Your data

Your customer list stays yours.

What we do with your list

We store it to send the messages that go out in your name. Nothing else.

We never sell or share it

We do not sell, rent or trade your customer data, and we do not use it to market to your customers on our own behalf.

Every message is yours

Messages to your customer list go out in your business name only after you approve each one, and a draft you do not approve expires unsent. A few notices to your plan members go out on their own: payment receipts, the welcome email, failed-payment and yearly renewal notices, confirmations of what a member did, the notice after you answer a visit request, the automatic "we got your message" note (unless you switch it off), and replies to STOP and HELP texts. Mail to your members comes from your own email domain once you verify one, and from ours until then.

Consent and opt-outs

We only send marketing to customers you tell us have consented, and to plan members who have not opted out. Every marketing email carries one-click unsubscribe for your business, and an unsubscribe takes effect immediately for every marketing email we send for you. Notices about a member's own plan and payments, like receipts and renewal notices, are not marketing and carry no unsubscribe link.

Export and deletion

Export your full list from the portal while you are a client. Delete your account and everything goes 7 days later, when your time to change your mind ends. Never later than 37 days. You can delete your list from the portal yourself at any time, and when you do, the list, its drafts and its queued messages are deleted at once. A few things stay behind: our own record that an email was sent, which keeps the subject and date, with the address replaced by a keyed code, and is how we show we followed the rules; the entries on our bounce, complaint and unsubscribe lists, with the address or number replaced by the same keyed code, kept for as long as Nxera operates so nobody is mailed or texted by mistake; a one-way fingerprint of each address that was sent your plan invite, so nobody gets it a second time if you upload the same list again; consent and opt-out records with the address or number replaced by the keyed code and the IP address and browser details removed, which keep only the date, the wording shown and its version, and are deleted four years after the deletion; and copies in our database provider's routine backups until those backups are replaced.