Privacy Policy

Last updated: March 14, 2026

NexoAlerts, a product of JobFluss LLC ("we," "us," or "our"), operates the NexoAlerts platform, including the website at nexoalerts.com and the application at app.nexoalerts.com (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use our Service, whether as a business customer ("Customer") or as a message recipient/subscriber ("Subscriber").

1. Information We Collect

1.1 Customer Information

When you create an account, we collect:

• Name, email address, and password
• Business name, address, and phone number
• Billing and payment information (processed by our third-party payment processor)
• Usage data including login times, feature usage, and campaign performance metrics

1.2 Subscriber Information

When Subscribers opt in to receive messages from our Customers, we collect:

• Mobile phone number
• Opt-in timestamp and method (e.g., QR code scan, keyword text)
• Message history (sent and received messages)
• Opt-out timestamp (if applicable)
• Link click and engagement data

1.3 Automatically Collected Information

• Device type and operating system (for QR code redirect optimization)
• IP address and approximate location
• Browser type and version
• Pages visited and referral source

2. How We Use Information

We use collected information to:

• Provide, maintain, and improve the Service
• Process and deliver SMS/MMS messages on behalf of Customers
• Track message delivery, engagement, and campaign performance
• Process payments and manage subscriptions
• Send service-related communications (account alerts, updates, security notices)
• Detect and prevent fraud, abuse, and violations of our Terms of Service
• Comply with legal obligations, including TCPA and telecommunications regulations
• Generate aggregated, anonymized analytics and reports

3. SMS Data Use

Phone numbers collected for SMS messaging are used only to send messages that the subscriber opted in to receive from that specific business. Subscriber data is used solely for delivering the promotions, event announcements, updates, and notifications the subscriber consented to when they opted in.

We do not sell subscriber phone numbers. NexoAlerts does not sell, rent, lease, or otherwise share SMS subscriber phone numbers or opt-in data with third parties for their own marketing or any other purpose. Subscriber data is accessible only to the specific business the subscriber opted in to.

Phone numbers are stored securely in our database with encryption in transit and restricted access controls. Subscribers can opt out at any time by replying STOP to any message, and their number will be immediately added to a suppression list to prevent future messages from that business.

4. SMS/Text Messaging Consent & Compliance

4.1 Opt-In Process

Consumers opt in by scanning a QR code or texting a keyword displayed by a participating business. This action provides consent to receive SMS messages from that business. The opt-in is initiated entirely by the consumer — businesses cannot add phone numbers without consumer-initiated consent.

4.2 Subscriber Consent

NexoAlerts facilitates opt-in consent collection on behalf of our Customers. Subscribers provide consent by scanning a QR code and sending an SMS message to opt in. This constitutes express written consent under the Telephone Consumer Protection Act (TCPA).

4.3 Opt-Out Rights

Subscribers may opt out of messages at any time by replying STOP to any message. Opt-out requests are processed immediately and automatically. Once opted out, no further marketing messages will be sent to that number from that Customer.

4.4 Message Frequency & Charges

Message frequency varies by Customer campaign settings. Standard message and data rates from the Subscriber's wireless carrier may apply. NexoAlerts does not charge Subscribers for receiving messages.

4.5 No Sharing for Marketing

Subscriber phone numbers and opt-in data are never sold, rented, or shared with third parties for their own marketing purposes. Subscriber data is accessible only to the specific Customer the Subscriber opted in to.

5. Data Sharing & Third Parties

We share information only in the following circumstances:

• Telecommunications Providers: We transmit message content and phone numbers to our SMS delivery partner (Telnyx) to deliver messages. Telnyx processes this data solely for message delivery.
• AI Services: When Customers use the AI campaign writing feature, message prompts (not Subscriber phone numbers) are sent to OpenAI for text generation.
• Payment Processors: Billing information is handled by our payment processor. We do not store full credit card numbers.
• Legal Requirements: We may disclose information when required by law, subpoena, court order, or government request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction.

6. Data Retention

• Customer Data: Retained for the duration of the account plus 30 days after deletion, unless a longer retention period is required by law.
• Subscriber Data: Retained for the duration of the Customer's account. Opted-out Subscribers' phone numbers are retained in a suppression list to prevent future messages.
• Message Logs: Campaign message records are retained for 12 months for analytics and compliance purposes.
• Webhook & Delivery Logs: Retained for 90 days for troubleshooting and compliance.

7. Data Security

We implement industry-standard security measures to protect your information:

• All data in transit is encrypted via TLS 1.2+
• Passwords are hashed using bcrypt with a minimum of 12 rounds
• API authentication uses token-based access with automatic session expiration
• Database access is restricted to application services only
• Regular security reviews and monitoring

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Customer Responsibilities

Customers using NexoAlerts are responsible for:

• Obtaining proper consent before messaging Subscribers
• Providing clear opt-in disclosures (message frequency, data rates, opt-out instructions)
• Honoring opt-out requests promptly (handled automatically by our system)
• Complying with the TCPA, CAN-SPAM Act, CTIA guidelines, and all applicable laws
• The content of messages sent through the platform

9. Your Rights

9.1 Customer Rights

You may access, update, or delete your account information at any time through the Settings page. To request a complete export or deletion of your data, contact us at privacy@nexoalerts.com.

9.2 Subscriber Rights

Subscribers may:

• Opt out of messages by replying STOP at any time
• Request information about what data is held about them by contacting privacy@nexoalerts.com
• Request deletion of their data (subject to suppression list retention for opt-out compliance)

9.3 California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information.

10. Cookies & Tracking

Our website and application use cookies for:

• Essential Cookies: Authentication sessions, CSRF protection, and location preferences
• Analytics Cookies: Understanding how users interact with our Service (aggregated, anonymized)

Our link tracking feature (tap.nexoalerts.com) records clicks on URLs included in SMS campaigns. This tracking is disclosed to Subscribers in the Customer's opt-in flow.

11. Children's Privacy

NexoAlerts is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete that information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify Customers of material changes via email or an in-app notice. The "Last updated" date at the top of this page reflects the most recent revision.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

JobFluss LLC (dba NexoAlerts)
Email: privacy@nexoalerts.com