Privacy Policy
1. Overview
This Privacy Policy describes how NEXUSDESK (“NEXUSDESK,” “we,” “us,” or “our”) collects, uses, shares, and protects information in connection with our website, one-off sessions, subscriptions, and remote IT support services (collectively, the “Services”). By using the Services, you agree to this Policy together with our Terms of Service.
2. Information we collect
2.1 Information you provide
- Contact and account details: name, email address, phone number, company name, billing contact, authorized users for company subscriptions, and similar identifiers you submit when booking, subscribing, paying, or communicating with us.
- Support details: descriptions of technical issues, device types, operating system versions, domain or hosting context you choose to share, screenshots or logs, and session notes created by our technicians in the ordinary course of support (which may reference website or hosting configuration at a high level).
- Live chat details: messages, contact details, technical issue summaries, timestamps, and related chat metadata you choose to share through our website chat widget.
- Payment and subscription information: payments and subscriptions are processed by Stripe. We do not receive your full payment card number or CVV from Stripe in the ordinary course; Stripe provides us with limited transaction metadata (for example, last four digits, brand, expiration, charge status, subscription status, renewal dates, and customer identifiers needed to reconcile payments).
2.2 Information collected automatically
- Website usage data: IP address, browser type, device identifiers, pages viewed, referring URLs, and timestamps, collected through cookies and similar technologies where enabled.
- Diagnostics: basic error or performance data if we deploy analytics or logging tools on our site.
2.3 Remote sessions
During a remote support session, technicians may observe your screen or system configuration as necessary to troubleshoot. For website-related work, we may view configuration visible in your hosting dashboard or CMS with your participation. We instruct personnel to minimize collection of sensitive information and to avoid copying confidential data except where you request or consent, or where necessary to resolve the issue.
3. How we use information
We use information to:
- Provide, schedule, verify company eligibility, and bill for the Services, including fraud prevention and abuse detection.
- Communicate about your session, receipts, and policy updates.
- Improve reliability, training, and quality assurance (using de-identified or aggregated data where feasible).
- Comply with law, enforce our Terms of Service, and protect rights, safety, and security.
4. Legal bases (EEA, UK, and Switzerland)
If applicable privacy laws require a “legal basis,” we rely on one or more of the following: performance of a contract with you; legitimate interests (for example, securing our Services and preventing fraud, balanced against your rights); consent where required; and compliance with legal obligations.
5. How we share information
- Stripe: payment processing, subscription billing, invoices, customer portal features, and related fraud prevention, subject to Stripe’s privacy notice.
- Tawk.to: live chat delivery, chat history, support routing, and related widget functionality, subject to Tawk.to’s privacy terms.
- Service providers: hosting, email delivery, customer relationship tools, remote support software vendors, and IT security vendors who process data on our instructions under contractual safeguards.
- Legal and safety: regulators, courts, or law enforcement when required by law or to protect rights.
- Business transfers: a successor entity in a merger, acquisition, financing, or asset sale, subject to appropriate protections.
We do not sell personal information as “sale” is defined under the California Consumer Privacy Act (CCPA) as amended by the CPRA.
6. Retention
We retain information for as long as needed to provide the Services, meet legal, tax, and accounting obligations, resolve disputes, and enforce agreements. Support logs and billing records may be retained for multiple years where required or reasonably necessary. When retention ends, we delete or de-identify information in accordance with our internal practices.
7. Security
We implement administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure; you use the Services at your own risk within the limits of applicable law.
8. International transfers
We operate primarily from the United States. If you access the Services from other regions, your information may be processed in the United States or other countries where we or our providers operate. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.
9. Your rights and choices
Depending on your location, you may have rights to access, correct, delete, or export personal information; object to or restrict certain processing; withdraw consent where processing is consent-based; and lodge a complaint with a supervisory authority.
To exercise rights, contact support@nexusdesk.worldwidechoices.com. We may verify your request and respond within the timeframe required by law. You may appeal certain denials as provided by applicable regulations.
10. California residents
California residents may request to know, access, and delete personal information, and may not be discriminated against for exercising CCPA/CPRA rights. We honor global privacy control signals where legally required. Authorized agents may submit requests with proof of authorization.
11. Children
The Services are not directed to children under sixteen (16), and we do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will take appropriate steps to delete it.
12. Cookies
We use cookies and similar technologies for essential site operation, preferences, live chat functionality, and analytics where deployed. You can control cookies through browser settings; disabling certain cookies may affect site functionality.
13. Changes to this Policy
We may update this Privacy Policy from time to time. We will post the revised Policy on this page and update the “Last updated” date. Where required, we will provide additional notice.
14. Contact
NEXUSDESK is the data controller for personal information described in this Policy (unless a separate controller agreement applies to enterprise customers).
Privacy inquiries: support@nexusdesk.worldwidechoices.com or Contact.