1. Overview & Commitment

This Privacy Policy explains how NexGenSpire ("Company", "we", "us", or "our") collects, processes, and protects your information when you access or use the Nexgenspire Workspace application at workspace.nexgenspire.com ("Service" or "Platform").

We do not sell, rent, or trade your personal information or client records to third-party advertising networks. Your data belongs strictly to your organization.

2. Information We Collect

We collect information you directly provide to us when setting up or managing your account:

Account & Auth Information: Email address, full name, encrypted password hashes, and workspace branding details.

CRM & Operational Data: Leads, client details, proposals, invoices, tasks, time tracking logs, and team member assignments.

Payment & Billing Data: Transaction records, subscription plan choices, and payment status via integrated gateways (Razorpay/Stripe). We do not store raw credit card numbers.

3. How We Use Your Data

We use your information exclusively to deliver, maintain, and enhance the Platform:

Authenticating user logins and managing multi-tenant workspace access controls.
Processing client invoices, proposal tracking, and automated email notifications.
Providing analytics, workspace usage telemetry, and customer support.
Preventing security vulnerabilities, fraud, and unauthorized platform access.

4. Data Sharing & Sub-processors

We only share data with essential third-party service providers ("Sub-processors") required to operate the infrastructure:

Supabase Inc.

Database hosting, row-level security isolation, and authentication engine.

Razorpay / Stripe

PCI-DSS compliant payment processing for platform subscription billing.

5. Data Security & Encryption

We implement industry-standard administrative, physical, and technical safeguards:

256-bit AES Encryption in Transit & at Rest

All HTTP traffic is encrypted using modern TLS 1.3. Database storage utilizes PostgreSQL Row-Level Security (RLS) to strictly isolate tenant records across organizations.

6. Data Retention & Deletion

Your data is retained as long as your workspace account remains active. If you cancel your subscription or request account closure, all associated leads, invoices, and profile records will be permanently purged within 30 days upon request.

7. Your Rights (GDPR & CCPA)

Under global data privacy laws, you possess the following rights:

Right to Access: Request a copy of your stored workspace records.
Right to Rectification: Update or correct inaccurate personal details.
Right to Erasure ("Right to be Forgotten"): Request full deletion of your account.
Right to Data Portability: Export your leads, invoices, and proposals as CSV/JSON.

8. Cookies & Local Storage

We use essential session cookies and browser local storage strictly required for keeping you authenticated during active workspace sessions. We do not use intrusive third-party cross-site tracking pixels.

9. Contact Information

If you have any questions or concerns regarding this Privacy Policy, please reach out to our privacy compliance team:

NexGenSpire Data Protection Office

Email: [email protected]

General Support: [email protected]

Website: nexgenspire.com