Privacy Policy

1. Introduction

NimbleBiz ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered support agent platform and related services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you provide directly to us, including:

• Name and contact information (email, phone number)
• Organization details and business information
• Account credentials and profile information
• Payment and billing information
• Communication preferences

2.2 Usage Information

We automatically collect certain information about your use of our services:

• Chat conversations and interactions with AI agents
• Document uploads and processing data
• Usage patterns and feature utilization
• Technical information (IP address, browser type, device information)
• Performance and error logs

2.3 Lead Information

When our AI agents capture leads on your behalf, we collect and store:

• Contact information (name, phone number, email)
• Conversation history and captured details
• Lead status and interaction tracking
• Source and timestamp information

3. How We Use Your Information

We use the collected information for the following purposes:

• Providing and maintaining our AI support services
• Processing and managing lead capture and storage
• Improving AI agent performance and accuracy
• Personalizing user experience and recommendations
• Processing payments and managing subscriptions
• Communicating with you about service updates and support
• Ensuring security and preventing fraud
• Complying with legal obligations

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in operating our platform
• AI Processing: With AI service providers, for the sole purpose of generating the responses and extracting the information you have asked NimbleBiz to produce. Data sent for this purpose is processed per request and is not used by us or our providers to train generalized AI or machine learning models.
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Consent: With your explicit consent for specific purposes

5. Google User Data

If you choose to connect your Google account, NimbleBiz accesses a limited set of Google user data to provide features you have explicitly requested. Connecting Google is optional, and NimbleBiz works without it.

5.1 What We Access

• gmail.readonly: to read incoming emails in the connected mailbox so we can identify customer enquiries, extract the sender's name, email address, phone number and enquiry details, and create a lead record in your workspace. We use Gmail push notifications so new enquiries are captured promptly.
• gmail.send: to send a reply from your connected mailbox to a customer who has emailed you, in the same thread, only when you have enabled automatic replies.
• calendar.events: to read your calendar events and to create or update events when you or your customer requests an appointment through NimbleBiz.

5.2 How We Use It

Google user data is used only to provide the lead capture, reply and scheduling features described above. To generate a reply or extract lead details, the content of the enquiry email may be sent to our AI provider for that single request. It is never used for advertising, never sold or rented, and never used to develop, improve or train generalized AI or machine learning models.

5.3 What We Store

• OAuth access and refresh tokens, encrypted at rest
• The identifiers of messages already processed, so the same email is not handled twice
• The enquiry content and extracted contact details, stored as a lead and conversation record in your own workspace

We do not download, copy or archive your mailbox, and we do not modify, label, archive or delete your email.

5.4 Human Access

No NimbleBiz employee reads your Google user data, except: with your explicit consent, for example when you ask us for support; where necessary for security purposes such as investigating abuse; to comply with applicable law; or where the data has been aggregated and anonymised for internal operations.

5.5 Retention and Deletion

You can disconnect Google at any time from the Integrations page. Disconnecting revokes our tokens with Google, stops all further access and deletes the stored tokens. Leads and conversations already created remain in your workspace under your control, and can be deleted by you or by contacting help@nimblebiz.ai.

5.6 Limited Use

NimbleBiz's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure data storage, access controls, and regular security assessments.

7. Data Retention

We retain your information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Lead information is retained according to your organization's settings and legal requirements.

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Opt-out: Opt out of certain communications and data processing
• Complaints: Lodge complaints with relevant data protection authorities

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and provide personalized content. You can control cookie settings through your browser preferences.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

11. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: