Privacy policy
Last updated: 23 October 2026
Version 1.1. Effective from 23 October 2026.
NexeGo is in early access. Today our website collects only what you send us through the early-access form, by email or phone, when you book a discovery call, or what you type into our live demo at demo.nexego.ai. The parts of this policy about workspaces, billing and agents apply from the day those parts of the Service are available to you.
In short
- We collect the personal data we need to run NexeGo, bill you and support you. We list every kind below.
- Data your agents handle about your own customers belongs to your business. We process it only to serve you.
- Your WhatsApp data is never used to train or improve AI for anyone else.
- Each business's own data serves only that business. We never use one business's content or conversations for another, and never to train or improve AI models, unless that business chooses to share it (section 3).
- To run and improve the service we keep only aggregate statistics (counts, errors, timings), never content.
- If your business chooses to share some of its content with us to improve NexeGo for every business, we use only what it shares, never WhatsApp data. Sharing is off unless you turn it on, and you can stop at any time.
- We never sell personal data.
- You can ask to see, correct or erase your data, withdraw consent, or complain. Write to hello@nexego.ai.
1. Who we are and how to reach us
NexeGo is a brand of Nexego Private Limited (CIN U62099TS2026PTC209372, GSTIN 36AALCN1942Q1ZT), registered office 3rd Floor, Plot No.13, Akshaya Space, RBI Colony, Madhapur, Hyderabad, Telangana 500081, India ("we"). For any question about your personal data, write to hello@nexego.ai or to our Grievance Officer (section 13).
2. What this policy covers: our two roles
Part A, data we decide about. When you visit our website, join early access, book a call, sign up, use the product, buy from us or contact us, we decide why and how your personal data is used. Under Indian law we are the data fiduciary.
Part B, service data. When a business uses NexeGo, its agents receive and send messages to that business's own customers. That business decides why and how that data is used; we process it on its behalf as its data processor. If you are a customer of a business that uses NexeGo, please read that business's privacy notice and send requests to it first. If you write to us, we pass your request to the business and help it answer.
3. Our data promise
Your WhatsApp data is never used to train or improve AI for anyone else.
| Data | How we use it | What we never do |
|---|---|---|
| Service data: a business's content, conversations and its end customers' data in NexeGo | Only to provide, secure and support the Service for that business. Controlled by the business; deleted when it asks or closes its workspace | Use it for any other business; use it to train or improve AI models, ours or our AI providers' |
| Aggregate operational statistics: counts (for example messages, credits, setups), error rates and response times | To run, secure and improve the Service | Include message content, knowledge, files or contact details; identify a business's end customers; train or improve any AI model |
| Opt-in content: content a business chooses to share with us (for example agent settings, templates or website-chat examples), never WhatsApp data | Only if the business turns sharing on, with its separate consent: to improve NexeGo's agents and templates for all businesses, as the consent screen describes. The business can stop at any time, and we then stop using it | Turn it on by default; include any WhatsApp data; use it beyond what the consent describes |
Apart from opt-in content a business chooses to share, we do not train or fine-tune any AI model on a business's data. If we ever offer a model tuned for one business alone, it would use only that business's data, serve only that business, and need its written agreement first.
