Privacy Policy — Buyer Nexus

Buyer Nexus (“we”, “our”, or “us”) provides a SaaS CRM platform that helps businesses manage customer relationships, communications and workflows. This Privacy Policy explains how we collect, use, disclose, retain and protect personal data, including data processed via the WhatsApp Business Platform (Meta).

By using Buyer Nexus you agree to the practices described in this Privacy Policy. If you do not agree, do not use the service.

1. Information We Collect

We collect the following categories of information:

a. Business & Account Data

• Contact and account information: name, business email, phone number, company name, billing information and identifiers.
• Login credentials, authentication data and role information.

b. Customer Data (via CRM & WhatsApp APIs)

• End-user phone numbers and contact records.
• Messages and media shared through the WhatsApp Business Platform (message text, images, attachments), and message metadata (timestamps, delivery/read receipts).
• Conversation context and CRM notes created by your users.

c. Technical Data

• Device and browser information, IP addresses, cookies, session logs and API usage logs.
• Error and diagnostic logs used for support and platform reliability.

d. Optional Data

• Support requests, survey responses and optional profile fields provided by account administrators.

2. How We Use Information

We use collected data to:

• Provide and operate the Buyer Nexus platform and related features.
• Send and receive messages via the WhatsApp Business Platform on behalf of our customers.
• Manage subscriptions, billing, and customer support.
• Improve product performance, security and user experience.
• Comply with legal obligations and enforce our Terms of Service.

3. WhatsApp Business Platform Data Handling

When you connect a WhatsApp Business number to Buyer Nexus, the following applies:

• Role: You, the customer, are the Data Controller for end-user communications; Buyer Nexus acts as the Data Processor for Platform Data processed to provide the service.
• Scope: Platform Data may include phone numbers, message content, media and message metadata. We process Platform Data only to deliver the CRM and messaging functionalities you have requested.
• Data minimization: We collect and retain only the minimum Platform Data necessary to provide the services and to comply with legal obligations.
• No sale of data: We do not sell WhatsApp Platform Data or use it for third-party advertising.
• Sub-processors: We may engage subprocessors (hosting, analytics, backups) limited to performing services on our behalf — see our Sub-Processor list (Annex A).
• Retention: Messages and related metadata are retained only as required for CRM functionality, troubleshooting, dispute resolution, billing or as required by law. (See section “Data Retention” below.)
• Opt-outs & preferences: End users may opt out of marketing or non-essential messages per the account administrator’s configured messaging rules. Compliance with WhatsApp opt-in rules is the responsibility of the account administrator (Controller).

4. Data Sharing & Disclosure

We disclose personal information only as described below or when authorized by you:

• WhatsApp / Meta: To deliver WhatsApp Business Platform services and for logging/delivery tracking.
• Service providers / subprocessors: Hosting, database, analytics, billing and support providers who act only on our instructions (Annex A).
• Legal obligations: When required by law, court order, or government request we will disclose data to comply, subject to review and challenge where appropriate.
• Business transfers: In case of merger, sale or reorganization we may transfer data to the acquiring entity under standard protections.

We do not sell or rent personal data.

5. Data Security

We implement technical and organizational measures to protect data, including:

• Transport-layer encryption (TLS) for data in transit and encryption at rest for stored data where appropriate.
• Role-based access controls, unique credentials for users, and audit logging.
• Regular vulnerability assessments, monitoring, and incident response procedures.

In the event of a security incident affecting personal data, we will notify affected customers and relevant authorities as required by law and this DPA.

6. Data Retention

We retain personal data only as long as necessary to provide the service, fulfill contractual obligations, or comply with legal requirements.

• Active account data: retained while the customer’s account is active.
• WhatsApp messages & CRM records: retained according to customer settings, and deleted or anonymized after account termination or within [INSERT RETENTION PERIOD e.g., 30/60/90] days unless legal requirements demand longer retention.

7. Your Rights

Depending on applicable law (for example GDPR, India’s DPDP, CCPA) you may have the right to:

• Access your personal data and obtain a copy.
• Correct inaccurate or incomplete data.
• Request deletion of personal data (“right to be forgotten”).
• Restrict or object to certain processing activities.
• Request portability of data in a structured, commonly used format.

To exercise these rights, please contact your Buyer Nexus account administrator or email us at [INSERT SUPPORT EMAIL].

8. Cookies & Tracking

We use cookies and similar technologies to authenticate users, save preferences and analyze platform usage. You can manage cookie preferences via your browser or device settings. More details regarding cookies and how to opt out are available in our cookie settings within the application.

9. Children

Buyer Nexus is a platform for businesses. We do not knowingly collect personal information from children under the applicable minimum age (typically 16). If you believe we have collected data about a child, contact us to request deletion.

10. Changes to This Policy

We may update this Privacy Policy occasionally. When we do, we will post the revised policy on this page and update the “Effective Date” at the top. For material changes, we will notify account administrators by email or via in-app notice.

11. Contact Us

If you have questions about this Privacy Policy or privacy practices, please contact: