Privacy & Data Security Policy

1. Scope of Data Stewardship

NexxFlow ("we", "us", "our") is committed to protecting the privacy of our clients (brokerages, developers, consultants) and their prospective property buyers. This Privacy Policy outlines how our server-side matching platforms and WhatsApp API gateways handle data.

2. Ingested Buyer Profiles

Our systems ingest buyer lead notifications (name, work phone number, budget specs, desired locations) from third-party portals and website forms. This information is processed strictly to perform natural language qualification and active listings vector database lookups on behalf of the client brokerage.

3. Strict Schema Isolation

We enforce strict multi-tenant database isolation. Leads, listings, contact details, and transaction notes are housed on separate secure container environments. Your agency's registries are never accessible to other clients and are never used to train open-source public models.

4. Security Encryptions

All data is secured using AES-256 standards at rest and TLS 1.3 during transit. Our webhooks and CRM relay triggers maintain encrypted pathways to ensure compliance with enterprise-grade security structures.

5. Data Retention & Compliance

Client data is maintained only for the duration of the SaaS licensing contract. Upon termination, all isolated data blocks, vector indices, and chat logs are completely purged from our active arrays within 14 business days.