Privacy Policy
Last updated: 01/04/2026
Who We Are
NEXO Intelligence SL ("NEXO", "we", "us", "our") operates a B2B software platform that helps food service suppliers receive and process orders from their customers.
Legal entity: NEXO Intelligence SL
Registered address: Urb. La Cancela de la Quinta, C/ Aguamarina, edif 9, local 2, 29670 San Pedro Alcántara (Marbella), Spain
CIF: B27546712
Contact: info@nexoapp.es
Scope
This policy covers personal data processed when you use our website and platform. Our services are intended exclusively for business users. NEXO does not knowingly provide services to minors.
Our Role Under GDPR
As a data processor: When handling messages, orders, and related content on behalf of our supplier customers, we act on their instructions. Suppliers are the data controller for their contacts' data.
As a data controller: When processing data to operate our own business — account management, billing, security, and legal obligations.
What We Process and Why
Account and contact details (name, email, phone, company): Account creation and service delivery Contract (Art. 6(1)(b))
WhatsApp messages, including text, photos, and voice notes: Order processing on behalf of suppliers Contract (Art. 6(1)(b))
Order content (products, quantities, delivery instructions): Core service delivery Contract (Art. 6(1)(b))
Technical logs and error data: Security and service reliability Legitimate interests (Art. 6(1)(f))
Website usage data: Analytics and improvement Consent (Art. 6(1)(a))
AI-assisted processing: Incoming messages — including photos and voice notes — are processed using AI tools to extract structured order information. This assists users and does not produce automated decisions with legal effect. Orders require human review before confirmation.
We do not process special categories of data under Art. 9 GDPR.
Who We Share Data With
We share data with service providers who help us operate the platform, acting as sub-processors under our instructions. Categories include:
Infrastructure and database hosting
AI processing (text parsing, image OCR, audio transcription)
Messaging delivery (WhatsApp Business Platform)
Error monitoring
We do not sell personal data. A full sub-processor list is available to customers on request or within the platform's Data Processing Agreement (DPA).
International Transfers
Some of our sub-processors are based outside the EU, including in the United States. Where personal data is transferred to such providers, transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission.
Retention
We keep personal data only as long as necessary:
Platform and order data: For the duration of the active account, plus up to 60 days post-termination for data export.
WhatsApp message content and media: Deleted upon supplier disconnection or account termination (within 30 days).
Account records: As required by applicable tax and legal obligations (typically up to 7 years after contract end).
Technical logs: Up to 12 months.
Analytics data: Per provider settings, up to 14 months.
Your Rights
Under GDPR, you may request access, rectification, erasure, restriction, portability, or object to processing. Where NEXO acts as a processor, requests relating to data we hold on behalf of a supplier should be directed to that supplier.
For data NEXO controls directly, contact us at info@nexoapp.es or use the export/delete options in account settings.
You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD, www.aepd.es) or the supervisory authority of your EU member state.
This policy complies with the EU General Data Protection Regulation (GDPR) and the Spanish Ley Orgánica de Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD).
Security
We apply appropriate technical and organisational measures including encryption in transit and at rest, role-based access controls, and activity logging.
NEXO integrates the WhatsApp Business Platform to enable suppliers to receive orders. We process WhatsApp data (messages, media, phone numbers) solely for order automation, in compliance with Meta's Platform Terms.
Suppliers are solely responsible for ensuring they have a lawful basis to communicate with and process data from their contacts via WhatsApp and NEXO's platform.
Cookies
We use strictly necessary cookies for platform operation, and analytics cookies with your consent. See our Cookie Policy for details.
Changes
We may update this policy periodically. Material changes will be communicated by email to active users. The current version is always at nexoapp.es/privacy-policy.
Contact
For any questions regarding this Privacy Policy or data protection matters, please contact: info@nexoapp.es