Build the CRM your business actually needs

This Privacy Policy explains how Nesto CRM collects, uses, shares, and protects information when you use our website, applications, and related services (the “Service”).

Information we collect

We collect account information such as your name, email address, profile details, and authentication events; workspace content such as CRM records, files, settings, and communications you choose to store; and technical information such as device, browser, IP address, diagnostics, security events, and feature usage.

How we use it

We use information to provide and personalize the Service, authenticate users, create and maintain workspaces, prevent fraud and abuse, support users, diagnose problems, improve features, comply with law, and send service-related notices. We do not sell personal information or use CRM content for third-party advertising.

How we share information

We share information with infrastructure and service providers only as needed to operate Nesto, such as hosting, database, authentication, security, email, AI, and connected-integration providers. We may also disclose information when required by law, to protect rights and safety, or in connection with a business transaction. We do not permit service providers to use CRM content for their own marketing.

Connected services and AI

If you connect another service, Nesto exchanges the information needed to perform the action you request under that provider’s terms. When you use an AI feature, relevant instructions and content may be sent to the selected AI provider to generate a response. Do not place regulated or highly sensitive information in early-access AI prompts.

Security and storage

Data is stored with infrastructure providers including Supabase and Vercel. Nesto uses access controls, encryption in transit, row-level database policies, backups, and monitoring designed to protect data. No system is completely secure, so keep an independent copy of important business data during early access.

Retention

We retain information while your account is active and as reasonably needed to provide the Service, resolve disputes, prevent abuse, and meet legal obligations. Deletion may take time to propagate through secured backups, which expire on a limited schedule.

Your choices and rights

You can update profile and workspace information, export supported data, and delete workspaces or your account in Settings. Depending on where you live, you may also request access, correction, deletion, portability, or restriction of certain processing by contacting us. We may need to verify your identity before completing a request.

Cookies

We use essential cookies and similar technologies for authentication, security, session continuity, and core preferences. Nesto does not use non-essential advertising cookies by default.

Children

The Service is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this Policy as Nesto develops. If a change materially affects how we handle information, we will provide reasonable notice in the Service or by email.

Contact

Privacy questions? Email privacy@nestocrm.com.