Privacy Policy

Nexora RealtyOS ("Nexora", "we", "us", or "our") is a multi-tenant real-estate business platform operated from Kathmandu, Nepal. This policy applies to Nexora websites, agency websites powered by Nexora, CRM services, customer portals, browser experiences, and integrations we make available.

Real-estate agencies decide what customer, owner, lead, property, and transaction information they place in Nexora and how they use it. For that information, the agency is normally the business responsible for the relationship and Nexora processes the information to provide the service. Nexora is directly responsible for its own account, website, billing, security, and support information.

If you are a customer of an agency using Nexora, that agency's privacy notice may also apply. Questions about a property inquiry, site visit, or agency communication can be directed to the agency or to Nexora.

Depending on how you use the service, we may collect:

• Account and agency information: name, work email, Nepal phone number, role, agency name, address, team membership, login and account settings.
• CRM and property information: lead and owner contact details, property interests, notes, communication history, follow-ups, site visits, offers, documents, listing details, verification records, and assigned agents.
• Public website information: inquiries, viewing requests, valuation requests, career applications, saved properties, saved searches, portal activity, and information submitted through agency forms.
• Support and subscription information: support conversations, demo requests, subscription status, invoices, and limited billing records. Property sale and rent payments are not processed through Nexora unless a separate feature is expressly offered.
• Technical information: IP address, browser and device information, timestamps, security and audit events, session data, and essential browser storage used to keep the service working and secure.

We receive information directly from users, from an agency acting on their behalf, from public forms, from connected services authorized by an agency, and automatically when the service is used.

When an authorized agency connects a Meta business asset, Nexora may receive and process information permitted by that agency and Meta, such as Facebook Page identifiers and names, Instagram professional-account identifiers, WhatsApp Business account and phone-number identifiers, access tokens, granted permissions, and connection status.

Features selected by the agency may also process:

• posts, media, captions, publishing status, and basic engagement information;
• Messenger, Instagram, or WhatsApp conversations and webhook events needed to place customer inquiries in the agency's unified inbox;
• customer names, platform-scoped identifiers, phone numbers where supplied through WhatsApp, message content, attachments, timestamps, and delivery or read status;
• WhatsApp message templates, consent or opt-out status, and communication history where those features are enabled.

Nexora does not ask for or store a user's Facebook, Instagram, or WhatsApp password. Connections are authorized through Meta's official sign-in and permission flow. An agency can only connect assets it is authorized to manage, and a connection can be disconnected from Nexora or Meta.

Meta separately processes information under its own terms and privacy policies. WhatsApp messages sent by an agency remain subject to WhatsApp's Business Messaging Policy and other applicable Meta terms.

We use information to:

• create accounts, authenticate users, and provide role-based access;
• operate listings, lead management, inboxes, follow-ups, site visits, distribution, reporting, and customer portals;
• publish authorized content and route messages through connected services;
• send service notices, requested communications, reminders, and support responses;
• protect accounts, prevent abuse, troubleshoot errors, and maintain audit records;
• improve service reliability and understand feature usage using aggregated or de-identified information; and
• comply with applicable law, enforce our terms, and respond to lawful requests.

We process information as needed to perform our agreement with an agency or user, follow instructions, obtain consent where required, protect legitimate operational and security interests, and meet legal obligations. Agencies are responsible for obtaining any notice, consent, or other lawful basis needed for their customer communications.

We share information only as needed to provide the service, including with the agency and its authorized staff; Meta services selected by the agency; infrastructure, hosting, storage, email, security, support, and subscription-billing providers; and professional advisers or authorities when legally required.

Each agency's workspace is logically separated from other agency workspaces. Agency administrators control their team's access. We do not share one agency's customer data with another agency unless an authorized user deliberately directs a supported transfer or sharing action.

Service providers may only use information to perform services for us under appropriate obligations. If Nexora is involved in a merger, financing, acquisition, or sale of assets, information may be transferred subject to appropriate notice and continued protection.

We keep information for as long as an agency account is active or as needed to deliver the requested service. Retention may continue for a reasonable period to complete deletion requests, recover from backup, resolve disputes, maintain security and audit records, enforce agreements, or satisfy legal and accounting obligations.

Connected social access tokens and connection metadata are removed or made unusable when the applicable connection is deleted, subject to technical completion and backup rotation. Agency CRM data is deleted or returned according to the agency's instructions and applicable obligations.

Detailed instructions are available on our Data Deletion page.

We use administrative, technical, and organizational safeguards designed to protect information, including authenticated access, permission controls, encrypted network transport, tenant separation, logging, backups, and restricted operational access. No internet service can guarantee absolute security, so users must protect their credentials and promptly report suspected misuse.

Nexora is based in Nepal, while cloud providers and connected platforms may process information in other countries. Those locations may have different data-protection rules. We use contractual and technical safeguards appropriate to the service and process information in line with applicable Nepal law, including the Privacy Act, 2075.

Subject to applicable law and appropriate identity verification, you may ask to access, correct, export, restrict, or delete personal information, or withdraw a permission you previously gave. You may also:

• disconnect a Facebook, Instagram, Messenger, or WhatsApp business connection;
• remove Nexora from Meta's Business Integrations settings;
• ask an agency to correct or remove its CRM record about you;
• unsubscribe or reply with an available opt-out instruction to stop non-essential communications; and
• contact us if an agency request needs technical assistance from Nexora.

Some records may be retained where required for security, fraud prevention, legal compliance, or the rights of others. Removing an integration does not automatically delete content already published to a social platform; that content can be managed on the relevant platform.

Nexora is a business and real-estate service and is not directed to children. Users must not knowingly submit a child's information unless they have proper authority and a legitimate, lawful reason to do so.

We may update this policy as the service, law, or connected platforms change. The current version will appear here with a revised date. We will provide additional notice when a material change requires it.

For privacy questions or requests, email nexorarealtyos@gmail.com. Include your name, account email, agency name if applicable, and enough detail to identify the request. Never send passwords or access tokens.

Nexora RealtyOS
Kathmandu, Nepal
+977 9863594575