4. Personal data we collect (Part A)
| Category | What exactly | Where it comes from |
|---|---|---|
| Website: early-access form | Name, business name, WhatsApp number, email address, industry, city and your message. The form stores them in our Google Workspace (a Google Sheet) and emails them to us | You |
| Website: discovery calls | Name, email address, the time you choose and any answers you give when you book a call through Calendly | You and Calendly |
| Website: live demo (demo.nexego.ai) | What you type into a demo agent and the language you choose. It is sent to our AI provider, Anthropic, only to produce the answer. We do not store it or log it | You |
| Website: technical data | Technical request data (IP address, browser, time, country) | Our hosting provider, Vercel |
| Account | Name, business name, email, mobile number, role, password (stored only as a secure hash) or sign-in through Google | You |
| Business and billing | GSTIN, billing address, plan, invoices, payment status, the last digits of a card or the UPI handle shown by our payment partner. We do not receive full card numbers or UPI PINs | You and Razorpay |
| Product use | Sign-ins, actions in the app, credit and hours use, settings changes, device and browser type, IP address, error reports | Collected automatically when you use the product |
| Support | Messages, email tickets, call notes, and time records for service hours (kept in our own time log) | You and our support tools |
| Marketing choices | Whether you agreed to receive news and offers | You |
5. Why we use it, and on what basis (Part A)
| Purpose | Data used | Basis under the DPDP Act |
|---|---|---|
| Answer website enquiries and early-access requests, and hold discovery calls | Website | The purpose you gave the data for |
| Answer what you ask in our live demo | Website: live demo | The purpose you gave the data for |
| Create and run your workspace | Account, product use | Data you gave us for this purpose (a legitimate use under section 7) or your consent at sign-up |
| Bill you, issue GST invoices, handle TDS and keep tax records | Account, business and billing | Legal obligation and the purpose you gave the data for |
| Support you and deliver service hours | Account, support | The purpose you gave the data for |
| Keep NexeGo secure and prevent fraud and abuse | Product use, website | Legal obligation and reasonable security duties |
| Run, secure and improve NexeGo | Aggregate operational statistics only (section 3): counts, errors, timings, never content | Our reasonable duty to keep the Service working and secure |
| Send service messages (billing, security, changes to terms) | Account | Needed to provide the Service |
| Send news and offers | Account, marketing choices | Your consent only; withdraw with one click in any email |
Where we rely on consent, you can withdraw it as easily as you gave it. Withdrawal does not affect what we lawfully did before.
6. AI: how our agents use data
Our AI disclosure page says more about how our agents work.
- What our agents are. Software that uses large language models to read messages, write replies, follow up and remind, within the settings the business sets.
- They say they are AI. By default, every agent tells people it is an AI assistant for the business and offers a person on request.
- What the AI sees. The conversation, the business's knowledge and settings, and data from connected apps that the agent needs for the task.
- Who runs the models. AI model providers run the models. They process content only to return the AI's answer to us. We will name each one, with its region, in section 7 before they first process any business’s content, including during a founding-customer setup. Our live demo at demo.nexego.ai already uses Anthropic's Claude models, through Anthropic's API, to write its answers.
- Training. Your WhatsApp data is never used to train or improve AI for anyone else. Each business's content and conversations serve only that business: we do not use them to train or improve AI models, and we do not let our AI providers train their models on them. We keep only aggregate operational statistics (counts, errors, timings, never content), and use opt-in content only where a business chooses to share it (never WhatsApp data), as section 3 explains.
- Limits. AI can be wrong. Agents answer from the business's own knowledge, hand over to a person when unsure, and ask the business's approval before any discount or price exception.
- Generated media. Agents send text today. If they later create images, audio or video, these will carry the labels Indian law requires for synthetically generated content.
7. Who we share personal data with: our sub-processors
We share personal data only with the providers below, who process it for us under contract or their terms of service, and when the law requires us to (for example to a court or government authority with legal power to ask). We never sell personal data.
| Provider | What it does for us | Data it handles | Where |
|---|---|---|---|
| Google (Google Workspace: Sheets, Gmail and Apps Script) | Receives and stores the website's early-access form, and emails it to us | Name, business, WhatsApp number, email, industry, city, message | Google's data centres |
| Vercel | Hosts our website and our live demo, and Vercel Web Analytics counts its page views in aggregate | Technical request data | Global edge network |
| Anthropic, PBC | Runs the AI model that writes the answers in our live demo at demo.nexego.ai | What a visitor types into the demo | United States |
| Calendly | Books discovery calls | Name, email, the time you choose | Calendly's own servers |
| Zoho Desk (Zoho Corporation), Free plan | Email support tickets and the help centre | Support, account | Zoho's data centres |
| Razorpay | Takes payments and runs mandates, when we start taking payments | Billing, payment | India |
| Meta Platforms (WhatsApp Business Platform) | Carries WhatsApp messages when a business connects WhatsApp; the business has its own contract with Meta | Messages, phone numbers | Meta's data centres |
Further AI model providers for the product, and its database and hosting providers, will be listed here, each with its region, before they first process any business’s content, including during a founding-customer setup; we give 30 days' notice before adding a sub-processor for service data.
