Privacy Policy

Effective date: 20 July 2026

NexaFlow is committed to protecting your privacy and handling personal information responsibly.

This Privacy Policy explains how NexaFlow (“NexaFlow”, “we”, “us” or “our”) collects, uses, stores and discloses personal information through our website, enquiries, consultations and services.

1. Information we collect

The personal information we collect depends on how you interact with us and may include:

  • Your name
  • Business name and job title
  • Email address and telephone number
  • Information submitted through our website forms
  • Information provided during discovery calls, meetings or correspondence
  • Information about your business, systems, workflows and automation requirements
  • Billing and transaction information
  • Technical information such as your IP address, browser type, device information and website usage data
  • Any other information you choose to provide to us

When delivering services to a client, we may also process information contained within the client’s business systems, documents, emails, forms or workflows. The types of information involved will depend on the services being provided.

We ask clients not to provide sensitive information unless it is necessary for the agreed service and appropriate safeguards have been discussed.

2. How we collect information

We may collect personal information when you:

  • Visit or use our website
  • Complete an enquiry or contact form
  • Book or attend a consultation
  • Communicate with us by email, telephone, video call or social media
  • Request a proposal or enter into an agreement with us
  • Use an automation, AI Worker or other solution that we have built or support
  • Provide access to business systems as part of an agreed engagement
  • Otherwise interact with us in connection with our services

We may also receive information from referrals, business partners, publicly available sources or third-party platforms where appropriate.

3. How we use personal information

We may use personal information to:

  • Respond to enquiries and arrange consultations
  • Understand your business requirements
  • Prepare proposals and provide our services
  • Design, configure, test, monitor and support AI Workers and automation systems
  • Communicate with clients and prospective clients
  • Manage our contracts, accounts and business relationships
  • Process invoices and payments
  • Maintain and improve our website and services
  • Protect our systems and investigate security issues
  • Comply with legal, regulatory and contractual obligations
  • Send business updates or marketing communications where you have consented or where otherwise permitted by law

You may unsubscribe from marketing communications at any time. We will still send operational or service-related communications where necessary.

4. AI and automated processing

Our services may involve artificial intelligence, automation platforms and third-party technology providers.

Depending on the agreed solution, information may be processed automatically to perform tasks such as:

  • Classifying or organising enquiries
  • Extracting information from documents or communications
  • Preparing draft responses
  • Routing work to the appropriate person
  • Producing summaries, reports or recommendations
  • Identifying items that require human review

We design our solutions around the client’s approved workflow and agreed instructions. Where appropriate, automated outputs are presented for human review before action is taken.

We do not sell client information. We also do not intentionally use confidential client information to train publicly available AI models. The treatment of information by third-party providers is subject to the applicable service configuration, contractual terms and privacy arrangements.

Clients remain responsible for ensuring they have the authority to provide personal information to us and to use it within their chosen workflow.

5. Third-party service providers

We may use trusted third-party providers to operate our business and deliver our services. These may include providers of:

  • Website hosting and online forms
  • Cloud storage and databases
  • Email and business communications
  • AI and machine-learning services
  • Workflow automation
  • Client portals and dashboards
  • Scheduling and video conferencing
  • Accounting, invoicing and payment processing
  • Security, monitoring and technical support

We disclose information to these providers only where reasonably required to operate our business or provide the agreed services.

Some client solutions may also connect with software selected or already used by the client. Information processed through those systems will also be subject to the client’s arrangements with the relevant provider.

6. Overseas processing and storage

Some of our technology and service providers may store or process information outside Australia, including in the United States and other countries in which those providers or their infrastructure operate.

Privacy and data-protection laws in those countries may differ from Australian law. Where reasonably practicable, we select reputable providers and use available contractual, security and account controls to protect information.

The specific providers, hosting arrangements and data locations used for a client solution may vary depending on the project and can be discussed during the design and implementation process.

7. Cookies and website analytics

Our website may use cookies and similar technologies that are necessary for the website to function correctly.

We may also introduce analytics or other optional technologies to understand website usage and improve our services. Where consent is legally required, non-essential technologies will not be used until the visitor has been given an appropriate choice.

You can manage cookies through your browser settings. Disabling some cookies may affect certain website functions.

8. Security

We take reasonable technical and organisational measures to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

These measures may include:

  • Access controls and authentication
  • Restricted access based on business need
  • Secure cloud services
  • Encryption where supported and appropriate
  • Monitoring and system maintenance
  • Confidentiality obligations
  • Secure credential-management practices

No electronic transmission or storage method is completely secure. We cannot guarantee absolute security, but we will take reasonable steps to respond appropriately if a security incident occurs.

9. Retention

We retain personal information only for as long as reasonably necessary to:

  • Provide and support our services
  • Maintain business and client records
  • Meet legal, accounting or contractual obligations
  • Resolve disputes
  • Protect our legitimate business interests

Retention periods may vary depending on the type of information and the relevant client agreement.

When information is no longer required, we will take reasonable steps to delete it, de-identify it or securely dispose of it, subject to any legal or technical retention requirements.

10. Access and correction

You may request access to the personal information we hold about you or ask us to correct information that is inaccurate, incomplete or out of date.

We may need to verify your identity before completing a request. In limited circumstances, we may be unable to provide access where permitted or required by law. If this happens, we will explain the reason where appropriate.

11. Privacy complaints

If you have a concern about how we have handled your personal information, please contact us using the details below.

We will review your concern and aim to respond within a reasonable period. If you are not satisfied with our response, you may be entitled to contact the Office of the Australian Information Commissioner through the OAIC website .

12. Third-party websites

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices, content or security of those third parties. We recommend reviewing their privacy policies before providing personal information.

13. Changes to this policy

We may update this Privacy Policy when our services, technology or legal obligations change.

The latest version will be published on our website with its updated effective date. We encourage you to review this page periodically.

14. Contact us

For privacy questions, requests or complaints, please contact:

NexaFlow
P.A. Arias & J.L. Murray trading as NexaFlow
Sydney, New South Wales, Australia
Email: hello@nexaflowai.com
Website: www.nexaflowai.com.au

Real results from real teams

image of entrepreneur working at desk (for a fintech company)
image of studio setting (for a game development company)
image of financial news broadcast
image of quality control check (for a manufacturing plant)
image of people working in an office setting (for an ai saas company)

Our processes run on autopilot now. We save hours every week and focus on what matters.

Alex Rivera
Agency Owner
image of customer service area (for a department store)

Seamless integrations, instant onboarding, and less manual work. The difference is night and day.

Taylor Singh
Marketing Lead
image of digital transformation process (for a consulting firm)

Automation paid off fast. Setup was smooth, and support is always there when we need it.

Jordan Patel
Operations Manager
image of diverse team brainstorming (for an ai saas company)

Lead capture is automatic and follow-up is effortless. Our team is more efficient than ever.

Morgan Chen
Project Coordinator