Privacy Policy

1. Introduction

Connexa ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website myconnexa.com and use our services.

We comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Data Controller

Connexa is the data controller for the personal data processed through our website and services.

3. Information We Collect

3.1 Information You Provide

• Contact Information: Name, email address, phone number, company name when you submit forms or request demos
• Communication Data: Messages, feedback, and correspondence you send us
• Account Information: Login credentials if you create an account

3.2 Information Collected Automatically

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, click patterns
• Location Data: General geographic location based on IP address
• Cookies: See our Cookie Policy section below

4. Google User Data (Calendar and Ads)

When a customer chooses to connect a Google account through Connexa, we access Google user data through Google's OAuth consent screen. The customer sees and approves the exact permissions before any access is granted, and access is limited to the features described below.

4.1 Google Calendar

With the customer's permission we use the calendar.readonly and calendar.events scopes so that Connexa AI sales crew members can read availability and create or update meeting events on the customer's Google Calendar when booking meetings with their leads.

4.2 Google Ads

With the customer's permission we may access Google Ads account and campaign data in order to provide the Connexa Ads Agency features inside the product, such as reporting on campaign performance and preparing campaign changes for the customer to review.

4.3 How We Use and Protect Google User Data

• We use Google user data only to provide the features the customer requested.
• We do not sell Google user data.
• We do not use Google user data for advertising purposes.
• We do not use Google user data to develop, improve, or train generalized AI or machine learning models.
• We do not transfer Google user data to others except as needed to provide or improve these features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to the customer.

4.4 Storage, Retention and Revoking Access

OAuth tokens and connection metadata are stored securely using encryption, are accessible only to the systems that operate the connected feature, and are kept only while the connection is active or as long as reasonably required to provide the service and to meet legal obligations. A customer can disconnect Google at any time from within Connexa, or revoke Connexa's access directly at https://myaccount.google.com/permissions. When access is revoked, the stored token is deleted and Connexa stops reading from or writing to that Google account.

Connexa's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. How We Use Your Information

We use your personal data for the following purposes:

• To respond to your inquiries and provide customer support
• To schedule and conduct product demonstrations
• To provide Google Calendar meeting booking and Google Ads campaign management when you connect those integrations, as described in section 4
• To send you marketing communications (with your consent)
• To improve our website and services
• To analyze usage patterns and optimize user experience
• To comply with legal obligations
• To detect and prevent fraud or security threats

6. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Consent: When you opt-in to marketing communications or accept non-essential cookies
• Contract: When processing is necessary to fulfill our contractual obligations
• Legitimate Interests: For business operations, security, and improving our services
• Legal Obligation: When required to comply with applicable laws

7. Data Sharing and Disclosure

We may share your personal data with:

• Service Providers: Third parties who assist with email delivery, analytics, and hosting
• Business Partners: When you request integration with third-party services
• Legal Authorities: When required by law or to protect our rights

We do not sell your personal data to third parties.

Google user data is never sold. It is shared only with the subprocessors required to operate the service — for example our application and database hosting providers — and only so that the connected feature can run. Google user data is never shared with advertising networks or used for advertising unrelated to the customer's own campaigns.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Contact form submissions are retained for 3 years unless you request earlier deletion.

9. Your Rights

Under GDPR and other applicable laws, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@myconnexa.com. We will respond within 30 days.

10. Cookie Policy

We use cookies and similar technologies on our website:

Essential Cookies

Required for website functionality. Cannot be disabled.

Analytics Cookies

Help us understand how visitors interact with our website. Enabled only with your consent.

Marketing Cookies

Used to deliver personalized advertisements. Enabled only with your consent.

11. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption, access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

13. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.