Privacy Policy

Operator Technologies ("Operator", "we", "us", or "our") operates the Operatorplatform at nexx.ai. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using our service, you agree to the collection and use of information in accordance with this policy. If you are using our service on behalf of a business or organization, you represent that you are authorized to agree to this policy on their behalf.

This policy applies to: (a) business customers who purchase Operator subscriptions; (b) end users who interact with Operator AI instances deployed by our business customers; and (c) visitors to our marketing website.

Account Information: When you create an account, we collect your name, email address, business name, phone number, and billing information.

Business Configuration Data: Information you provide to configure Operator AI — service descriptions, pricing, business hours, staff information, and knowledge base documents.

Conversation Data: Records of conversations between Operator AI and your customers, including chat transcripts, voice call recordings, and transcriptions. This data is owned by you, the business customer.

Lead & Contact Data: Customer information captured during AI conversations — names, email addresses, phone numbers, and inquiry details provided by your customers.

Calendar & Integration Data: When you connect your calendar or other integrations, we receive and process data necessary to provide the integration service (e.g., availability data from Google Calendar).

Usage Data: Information about how you use our platform — pages visited, features used, API calls made, session duration, and error logs.

Technical Data: IP addresses, browser type, device type, operating system, and similar technical identifiers collected automatically when you use our service.

Payment Data: Payment information is collected and processed by our payment processors (Stripe, Razorpay). We do not store full card numbers. We receive and store transaction records and billing history.

We use the information we collect for the following purposes:

• Service Delivery: To provide, operate, and maintain the Operator platform
• AI Operation: To power Operator AI's responses using your knowledge base and configuration
• Booking & Calendar: To check availability, create bookings, and sync with connected calendar services
• Communications: To send account notifications, booking confirmations, and service updates
• Billing: To process payments, generate invoices, and manage subscriptions
• Support: To provide customer support and respond to your inquiries
• Security: To detect, prevent, and investigate fraudulent or unauthorized activity
• Improvement: To analyze usage patterns and improve our platform (using aggregated, anonymized data)
• Legal: To comply with legal obligations and enforce our terms of service

We do not use your conversation data or knowledge base content to train AI models shared with other customers, sell your data to third parties, or use your customer data for our own marketing purposes.

We do not sell your personal information. We share information only in the following circumstances:

Service Providers: We share data with third-party vendors who help us operate the platform: cloud hosting (AWS/Vercel), payment processing (Stripe, Razorpay), AI services (OpenAI), and communication services (Twilio). These providers are contractually required to protect your data.

Agency Relationships: If you are a client account managed by an Agency customer, your business data is accessible to that agency as part of the service agreement.

Legal Requirements: We may disclose information when required by law, legal process, or governmental authority, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction. We will provide notice before your information is subject to a different privacy policy.

With Your Consent: We may share information in other ways if you specifically consent to it.

Your data is stored on secure servers in data centers operated by AWS and Vercel. We implement industry-standard security measures including:

• AES-256 encryption for all data at rest
• TLS 1.3 encryption for all data in transit
• Multi-tenant data isolation at the row level
• Regular security audits and penetration testing
• Automated backups with encrypted storage

For detailed security information, see our Security Trust Center.

We retain your data for as long as your account is active or as needed to provide services. Specifically:

• Account data: Retained while your account is active, plus 30 days after account deletion for recovery purposes
• Conversation data: Retained for the period specified in your plan (90 days for Starter, 1 year for Professional+)
• Billing records: Retained for 7 years as required by financial regulations
• Audit logs: Retained for 12 months minimum
• Backups: Retained for 30 days (Enterprise: 1 year)

When you delete your account, we delete your personal data within 30 days, except where we are legally required to retain certain records.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Erasure: Request deletion of your personal information (right to be forgotten)
• Portability: Request your data in a machine-readable format
• Objection: Object to processing of your data for certain purposes
• Withdrawal: Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@nexx.ai. We will respond within 30 days. For EU/UK residents, we comply with GDPR requirements. For California residents, we comply with CCPA requirements.

We use cookies and similar tracking technologies to provide and improve our service.

Essential Cookies: Required for the service to function. These include authentication session cookies and security tokens. Cannot be disabled.

Analytics Cookies: Help us understand how users interact with our platform. We use aggregated, anonymized data. Can be disabled in your browser settings.

Preference Cookies: Remember your settings and preferences. Can be disabled in browser settings.

The Operator website widget placed on your customers' websites uses a minimal cookie only to maintain conversation session continuity. No cross-site tracking is performed.

Our service is not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child under 16 has provided us with personal information, please contact us at privacy@nexx.ai and we will take steps to delete that information.

Our service is operated globally. Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from your country.

For transfers from the European Economic Area, UK, or Switzerland, we use standard contractual clauses approved by the European Commission. Enterprise customers can request data residency in specific regions.

If you have questions about this Privacy Policy or our privacy practices, contact us at:

We may update this Privacy Policy from time to time. We will notify you of significant changes by email and/or by posting a notice on our website. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.