LEGAL

Privacy Policy

Last updated: 22 October 2026

1. Introduction

This Privacy Policy explains how Nexcrest IT LLP (“NexCrest,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you use the Nexera CRM product, websites, applications, and related services (the “Service”).

By using the Service, you acknowledge this Privacy Policy. If you do not agree, please do not use the Service.

2. Who we are

NexCrest provides a cloud-based CRM (Customer Relationship Management) subscription for organizations to manage leads, contacts, follow-ups, sales activities, and related CRM workflows.

  • Controller / business contact: Nexcrest IT LLP
  • Email: info@nexcrestit.com
  • Phone: +91 80759 59947
  • Address: 1st Floor, Grand Plaza Building, Prabhath Junction, Kannur, Kerala 670001

For CRM subscription payments, Paddle acts as Merchant of Record and processes buyer payment data under its own privacy policy.

3. Information we collect

3.1 Information you provide

  • Account and profile details (name, email, password or authentication data, organization name)
  • Billing and CRM subscription details needed to manage your plan (billing contact, company details; payment card data is handled by Paddle)
  • CRM content and records you or your users enter into the Service (Customer Data), which may include personal data about your own leads, contacts, customers, or other people you store in the CRM
  • Support communications and feedback

3.2 Information collected automatically

  • Log and usage data (IP address, device/browser type, pages viewed, feature usage, timestamps)
  • Cookies and similar technologies used for authentication, preferences, security, and analytics
  • Diagnostic and performance information related to errors and reliability

3.3 Information from third parties

  • Payment and subscription status from Paddle
  • Optional integrations you enable (for example email, messaging, advertising, or identity providers), subject to those providers’ policies

4. How we use information

We use personal information to:

  • Provide, operate, secure, and improve the Service
  • Create and manage accounts, tenants, seats, and CRM subscriptions
  • Process subscription transactions and send billing-related notices (often via Paddle)
  • Provide customer support
  • Communicate product updates, security notices, and (where permitted) marketing messages
  • Detect, prevent, and investigate fraud, abuse, and security incidents
  • Comply with legal obligations and enforce our Terms of Service

If you are in a region that requires a legal basis for processing (such as the EEA/UK), we typically rely on:

  • Contract: to provide the Service you requested
  • Legitimate interests: to secure, improve, and administer the Service
  • Consent: where required (for example certain cookies or marketing)
  • Legal obligation: where we must retain or disclose information by law

6. Customer Data and roles

When your organization uses Nexera CRM, you (the customer) generally control Customer Data uploaded into your CRM tenant. In that case:

  • You act as the data controller (or equivalent) for Customer Data
  • We act as a data processor / service provider processing Customer Data on your instructions to provide the Service

You are responsible for ensuring you have a lawful basis to collect and process personal data within your tenant, and for responding to requests from individuals whose data you control.

7. How we share information

We may share personal information with:

  • Service providers who help us host, operate, support, or analyze the Service (under contractual confidentiality and security obligations)
  • Paddle, for payment processing and tax compliance
  • Professional advisors (legal, accounting) when needed
  • Authorities, when required by law, court order, or to protect rights, safety, and security
  • A successor entity in connection with a merger, acquisition, or asset sale

We do not sell personal information for money. We do not share Customer Data with unrelated third parties for their own marketing.

8. International transfers

We may process and store information in countries other than where you live. Where required, we use appropriate safeguards for cross-border transfers (for example contractual protections).

9. Retention

We retain personal information only as long as needed for the purposes described in this Policy, including:

  • While your account is active
  • For billing, accounting, dispute, and legal compliance periods
  • For backup and security retention windows

When Customer Data is no longer needed, or after account closure according to our operational practices, we delete or anonymize it unless law requires longer retention.

10. Security

We implement administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

You are responsible for protecting account credentials and configuring user access within your organization.

11. Cookies

We use cookies and similar technologies for:

  • Essential session and authentication functions
  • Remembering preferences
  • Security and abuse prevention
  • Analytics and product improvement (where enabled)

You can control cookies through your browser settings. Disabling essential cookies may break parts of the Service.

12. Your rights

Depending on your location, you may have rights to:

  • Access personal information we hold about you
  • Correct inaccurate information
  • Delete information
  • Restrict or object to certain processing
  • Data portability
  • Withdraw consent where processing is based on consent

To exercise these rights for account information we control, contact us at the email below. For Customer Data stored in a tenant, contact the organization that administers that tenant first; we may need to redirect your request to them.

You may also have the right to lodge a complaint with a data protection authority.

13. Children’s privacy

The Service is intended for business and organizational use and is not directed to children under 16 (or the age required in your jurisdiction). We do not knowingly collect personal information from children for our own purposes.

14. Third-party links and integrations

The Service may link to or integrate with third-party sites and services. Their privacy practices are governed by their own policies. We encourage you to review those policies before using those services.

15. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. Where required by law, we will provide additional notice.

16. Contact

For privacy questions or requests: