Nexus Flow Innovations Pty Ltd (“NFI”) values your privacy and is committed to protecting the data entrusted to us. This privacy notice explains what personal data we collect from you and how we use it. This privacy notice applies if you:

• Visit NFI corporate websites, social media, or other web pages located on third-party websites.

• Use any websites or applications (including mobile applications) developed by NFI.

• Provide NFI with business contact information or register to attend any of NFI's corporate events.

This privacy notice does not apply if you use a service provided by an NFI affiliate (Third Party Service providers) that has its own privacy notice.

1. What Information Do We Collect From You?

1.1 Information Provided to NFI by a Brand/Customer

If you engage with a brand that uses our Services (“Brand(s)” or “Customer(s)”), the data collected by the Customers and provided to NFI may include:

• A transcript of the conversation between you and the Customer on their website, mobile apps, and other media they use to communicate with you via our Services.

• Information on behalf of and requested by the Customer such as information related to your browsing, purchasing, and online behaviour and activities.

• Automatic information such as IP address, operating system, and type of device used.

You decide what information to provide during any communication or engagement session with NFI or any Customer. Depending on your request, it may not be possible for us or our customer to address all your questions without further information from you. If you do not wish to provide certain information, you should not do so.

For clarity, in such instances as listed above, NFI is a Processor, not a Controller, of personal data that we process on behalf of our customers to provide our Services. If you have questions related to how our customers use your data, please contact such Customer(s) directly. Our customers may have different privacy and data security practices that we cannot control. We are not responsible for the privacy and data security practices of our customers.

1.2 Information Collected About You Through Our Digital Properties

If you visit our websites, contact us directly, or use our apps, the data collected may include:

• Information you provide to us such as:

  • Personal information like your name and contact information.

  • Surveys, transcripts, and recordings of your communications with us.

  • Information you provide or content you upload or submit to our websites, applications, website communities, message boards, and blogs.

  • Business information including business contact information that you provide to us or information similar to what would appear on a business card.

• Automatic information such as:

  • Web browser and usage information including IP address, browser types, page view tallies, time spent on each page, page browsing information, operating system, and type of device used.

2. How Does NFI Collect Information From You?

2.1 Through Our Brands/Customers

A Brand that has enabled our technologies on its website or in its mobile applications, voice or SMS messaging capabilities, social media page/profile, or other digital engagement solutions may collect your personal information and provide this information to us for processing purposes.

2.2 Through Our Digital Properties

NFI automatically collects information on its digital properties through the use of cookies, web pixels, and related technologies. For more information about these technologies, see Section 5 below.

NFI also collects information that you directly provide to us, including user-submitted content on NFI websites and apps.

2.3 General

In addition, we may collect information through the following methods:

• Your communications with NFI, including direct conversations with NFI personnel via digital channels.

• Your requests for information, news, and other content.

• Your participation in or use of one or more NFI websites, applications, communities, message boards, or blogs.

• A technical support request you submit.

• Your participation in an NFI promotion.

• Recruitment and job applications.

We may also collect information from our direct interactions with you (such as through your attendance at a trade show or through direct sales inquiries or conversations), publicly available data, or data provided by third-party sources such as marketing opt-in lists.

3. How Does NFI Use the Information It Collects About Me?

3.1 Through Our Brands/Customers

If you engage with a Brand, we use the information collected by the Brand to provide our services to the Brand and as directed by the Brand. Common uses of such information include:

• Determining whether to deploy a chat button or other content.

• Developing and improving the NFI Services.

• Developing marketing campaigns.

If you engage with a Brand that uses our Services, we may retain your information for a period as contractually agreed upon with the Brand.

3.2 Through Our Digital Properties

If you visit our websites or use our apps directly, we may also use your information for the following purposes:

• To deliver information requested by you, for example in response to technical support requests.

• To improve the webpage view and provide a consistent web browsing experience.

• To adapt our content to your settings and device configuration.

3.3 General

NFI uses information you provide through various channels for ordinary business activities including:

• To deliver marketing materials to you.

• To provide service updates and business-related notifications.

• To assess and improve our business operations.

• For promotions you may enter into.

• If you submit a resume or CV to be considered for employment with NFI.

NFI may retain your information for a period of time consistent with the original purpose of collection. We may also retain your information during the period of time needed for NFI to pursue our legitimate business interests, conduct audits, comply with our legal obligations, resolve disputes, and enforce our agreements.

4. What is NFI’s Legal Basis for Processing Information?

We process your information if you have given your consent (to us or our Customers as applicable); if it’s necessary to perform a contract with you or to take steps at your request prior to entering into a contract; if it’s necessary to comply with legal obligations; and/or if it’s necessary for us or a third party (such as a Customer) to pursue a legitimate interest.

5. Cookies and Similar Technology

We use cookies and other identification technologies to deliver and improve the Services and to enhance customer experience.

5.1 Through Our Digital Properties

• Cookies: Cookies are small text files stored on a visitor’s web browser and applications. Cookies are often used to make browsing easier by performing functions such as saving passwords and maintaining lists of personal preferences regarding the use of the website.

  • Strictly Necessary Cookies: These cookies are essential to enable you to browse our websites, apps, and Services and use the available features.

  • Functionality Cookies: These cookies allow our websites, apps, and Services to remember choices you make while browsing, such as geographic location and preferences such as text size and fonts.

  • Performance Cookies: These cookies collect information about how you use our websites, apps, and Services. For instance, these cookies track which pages you visit most. This data may be used to help optimize our websites, apps, and Services and make it easier for you to navigate within them.

  • Analytics Cookies: These cookies track your activity on our websites, apps, and Services. We may use these cookies to provide advertisements to you. These cookies can be disabled through the pop-up banner on our website or by clicking the “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” link in our website footer.

• Other identification technologies that may be used by NFI Services:

  • Pixel tags (also called beacons or pixels): These are first- or third-party tags installed on (or called by) a webpage or application. Pixel tags can retrieve certain information about your device and browser including device type, operating system, browser type and version, website visited, time of visit, referring website, IP address, and other similar information. NFI uses pixel tags to identify conversions of users on our website and to assess certain website activity or events such as when a user fills out a form or clicks on a link.

  • Software Development Kits (SDKs): These function like pixels and cookies but operate in the mobile application context where pixels and cookies cannot always function. The application developer can install pieces of code (the SDK) into the application to collect certain information about user interaction with the application and information about the user device and network information.

• First and third-party technologies: We may use first-party cookies or other tracking technologies as described above – these cookies or technologies originate from the same domain as the website you’re currently visiting (i.e., www.nexusflowinnovations.com). NFI may also use third-party service providers who are authorised to place cookies, pixel tags, or similar technologies on our Services with our permission. These technologies help us compile metrics and analytics to help improve our Services. Third-party cookies and technologies are covered by the third party’s privacy notice.

5.2 Through Our Brands/Customers

When you use NFI’s Services through a Brand, be aware that NFI’s systems are designed to handle cookie management in accordance with data subject consent. However, it is our Brand’s responsibility to obtain (and maintain) your consent before using our platform’s cookies and related technologies on the Brand’s websites. Given that our Brands may differ in their implementation of our product, you should consult with them directly regarding their use of NFI’s product-related cookies.

5.3 How to Control Cookies

Web browsers are usually set to accept cookies. However, if you prefer not to receive cookies, you can set your browser to either notify you when you receive a cookie or refuse cookies altogether. You can also delete cookies from your browser. If you choose to refuse cookies, this may cause some features of our Services not to operate properly and affect your experience.

5.4 Do Not Track

Some web browsers may give you the ability to enable a "Do Not Track" (DNT) feature that sends signals to the websites you visit, indicating that you do not want your online activities to be tracked. NFI currently does not respond to DNT signals. As there is no uniform standard for how to interpret and respond to DNT signals, we will continue to monitor and review DNT and may adopt a standard once it is established. For more information about DNT, visit allaboutdnt.com.

6. How Does NFI Share Your Information?

6.1 Through Our Brands/Customers

When you use NFI’s Services through a Brand, your personal information may be accessible by the Brand that has contracted with us to provide the Services.

6.2 Through Our Digital Properties

NFI does not sell your personal information to third parties. We may disclose your personal information in the following circumstances:

• Service Providers: We may share your personal information with trusted third-party service providers who perform services on our behalf, such as cloud storage providers (e.g., Amazon Web Services).

• Business Transfers: We may disclose personal information as part of any merger, acquisition, sale of company assets, or transition of service to another provider.

• Legal Requirements: We may disclose personal information if required to do so by law or in the good-faith belief that such action is necessary to comply with applicable laws or respond to a court order, judicial or other government warrant, or legal process.

• Protection of Rights: We may disclose personal information if we believe it is necessary or appropriate to protect the rights, property, or safety of NFI, our customers, or others.

7. What Rights Do I Have Regarding My Information?

7.1 Through Our Brands/Customers

If you engage with a Brand, please contact the Brand directly to understand your rights regarding your information and how you can exercise them. NFI is not responsible for how a Brand handles your personal information.

7.2 Through Our Digital Properties

If you visit our websites or use our apps directly, you have certain rights regarding your personal information, which may include the following:

• Right to Access: You have the right to request a copy of the personal information we hold about you.

• Right to Rectification: You have the right to correct any inaccurate or incomplete personal information we hold about you.

• Right to Erasure: You have the right to request that we delete your personal information, subject to certain conditions.

• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal information, subject to certain conditions.

• Right to Data Portability: You have the right to request that we transfer your personal information to another organisation, or directly to you, in a structured, commonly used, and machine-readable format, where technically feasible.

• Right to Object: You have the right to object to our processing of your personal information, under certain conditions.

• Right to Withdraw Consent: If our processing is based on your consent, you have the right to withdraw your consent at any time.

If you wish to exercise any of these rights, please contact us at info@nexusflowinnovations.com.

8. How Does NFI Secure My Information?

We take data security seriously and built our platform with security in mind. User data is end-to-end encrypted, and uploaded files are securely stored in encrypted S3 buckets. We have “zero data retention” agreements with our model providers (Open AI and Anthropic) to ensure that data is not stored or used for training purposes. We use security measures designed to protect against the loss, misuse, and alteration of the information under our control. Our systems are hardened against intrusion with a robust defence strategy incorporating industry-standard security controls in all its products and services.

We also offer various supplementary measures available to our Brands, upon request, including additional encryption and data masking options. If you are communicating with a Brand, you should review the privacy practices of that Brand to understand which security measures they use.

9. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. When determining the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the data, and applicable legal requirements.

10. Additional mobile considerations

If you use our mobile applications, access our mobile-optimized websites, or interact with a Brand using our Services on a mobile platform, we may receive information about your mobile device, including a unique identifier.

Opt-out instructions are provided for SMS messages received from NFI or a Brand, and contact details are offered for further assistance. If you no longer wish to receive SMS messages from us or a Brand, please follow the opt-out instructions included in the message or contact the Brand directly.

11. NFI Communities, Message Boards, and Blogs

Information you share on NFI communities, message boards, or blogs becomes publicly accessible and can be read, collected, copied, and used by other users for any purposes at their discretion. As this information is public, NFI’s privacy obligations as outlined in this privacy notice do *not* apply to it. However, NFI will comply with data subject requests related to your use of such platforms as required by law. We strongly advise you to exercise caution when sharing any personal information on these platforms.

12. International Data Transfers

Please be aware that we may transfer your personal data outside of your country of origin to provide a better customer experience. By providing your personal data, you consent to this transfer. We will implement appropriate safeguards to ensure your data is protected in accordance with this privacy notice, applicable data protection laws, contractual obligations with our Customers, and, where required, suitable legally recognized data transfer mechanisms. These may include certifications, binding corporate rules, or standard data protection clauses.

13. Children

Our Services are not intended for individuals under the age of 16. If you are under 16, you are prohibited from using our Services or providing any personal information without valid parental or legal guardian consent. NFI does not knowingly collect personal information from individuals under 16. If you are a parent or guardian and believe your child under 16 has provided personal information to NFI, please contact us immediately at info@nexusflowinnovations.com to request access, rectification, cancellation, and/or objection rights as applicable. NFI reserves the right to delete any information from individuals it reasonably believes are under 16, to the extent permitted by law.

14. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post any changes to this notice on our website, and we encourage you to review it periodically to stay informed about how we are protecting your information.

15. Contact Us

If you have any questions or concerns about this Privacy Notice or our data practices, please contact us at:

Nexus Flow Innovations Pty Ltd Email: info@nexusflowinnovations.com.