NEXVATO / SITE INFORMATION
Privacy policy
How we collect, use, and protect your information.
Overview / Last updated: September 2026
Nexvato LLC ("Nexvato," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website nexvato.com (the "Site") or use our digital marketing and AI automation services (collectively, the "Services").
Important: By accessing or using our Services, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access the Site or use our Services.
1. Information we collect
Personal information you provide
We collect information you voluntarily provide when you:
- Fill out contact forms or request quotes
- Subscribe to our newsletter
- Request a free audit or consultation
- Create an account or use our services
- Communicate with us via email, phone, or chat
This information may include:
- Name, email address, and phone number
- Company name and website URL
- Business information relevant to our services
- Payment information (processed securely through third-party providers)
- Any other information you choose to provide
Information automatically collected
When you visit our Site, we automatically collect certain information, including:
- Device information (browser type, operating system, device type)
- IP address and general location data
- Pages visited, time spent on pages, and navigation paths
- Referring website or source
- Date and time of access
2. How we use your information
We use the information we collect to:
- Provide, operate, and maintain our Services
- Process and fulfill service requests
- Send you marketing communications (with your consent)
- Respond to your inquiries and support requests
- Improve our website and services
- Analyze usage patterns and trends
- Protect against fraudulent or unauthorized activity
- Comply with legal obligations
3. Information sharing and disclosure
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: With trusted third-party vendors who assist us in operating our business (hosting, analytics, email marketing, payment processing)
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- Legal Requirements: When required by law or to protect our rights
- With Your Consent: When you have given us explicit permission
4. Cookies and tracking technologies
We use cookies and similar tracking technologies to:
- Remember your preferences and settings
- Analyze website traffic and usage
- Deliver targeted advertising
- Improve user experience
You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our Site.
Third-party analytics and tools we use
The following third-party tools may set cookies or collect usage data on this Site, and only run in the categories you allow through the “Cookie Settings” link in our footer:
- Analytics: Google Analytics 4, Microsoft Clarity (session analytics with form fields masked), and Crazy Egg (heatmaps).
- Marketing: Google Tag Manager and the Meta (Facebook) Pixel, used to measure the effectiveness of advertising.
- Necessary: Cloudflare Turnstile protects our contact form from automated abuse, subject to Cloudflare’s privacy policy. Our site also stores your theme, atmosphere, and cookie choices. Separate customer applications have their own account, security, and payment requirements.
You can change or withdraw your choices at any time from “Cookie Settings” in the footer. We honor the Global Privacy Control browser signal as an opt-out from analytics and marketing cookies. Form submissions are sent to our CRM (GoHighLevel) and to our team by email so that we can respond to you.
5. Data security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption for data transmission
- Secure data storage and access controls
- Regular security assessments and updates
- Employee training on data protection
However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Your rights and choices
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal information
- Opt-Out: Unsubscribe from marketing communications at any time
- Data Portability: Request your data in a machine-readable format
To exercise these rights, please contact us using the information provided below.
California privacy rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, request deletion, and opt-out of the sale of personal information. We do not sell personal information.
7. Google user data
Information we receive from Google
When you connect a Google account to Nexvato, you choose which features to turn on, and we request only the permissions those features need. Depending on what you turn on, Nexvato may access:
- Google sign-in: Your name, email address, and profile picture, to create your account and sign you in.
- Google Business Profile: Your business locations, business information, performance data (such as calls, website clicks, and direction requests), and reviews, so we can show them in your dashboard, help you keep your information accurate, and reply to reviews when you choose to.
- Google Analytics: Read-only reports from the Google Analytics 4 property you select, such as traffic, engagement, and key events, shown in your SEO reports.
- Google Search Console: Read-only search performance data for the websites you verify, shown in your SEO reports.
- Google Calendar: The calendars you choose, so your AI booking agent can check availability and create, move, or cancel appointments, and so the meetings feature can find your upcoming Google Meet events.
- Google Meet: Transcripts of meetings you organize, only after you turn on meeting transcription, so we can create follow-up tasks from what was agreed.
- Gmail (send only): Permission to send messages that you or your AI agent write, such as follow-ups and booking confirmations, from your own address. Nexvato does not read your mailbox.
How we use and protect Google user data
- We use Google user data only to provide and improve the features you turned on. We do not sell it, and we do not use it for advertising.
- We do not allow humans to read your Google user data unless you give us permission (for example, when you ask our support team for help, or when our team manages a service for you, such as Full Service SEO), it is necessary for security, or it is required by law.
- Access tokens are encrypted at rest. Reporting data we copy from Google (for example, Analytics and Search Console summaries) is stored in your account so your dashboard loads quickly, and is only visible to people you give access to.
- Meeting transcripts may be processed by our AI service provider solely to extract tasks for you. We do not use data from Google APIs to develop, improve, or train generalized artificial intelligence or machine-learning models.
Your choices and deletion
- You can disconnect Google at any time in Nexvato under Settings → Integrations, or revoke access at https://myaccount.google.com/permissions.
- When you disconnect, we revoke our access with Google and stop accessing your Google data. You can ask us to delete Google data we have stored for your account by contacting hello@nexvato.com. We complete deletion within 30 days.
Limited Use
Nexvato's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
8. Third-party links and services
Our Site may contain links to third-party websites and services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.
9. Children's privacy
Our Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.
10. International data transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Services, you consent to the transfer of your information to the United States and other jurisdictions.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the Services after such modifications constitutes your acceptance of the updated policy.
12. Contact us
If you have any questions about this Privacy Policy or our data practices, please contact us: