1. Who We Are
Nexobiz Cloud ("Nexobiz", "we", "us") operates a subscription Work OS and ERP platform for businesses, primarily serving Philippine SMEs and enterprise teams.
This Privacy Policy explains how we process personal information when you visit our marketing website, register for a trial, subscribe, sign in, or use tenant workspaces.
2. Information We Collect
We collect information in these categories:
- Account & profile data — name, email, phone, company name, role, avatar, and authentication identifiers (including SSO subject IDs).
- Billing data — plan selection, invoices, payment status, and transaction references processed by payment providers (we do not store full card numbers).
- Workspace content — records you create in CRM, sales, projects, HR, payroll, and other modules, including files you upload.
- Usage & device data — IP address, browser type, session identifiers, feature usage, audit logs, and security events.
- Support & communications — messages you send through contact forms, email, or in-app support channels.
3. How We Use Information
We use personal information to provide, secure, and improve the Platform, including:
- Creating and administering accounts, workspaces, and team memberships.
- Processing subscriptions, trials, and billing events.
- Delivering module functionality, notifications, automations, and AI-assisted features you enable.
- Monitoring security, preventing fraud, enforcing acceptable use, and complying with law.
- Responding to support requests and sending service-related notices.
- Analyzing aggregated usage to improve performance, UX, and product roadmap decisions.
4. Legal Bases (where applicable)
Depending on context, we process personal information based on contract performance (providing the service you requested), legitimate interests (security, product improvement, B2B communications), consent (where required for marketing or optional cookies), and legal obligations (tax, accounting, or regulatory requests).
5. Sharing & Processors
We do not sell personal information. We share data with service providers that help us operate the Platform, such as cloud hosting, email delivery, payment processors, analytics, and AI model providers when you use AI features.
Workspace administrators control member access within their tenant. Integrations you enable (for example OAuth, Facebook leads, or webhooks) may exchange data with third parties according to your configuration.
We may disclose information when required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale with appropriate safeguards.
6. International Transfers
Your data may be processed in the Philippines and in other countries where our infrastructure or subprocessors operate. We apply contractual and technical safeguards appropriate to the sensitivity of the data and applicable law.
7. Retention
We retain account and workspace data for as long as your subscription is active and for a reasonable period afterward to support exports, billing reconciliation, and legal compliance.
Security logs, audit trails, and backup copies may be retained for longer periods according to tenant security settings and operational requirements.
8. Security
We implement administrative, technical, and organizational measures including access controls, encryption in transit, tenant isolation, audit logging, and monitoring. No method of transmission or storage is completely secure; please use strong passwords and enable available SSO or 2FA options.
9. Your Rights & Choices
Subject to applicable law (including the Philippine Data Privacy Act of 2012), you may request access, correction, deletion, or restriction of personal information we control about you.
Marketing emails include an unsubscribe mechanism where required. Cookie preferences may be managed through your browser settings.
Workspace members should contact their organization's administrator for tenant-held data requests. Platform account holders may contact us directly using the email below.
10. Children
The Platform is intended for business use and is not directed to children under 18. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The effective date at the top of this page indicates the latest revision. Continued use after changes constitutes acceptance where permitted by law.
12. Contact
For privacy inquiries, data subject requests, or security reports, contact us at the email shown on this page. We aim to respond within a reasonable timeframe.