details • photos, videos, and documents • requests, messages, and content uploaded to the site In addition, the site may automatically collect technical data: • IP address • device and browser type • general location • pages viewed • usage times • Cookies • digital identifiers and measurement tools
2. Purposes of Data Use
The data will be used for: • operating the site and services • contacting the user • matching properties, agents, and service providers • transferring leads and inquiries • improving the service and user experience • information security and fraud prevention • analyzing site activity and usage trends
3. Sharing Data with Third Parties
The user acknowledges that their details may be passed on to real estate agents, property owners, service providers, and other professional parties, in accordance with their request or action on the site. In the future, user details may also be passed on to additional professionals operating through the platform. Additionally, data may be shared with the Company's infrastructure and service partners (including Supabase, Vercel, Google) solely to operate the platform and provide the service. The Company does not sell personal data to third parties as a commercial database.
4. Analytics and Advertising Tools
The site uses advertising, analytics, and measurement tools, including: • Google Analytics • Google Ads • Meta / Facebook Pixel • TikTok Pixel • Hotjar • other measurement and advertising tools These tools may collect anonymous or technical information to improve the site, tailor advertising, and measure performance.
5. Cookies
The site uses Cookies and similar technologies. You can change your browser settings and block Cookies, but some site services may not function properly.
6. Data Retention
Information is retained for as long as necessary to operate the site, provide services, handle inquiries, comply with legal requirements, and protect the Company's rights.
7. Mailings and Messages
The site itself does not send marketing mailings, SMS, or WhatsApp. However, real estate agents and service providers using the platform may contact the user or send them messages in their own name after the user has left their details.
8. Data Security
The Company takes reasonable and accepted measures to protect information, including encryption in transit (TLS) and secure storage (AES-256). OAuth tokens are stored encrypted. Nevertheless, absolute protection against intrusion, faults, or unauthorized use cannot be guaranteed.
9. Minimum Age
Use of the site is permitted only to those aged 18 and above.
10. User Rights
The user may contact the Company to request access to information retained about them, its update, or its deletion, subject to legal provisions. Contact: info@nexa.co.il.
11. Google Calendar Integration
Nexa uses the Google Calendar API to sync realtor appointments (viewings, photoshoots, client meetings) with the user's personal Google Calendar. The integration requests two scopes: https://www.googleapis.com/auth/calendar.events (to create/update/delete appointment events) and https://www.googleapis.com/auth/calendar.freebusy (to check whether a selected time slot is available before creating an appointment).
12. What Google Data We Access
When connecting Google Calendar, Nexa receives and stores: OAuth access and refresh tokens, the user's calendar ID, and the Google account email. We do NOT read the contents of existing events in the calendar. Via the calendar.freebusy scope we receive only time-slot availability information (no event details). Via the calendar.events scope we create, update, and delete only events that were created through Nexa.
13. How We Use Google Data
The granted access is used solely to: (a) check availability of a time slot in the calendar before scheduling an appointment (calendar.freebusy), (b) create events in the user's calendar when scheduling an appointment in Nexa CRM, (c) update events when appointments are modified, (d) delete events when appointments are cancelled. Google Calendar data is not used for advertising, not sold, not transferred to third parties, and not used to train AI models.
14. Limited Use Disclosure
Nexa's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Learn more: https://developers.google.com/terms/api-services-user-data-policy
15. Storage and Deletion of Google Data
OAuth tokens are stored in a secure Supabase database in encrypted form for as long as the user has not revoked access. You can disconnect the integration at any time in your Nexa account (Settings → Calendar → Disconnect) — this immediately deletes all stored tokens. Additionally, you can revoke access in Google settings: https://myaccount.google.com/permissions
16. WhatsApp Business Platform Integration
When a real estate agent connects their WhatsApp Business number to Nexa via the "Connect WhatsApp" feature, Nexa gains access to their business account's messages through Meta's official WhatsApp Business Platform API. We request the whatsapp_business_messaging and whatsapp_business_management permissions. What data we receive and store: • inbound and outbound messages (text, images, documents, voice notes) • metadata: timestamps, delivery status, message identifiers • the phone number of the client who messaged the agent • the agent's WABA ID and Phone Number ID, and OAuth access tokens (stored encrypted) How we use this data: • displaying the agent's conversations in their own private Nexa account • matching messages to the client's CRM record • transcribing voice notes via Whisper • automating CRM tasks (creating events, reminders) • replying on the agent's behalf using a pre-approved template after a prolonged non-response (only with the agent's explicit consent) What we do NOT do: • we do not share message content with third parties • we do not use message content to train general AI models • we do not send marketing messages on the agent's behalf without their explicit action • we do not show conversations to other agents, agencies, or Nexa administrators, except where required by law Storage and deletion: Messages are stored in a secure Supabase database for the duration of the active integration. The agent can disconnect the integration at any time (Settings → WhatsApp → Disconnect), which immediately deletes the OAuth tokens and archives the conversations. Full deletion at the request of a client is performed through an automated endpoint within 30 days of the request; the request status can be tracked on the data-deletion-status page. Compliance with Meta policies: Nexa's use of the WhatsApp Business Platform complies with the WhatsApp Business Solution Terms and the WhatsApp Business Platform Policy.
17. Changes to the Policy
The Company may update this Policy from time to time.
18. Contact
Address: Yitzhak Nafha 25 Phone: 052-300-6363 Email: info@nexa.co.il