Privacy Policy

1. Introduction

Nodus AI Systems ("we", "our", or "us") operates an AI-powered agency platform. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

2. Information We Collect

• Account information (name, email address)
• Business information (business name, description)
• Social media account tokens (Facebook, Instagram, LinkedIn) — used solely to post content on your behalf
• Email account credentials (Gmail) — used solely to send emails on your behalf
• Payment information (processed securely via Stripe — we do not store card details)

3. How We Use Your Information

• To provide and operate our AI agency services
• To post social media content on your behalf using your connected accounts
• To send emails on your behalf using your connected Gmail account
• To process payments and manage your subscription
• To improve our platform and services

4. Data Security

All credentials and access tokens are encrypted using AES-256 encryption before being stored. We never store or share your credentials with third parties beyond what is necessary to provide our services.

5. Our Role as a Tech Provider

Nodus AI Systems acts as a Tech Provider for our subscribed business clients. Where you are a subscribed client, we access your connected business assets — including Meta Pages, Instagram Business accounts, WhatsApp Business accounts, Google Workspace (Gmail, Calendar, Google Ads), and any external CRM you have connected — solely on your behalf to perform the automation actions you have configured within our platform. We do not sell, transfer, or repurpose your data — including any Meta data — for any purpose outside the services you have explicitly engaged us to provide. We do not use your data to train AI models, build advertising profiles, or share with unrelated third parties.

Our platform integrates with the following third-party services, which act as sub-processors of your data under our direction:

• Anthropic — large-language-model processing for AI-generated content, lead scoring, and call analysis (data processed in the United States).
• Meta Platforms (Facebook, Instagram, WhatsApp Business) — social posting, messaging, and advertising on your connected business accounts.
• Google (Gmail API, Google Calendar, Google Ads) — email sending, calendar booking, and advertising on your connected business accounts.
• LinkedIn — social posting on your connected LinkedIn pages.
• Retell AI — voice agent infrastructure including call processing and transcription.
• Twilio — telephony, SMS, and WhatsApp message delivery.
• Stripe — payment processing and subscription billing (PCI-DSS compliant).
• Apollo.io — B2B contact enrichment, used only for Agency-tier clients who have opted in.
• Resend — transactional system email delivery (welcome emails, internal alerts).
• Railway — application hosting and infrastructure (primary region: AWS Asia Pacific — Sydney).

Your use of these integrations is also subject to the respective privacy policies of those platforms. We retain commercially reasonable contractual safeguards with our sub-processors and review their privacy and security practices periodically.

6. Data Retention

We retain your data for as long as your account is active. You may request deletion of your data at any time by contacting us. Upon cancellation, your credentials and connected account tokens are deleted within 30 days.

7. Your Rights

You have the right to access, correct, or delete your personal data at any time. To exercise these rights, please contact us at the email below.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at: hello@nodusaisystems.com