Privacy Policy

1. What we collect

• Your account: name, email address, WhatsApp number, password (stored only in hashed form), and your settings.
• Your store: the shop links you give us (for example Shopee or TikTok Shop) and the public product information we fetch from them, plus the products, images, text and settings you add or change.
• Billing: your plan, invoices and payment status. Card and bank details are entered with our payment providers, not with us.
• Payout and verification details you give to set up payments for your store (such as business registration and bank account details), stored encrypted.
• Your store's customers: when people buy from a store on Nexova, we process their name, contact details, delivery address and order details on behalf of the store owner, so the order can be paid for, shipped and supported.
• Messages with us: what you send us on WhatsApp, email or our forms, including photos and files, and our replies.
• Usage and device data: pages visited, actions in the dashboard, IP address, browser and device, and cookies (see section 7).
• Advertising data: if you reach us from one of our ads, which ad it was (for example a Meta click-to-WhatsApp ad and its click ID), and whether you later signed up or subscribed.

2. How we use it

• To build, host and run your store and your account.
• To process subscriptions and store payments, and to arrange shipping through couriers.
• To answer your questions and support you, on WhatsApp, email and in the dashboard.
• To send you service messages (sign-in links, receipts, important changes) and, unless you opt out, tips and offers about Nexova.
• To understand which ads and campaigns bring people to Nexova, and to improve the product.
• To keep Nexova secure and to prevent fraud and abuse.
• To meet legal, tax and accounting duties.

3. AI features

Nexova uses AI to write store content from your products and to help answer messages sent to our WhatsApp numbers. To do this, the relevant text (such as product information, or the messages in a chat) is sent to AI providers that process it for us and return a result. Replies on WhatsApp may be drafted or sent by our AI assistant; a member of our team can always take over. We remove phone numbers, email addresses and similar details from chat examples we use to teach the assistant.

4. Who we share it with

We do not sell personal data. We share it only with service providers who process it for us, under contract, and only as needed:

• Hosting and database (Vercel, Supabase).
• Email delivery (Resend).
• WhatsApp messaging (Meta Platforms, through the WhatsApp Business Platform) and advertising measurement (Meta).
• Payment gateways (such as Lean.x and CHIP).
• Shipping and couriers (such as EasyParcel and its couriers).
• AI providers (such as Anthropic, Google and DeepSeek) and tools that fetch public shop pages for store building.
• Authorities, when the law requires it, or to protect the rights and safety of Nexova, our users or others.

Some of these providers process data outside Malaysia. When they do, we rely on their contractual and security commitments to protect it.

5. Marketing messages

You can stop marketing at any time, without affecting your account:

• Email: use the unsubscribe link at the bottom of any Nexova update.
• WhatsApp: reply STOP or BERHENTI, or untick the option in your account.

We will still send messages you need to use Nexova, such as sign-in links, receipts and replies to your questions.

6. How long we keep it

We keep your data for as long as your account is open and as needed to provide Nexova. Store builds that are never claimed are deleted after about a day. When you close your account we delete or anonymise your data within 90 days, except what we must keep longer for legal, tax or accounting reasons (such as invoices) or to resolve disputes.

7. Cookies and similar technologies

We use cookies that keep you signed in and make the dashboard work, and analytics and advertising cookies (including the Meta Pixel) that tell us how people use Nexova and which ads work. Our emails may include a small image and tracked links that tell us whether an email was opened or clicked. You can block or delete cookies in your browser; some features may then not work.

8. Your rights

Under the PDPA you may:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that is wrong or out of date;
• withdraw consent or ask us to stop processing for marketing;
• ask us to delete your data, as described below.

Email sales@nexovadigital.com from the address on your account. We reply within 21 days. If you are a customer of a store on Nexova, please contact that store first: they decide how their orders and customer data are used, and we help them answer you.

9. Deleting your data

To delete your Nexova account and its data, email sales@nexovadigital.com with the subject "Delete my Nexova data" from the email address on your account, or WhatsApp us at 010-764 8227. To delete only the messages you exchanged with us on WhatsApp, say so in the same way. We confirm when it is done, normally within 30 days, apart from records we must keep by law.

10. Security

We protect data with access controls, encryption in transit and, for sensitive details such as payout and payment keys, encryption at rest. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

11. Children

Nexova is for businesses and people aged 18 and over. We do not knowingly collect data from children.

12. Changes

We may update this policy. We will change the date at the top and, for important changes, tell you by email or in the dashboard.

13. Contact

Questions about privacy: sales@nexovadigital.com or WhatsApp 010-764 8227. See also our Terms of Service.