We collect only what is necessary to operate Nexus CRM, do not sell your information, protect your data, and allow you to revoke Google access or request deletion at any time.

1. Who We Are

Nexus (“we”, “our”, “us”) is a web-based CRM platform designed for real estate businesses to manage leads, listings, clients, transactions, and operations.

This Privacy Policy explains how we collect, use, store, and protect your information when you use Nexus CRM.

• Controller/Operator: Nexus

• Support Email: support@nexuscrm.ae

2. Information We Collect

A. Account & Profile Information

• Name

• Email address

• Phone number

• Business name

• Role within the company

• Profile image & account settings

B. Business & CRM Data

Information you upload or create inside Nexus, such as:

• Listings

• Leads

• Client information

• Tasks & notes

• Uploaded files

• Internal operations data

• CRM configuration settings

C. Usage & Technical Data

Automatically collected logs, including:

• IP address

• Device type

• Browser/version

• Pages visited & actions taken

• Login timestamps

• Error logs & performance data

Used for security, diagnostics, and service improvements.

D. Support Communication

• Emails

• Chat messages

• Support tickets

• Attachments you choose to share

E. Sensitive Data

We do not intentionally collect special categories of personal data (e.g., national ID, financial documents) unless you upload them voluntarily for business use.

3. Google User Data & “Limited Use” Compliance

If you choose to integrate Google Calendar or other Google services, Nexus may request the following OAuth scopes:

• https://www.googleapis.com/auth/calendar (create/read/update events you choose to sync)

• email

• profile

How Google Data Is Used

Only to enable features you explicitly turn on, such as:

• Syncing calendar events

• Linking user identity for login

Limited Use Compliance

Nexus fully complies with the Google API Services User Data Policy, including the Limited Use requirements:

• No advertising

• No data selling

• No human access to Google data unless:

  • You consent

  • Required for security or legal compliance

  • Needed to resolve a specific technical issue

Revoke Access Anytime

You can remove Nexus CRM’s access through your Google Account under:

Google Account → Security → Third-party Access

(Details in Section 9)

4. How We Use Your Information

We use your information to:

1. Provide and operate the Nexus CRM platform

2. Maintain and improve features and performance

3. Secure the service, detect misuse, and monitor suspicious activity

4. Respond to support inquiries and communicate important updates

5. Enable integrations, such as Google Calendar

6. Comply with UAE legal requirements

7. Enforce Terms of Service and prevent abuse

5. Sharing & Processors

Nexus does not sell your personal information.

We may share your information only with:

A. Trusted Service Providers (“Processors”)

For example:

• Cloud hosting/databases

• Email delivery systems

• Analytics & monitoring tools

• Payment processors (if applicable)

Processors may access only the minimum information needed to perform assigned tasks and must follow confidentiality and security obligations.

B. Legal Disclosures

We may disclose data if required by:

• UAE law

• Court/authority orders

• Fraud prevention needs

• Protection of rights, safety, and security

C. Business Transfers

If Nexus is involved in a merger, acquisition, or corporate restructuring, information may be transferred as part of business assets.

6. Data Retention

We retain data for as long as needed to:

• Provide the CRM service

• Fulfill legal and regulatory requirements

• Resolve disputes

• Maintain accurate business records

After retention periods expire, data is safely deleted or anonymized.

7. Security

We implement administrative, technical, and organizational safeguards, including:

• Encryption in transit

• Firewall protection

• Access control and role-based permissions

• Device/session monitoring

• Authentication security

• Threat detection & logging

While we take security seriously, no system can guarantee 100% protection. Users must also safeguard their passwords and devices.

8. Your Rights & Choices

You may:

• Access your personal data

• Update or correct information

• Request data export

• Request deletion (unless restricted by law or compliance obligations)

• Object to certain processing

• Revoke Google access anytime

Submit requests to: support@nexuscrm.ae

9. Revoking Google Access & Data Deletion

How to Revoke Access

1. Go to your Google Account

2. Navigate to Security → Third-party access

3. Select Nexus CRM

4. Click Remove Access

To Delete Synced Google Calendar Data

Email us at: support@nexuscrm.ae

Subject: Delete Google Data

We will delete:

• Google OAuth tokens

• Synced Google Calendar entries stored in Nexus

  (unless retention is required for compliance)

10. Cookies

We use cookies to:

• Keep you logged in

• Save preferences

• Improve performance

• Analyze usage

You may disable cookies in your browser, but some CRM features may stop working correctly.

11. Children’s Privacy

Nexus CRM is not intended for children under 13, or the minimum age required by local law.

We do not knowingly collect children’s information.

If you believe a child’s data was submitted, contact us for removal.

12. International Transfers

Your information may be processed or stored:

• In the UAE

• On servers hosted in other countries

When transferring data internationally, we apply appropriate safeguards required by law.

13. Changes to This Policy

We may update this Privacy Policy periodically.

If changes are significant, we will notify you via:

• Email

• In-app messages

• Dashboard notifications

Continued use of Nexus CRM means you accept the updated policy.

14. Contact Us

For privacy questions, concerns, or data requests:

📧 support@nexuscrm.ae