1. Controller and coverage
CloseNexa provides the service from Israel ("CloseNexa", "we", "us"). Questions may be sent to support@closenexa.com.
CloseNexa serves business users internationally, including Israel, the EEA, the United Kingdom, the United States and Canada. Mandatory rights under the law that applies to you are not limited by this policy.
For customer conversation data, the business workspace generally acts as controller/business and CloseNexa acts as its processor/service provider. For account, billing and site operations, CloseNexa is the controller.
2. Information we process
- Account and business details, contact information and authentication records.
- Conversation, lead, channel, product, order and approved knowledge data submitted by you or connected services.
- Plan, transaction, invoice, tokenized payment and limited card metadata. We do not receive or store full PAN or CVV through Tranzila Hosted Fields.
- Device, IP, security, audit, support, delivery and diagnostic logs.
- Consent, language, cookie and communication preferences.
3. Purposes and legal bases
- Provide and secure the contract, authenticate users and operate integrations.
- Process payments, subscriptions, invoices and refunds.
- Generate requested AI responses and improve service quality using configured providers.
- Prevent abuse, investigate incidents and comply with law.
- Send service communications and, where permitted, product communications.
- Analyze aggregate performance with consent where consent is required.
4. Service providers and transfers
We use vetted providers for infrastructure, email, storage, AI processing, payment processing and connected channels. These may include AWS, OpenAI, Tranzila, Meta/WhatsApp, Telegram and WooCommerce-related services.
Data may be processed outside your country. We use contractual and organizational safeguards where required, including appropriate transfer mechanisms for EEA, UK and Canadian data.
5. Retention and security
We retain information only while needed for service, support, security, billing and legal obligations. Billing and tax records may be retained for the statutory period; operational logs and deleted workspace data follow configured retention and backup cycles.
We use access controls, encryption in transit and at rest where supported, secret management, logging and backups. No system is completely secure; report suspected incidents promptly.
6. Your regional rights
Depending on location, you may request access, correction, deletion, restriction, portability, objection or withdrawal of consent. EEA/UK users may complain to a supervisory authority. Israeli users may exercise rights under Israeli privacy law. Canadian users may request access and challenge compliance under applicable federal or provincial law.
Residents of applicable US states, including California, may request access, correction or deletion and may opt out of sale, sharing or targeted advertising where the law applies. CloseNexa does not currently sell personal information or use it for cross-context behavioral advertising. We do not discriminate for exercising privacy rights.
Requests may require identity verification. Workspace end users should normally contact the business they interacted with first.
7. Cookies, children and changes
See our Cookie Policy for browser storage choices. CloseNexa is a business service and is not directed to children.
We may update this policy and will publish the effective date. Material changes will be communicated when required.