8. Transfers outside India
Some providers above process data outside India, as the "Where" column shows. We transfer data only to countries the Government of India has not restricted, and we follow any restriction it notifies.
9. How long we keep personal data
| Data | How long |
|---|---|
| Account and product data | While your workspace is open; then deleted within 30 days of closure, and from backups within a further 90 days |
| Inactive free workspaces | Closed after 12 months without a sign-in, with 30 days' email notice, then deleted as above |
| Invoices, payment and tax records | As long as tax and company law require, currently up to 8 years |
| Security and access logs | At least one year, as the DPDP Rules require, then deleted |
| Support tickets and service-hours records | While your workspace is open, then up to 2 years for dispute and audit purposes |
| What you type into the live demo | Not stored by us. Our AI provider may keep it for a limited period under its own terms, longer if it is flagged for a policy breach |
| Website enquiries, including early-access requests, that do not lead to an account | Up to 12 months after our last exchange |
| Marketing consent records | As long as you stay subscribed, and 3 years after, to prove consent |
| Service data (Part B) | As the business decides while its workspace is open; deleted as for account data when it closes |
When the purpose ends and no law requires us to keep the data, we delete it or make it permanently de-identified.
10. How we protect it
We use reasonable security safeguards, including: encryption of data in transit and at rest; access only for staff who need it, with strong sign-in; separation of each business's data from every other's; logs and monitoring to detect misuse, kept for at least one year; regular backups; and contracts that bind our processors to the same care.
11. Personal data breaches
If a breach affects your personal data, we tell you without delay, in plain words: what happened, what it may mean for you, what we are doing, and what you can do. We tell the Data Protection Board of India as the law requires, including a detailed report within 72 hours. For service data, we tell the business at once so it can meet its own duties.
12. Your rights
Under the DPDP Act you can:
- access a summary of your personal data we process and what we do with it, and who we have shared it with;
- correct, complete or update it;
- erase it, where we no longer need it for the purpose or the law does not require us to keep it;
- withdraw consent where we rely on it;
- nominate someone to use your rights if you die or cannot act;
- complain to us, and then to the Data Protection Board.
To use a right, write to hello@nexego.ai or use Settings in the app. We may ask you to confirm your identity. We reply within 30 days, and never later than the law allows (90 days at most under the DPDP Rules).
If your data is service data (Part B), the business that uses NexeGo is responsible for your request. Contact it first; if you contact us, we forward your request and help it reply.
13. Grievance Officer and complaints
Grievance Officer: Nithin Raj Paladugula, Founder and CEO, Nexego Private Limited, hello@nexego.ai (subject line: Grievance)
Phone: +91 96763 33630
Address: 3rd Floor, Plot No.13, Akshaya Space, RBI Colony, Madhapur, Hyderabad, Telangana 500081, India
Hours: Monday to Saturday, 10 AM to 7 PM IST
We acknowledge every complaint within 24 hours and aim to resolve it within 15 days. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
14. Children
NexeGo is for businesses, not for children. We do not knowingly collect children's data for our own purposes. A business that uses NexeGo must get verifiable consent from a parent or lawful guardian before its agents process a child's (under 18) personal data.
15. Cookies and similar technology
Our website uses no cookies. It uses Vercel Web Analytics, which counts page views in aggregate without cookies and without identifying visitors. We will update this page before we add any cookies or other analytics. When the app opens, it will use only cookies that are strictly necessary to sign you in, keep you secure and remember your settings. We use no advertising cookies and do not track you across other websites.
16. Language
This policy is in English. You may ask for it in any language listed in the Eighth Schedule to the Constitution of India by writing to hello@nexego.ai.
17. Changes to this policy
We will post any change here with a new effective date, and tell account owners by email at least 30 days before a material change applies. Our Terms of service explain how we work with businesses that use NexeGo.