Privacy policy

Nexby helps businesses manage their social media accounts: write posts, schedule them, and see how they went. This page explains what we collect and what we do with it. Questions: hello@nexby.app.

What we collect

• Your name, email address and a password hash (we never store your password itself).
• Your workspace details: its name, logo, team members and their roles.
• When you connect a social account: the account name, handle, picture and the access token the platform gives us. We never ask for, see or store your password for that platform.
• Posts, photos and videos you create in Nexby, and the result of publishing them.
• For advertising features you turn on: the ad accounts you authorise and the campaign details you enter.
• Security records, such as sign-in events, to protect your account.

How we use it

• To publish and schedule content to the accounts you connect, and only when you or your team ask us to.
• To show the status and results that the platforms report back.
• To keep the service secure and to contact you about your account.

We do not sell your data and we do not use it for advertising of our own.

How tokens are protected

Access tokens are encrypted in our database and used only on our servers. They are never sent to your browser or written to logs. Each workspace can only reach its own data.

WhatsApp conversations

If you connect a WhatsApp Business number, Nexby stores the messages your customers send to it and the replies you send, together with the customer’s phone number and WhatsApp name, so your team can answer them in the inbox. Message text is stored encrypted. Photos, voice notes and other attachments are not downloaded or stored. Conversations are deleted automatically after 90 days, or straight away when you disconnect the number. You are responsible for having your customers’ permission to message them on WhatsApp.

Who else handles data

The social platforms you connect (for example Meta, including WhatsApp) receive the content you choose to publish or send. We use hosting and database providers, a media host for uploaded files and an email provider to run the service. They process data for us under their own terms.

Your choices

• Disconnect any account at any time in Nexby: we delete its stored tokens.
• You can also remove Nexby in the platform’s own settings; we then ask you to reconnect.
• To have your data deleted, see how to delete your data.