Privacy Policy

This Privacy Policy explains how Nexora Digital Services Agency ("NDSA", "we", "us") collects, uses, shares, protects and deletes personal information when you visit nexoradsa.org, chat with our AI assistant, contact us, buy or download our software, or use our services — including services we deliver through Meta platforms such as the WhatsApp Business Platform, Facebook and Instagram.

1. Who we are

Nexora Digital Services Agency is a digital services agency based in Jandanwala, District Bhakkar, Punjab, Pakistan. We provide AI agents and automation, website and app development, search engine optimisation, paid ads management, social media management and WhatsApp business messaging solutions.

When we process personal data on behalf of a business client (for example, messages sent to a client's WhatsApp number that we manage), the client is the data controller and we act as their service provider, following the client's instructions.

2. Information we collect

• Contact and audit requests: name, business name, website, email address, phone/WhatsApp number and your message.
• AI chat assistant: the messages you type into the chat widget on our website, and any contact details you choose to share there.
• Customer accounts: username, password (stored only in encrypted/hashed form), full name, and the software products you have purchased or downloaded.
• Communications: messages you send us by email, WhatsApp, phone or social media.
• Technical data: IP address, browser type, pages visited and similar usage data collected through server logs, cookies and analytics tools.
• Data we process for clients: names, phone numbers, profile names and message content of our clients' customers who contact them on WhatsApp, Messenger or Instagram, or who respond to their ads (for example, lead form submissions).

We do not intentionally collect sensitive information (such as health, religious or financial account data) and ask that you do not send it to us.

3. Data from Meta platforms

Our services may use Meta's APIs, including the WhatsApp Business Platform (Cloud API), the Facebook Graph API, the Instagram API and the Marketing API. Through these we may access:

• WhatsApp phone numbers, profile names and messages exchanged with a business;
• Facebook Page and Instagram account information, posts, comments and messages;
• Ad account data, campaign performance and lead form submissions;
• Basic profile information (name, email) when you connect an account using Facebook Login.

We use data obtained from Meta platforms only to provide the services you or our client requested — such as sending and receiving messages, automating replies, publishing approved posts, managing pages and running ad campaigns. We do not sell this data, use it for unrelated advertising, share it with data brokers, or use it for any purpose not permitted by Meta. Our use of this data complies with the Meta Platform Terms, the Developer Policies and the WhatsApp Business Policy.

Businesses only message people on WhatsApp who have opted in. You can stop receiving messages at any time by replying STOP or blocking the number.

4. How we use information

• To respond to enquiries, prepare free digital audits and provide quotes;
• To deliver, operate and support our services, including messaging, AI agents, websites and ad campaigns;
• To create customer accounts and give access to software you have purchased;
• To send service-related emails, invoices and updates;
• To improve our website, AI assistant and services;
• To measure the performance of our own marketing (for example, through ad pixels);
• To keep our services secure, prevent fraud and meet legal obligations.

We send marketing messages only where you have agreed to receive them, and you can opt out at any time.

5. How we share information

We do not sell or rent personal information. We share it only with:

• Service providers who help us run our business — for example website hosting (Railway), email delivery (Resend / Gmail), AI processing for our chat assistant (Google Gemini), analytics and payment tools — only as needed to provide the service;
• Meta Platforms (WhatsApp, Facebook, Instagram), when messages or content are sent through their services, subject to Meta's own privacy policies;
• Our clients, when we process their customers' data on their behalf;
• Authorities, where required by law or to protect rights, safety and property;
• A successor business, if our business is merged or transferred, with this policy continuing to apply.

6. Cookies, analytics and ad pixels

Our website may use cookies and similar technologies, including analytics tools and advertising pixels (such as the Meta Pixel), to understand website traffic and measure ad performance. You can block or delete cookies in your browser settings and manage ad preferences in your Facebook/Instagram settings. Some features may not work properly if cookies are disabled.

7. Data retention

• Enquiries and chat conversations that do not become projects: up to 12 months;
• Customer accounts and project records: for the duration of the relationship and up to 5 years afterwards for accounting and legal purposes;
• Data processed for clients (such as WhatsApp messages): as instructed by the client, and deleted or returned when the engagement ends.

8. Security

We use reasonable technical and organisational measures to protect personal information, including encrypted (HTTPS) connections, hashed passwords, access controls and secure storage of access tokens. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your rights and choices

You may ask us to access, correct or delete your personal information, stop marketing messages, withdraw consent, or disconnect any Facebook, Instagram or WhatsApp account connected to our services. Contact us using the details in section 14 — we respond within 30 days.

10. Data deletion instructions

If you connected your Facebook account to our app, you can also remove it yourself: go to Facebook → Settings & privacy → Settings → Apps and websites, select our app and click Remove. To stop WhatsApp messages from a business, reply STOP or block the number.

11. Children's privacy

Our services are intended for businesses and are not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

12. International transfers

We are based in Pakistan, but some of our service providers (including Meta, Google and our hosting provider) may store or process data in other countries. Where this happens, we rely on those providers' safeguards to protect your information.

13. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with its "Last updated" date.

14. Contact us