Privacy Policy

Last updated: April 9, 2026

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Nysonik CRM platform (the "Service") and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service, including unified inbox, customer chat, email integration, social media messaging, campaigns, analytics, and related CRM features. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for You to access our Service or parts of our Service.
  • Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
  • Company (referred to as either "the Company", "We", "Us" or "Our") refers to Nysonik, 6255 N Hollywood Blvd, Suite 150, Las Vegas, Nevada, 89115.
  • Cookies are small files placed on Your device by a website, containing details of Your browsing history among its many uses.
  • Country refers to: Nevada, United States.
  • Device means any device that can access the Service such as a computer, a cell phone or a digital tablet.
  • Personal Data is any information that relates to an identified or identifiable individual.
  • Service refers to the Nysonik CRM platform, including the Website and all related features.
  • Service Provider means any natural or legal person who processes data on behalf of the Company.
  • Usage Data refers to data collected automatically from the use of or the Service infrastructure.
  • Website refers to Nysonik, accessible from https://nysonik.com.
  • You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide personally identifiable information including, but not limited to:

  • Email address
  • First name and last name
  • Account and profile information
  • Usage Data

When You use the CRM to manage customer conversations, emails, or social media messages, We also process data about your end-users and customers on Your behalf (e.g., conversation content, email content, social media message content, form submissions). We process that data solely to provide and support the Service, in accordance with this Privacy Policy and applicable platform policies.

Usage Data

Usage Data is collected automatically when using the Service and may include information such as Your Device's IP address, browser type and version, pages visited, time and date of Your visit, time spent on pages, unique device identifiers, and other diagnostic data.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track activity on Our Service and store certain information. We use both Session and Persistent Cookies for the following purposes:

  • Necessary / Essential Cookies — Required to provide services and authenticate users.
  • Cookies Policy / Notice Acceptance Cookies — Identify if users have accepted cookie usage.
  • Functionality Cookies — Remember choices such as login details or language preferences.

Gmail API Integration

Our Service integrates with the Google Gmail API to provide email management functionality. When You connect Your Gmail account, We request the following permissions:

  • Read-only access: View Your email messages and settings to display emails in our inbox interface.
  • Send emails: Send emails on Your behalf to respond to customer inquiries.
  • Modify emails: Read, compose, and send emails to manage customer communications.
  • User information: Access Your email address to identify Your account.

We use Your Gmail data solely to:

  • Receive and display incoming emails in our unified inbox.
  • Send email replies to customer inquiries on Your behalf.
  • Create and manage conversations from email communications.
  • Sync email data for customer support management.

We securely store OAuth tokens (access tokens and refresh tokens) encrypted in our database. We do not store Your Gmail password. You can revoke access at any time via Your Google Account settings or by disconnecting the account within our Service.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Meta Platform Integration (Facebook & Instagram)

Our Service integrates with the Meta Platform, including Facebook Messenger and Instagram, to provide social media messaging management as part of our unified CRM inbox. This section explains how we collect, use, store, and protect data obtained through Meta platform APIs.

Permissions We Request

When You connect a Facebook Page or Instagram Business Account to Nysonik, we request the following Meta platform permissions:

  • pages_show_list — To display and select the Facebook Pages associated with your account.
  • pages_manage_metadata — To subscribe to and manage webhook events for your Facebook Page.
  • pages_messaging — To receive and send messages via Facebook Messenger on behalf of your Page.
  • instagram_basic — To access basic information about your connected Instagram Business Account.
  • instagram_manage_messages — To receive and respond to Instagram Direct Messages on behalf of your Instagram Business Account.
  • instagram_business_basic — To access basic Instagram Business Account information via Instagram Business Login.
  • instagram_business_manage_messages — To receive and respond to Instagram DMs via the Instagram Business Login flow.

Data We Collect from Meta Platforms

Through the above permissions, we collect and process the following data solely to provide the Service:

  • Facebook Page ID, Page name, and Page access tokens.
  • Instagram Business Account ID and Instagram username.
  • Sender IDs (PSIDs) of users who message your Page or Instagram account.
  • Display names and usernames of message senders (where available via Meta APIs).
  • Profile pictures of message senders (where available).
  • Message content (text and media attachments) from Facebook Messenger and Instagram DMs.
  • Message timestamps and message IDs.

How We Use Meta Platform Data

We use data obtained from Meta platforms exclusively for the following purposes:

  • To display incoming Facebook Messenger and Instagram DMs in your Nysonik unified inbox.
  • To allow your support agents to reply to customers directly from the Nysonik platform.
  • To create and manage customer conversation threads within the CRM.
  • To identify and link conversations to the correct customer profile.

We do not use Meta platform data for advertising, profiling, or any purpose other than delivering the CRM inbox functionality described above. We do not sell, rent, or share Meta platform data with any third party except as strictly necessary to operate the Service (e.g., cloud hosting and database providers under confidentiality obligations).

Token Storage and Security

Page access tokens, user access tokens, and Instagram access tokens obtained through Meta OAuth flows are stored encrypted in our database. Tokens are never exposed to third parties or logged in plain text. Long-lived tokens (valid up to 60 days for Instagram Business Login tokens) are refreshed as needed. When You disconnect a social account, all associated tokens are immediately deleted from our systems.

Data Retention

OAuth tokens are deleted immediately upon disconnection of the social account. Conversation messages and customer profiles created from Meta platform data are retained for as long as Your Nysonik account is active or as required to provide the Service, unless You request earlier deletion. You may request deletion of all associated data by contacting us at nysonik@nysonian.com.

Your Rights and Control

  • Disconnect at any time: You can disconnect your Facebook Page or Instagram Business Account from within the Nysonik platform at any time, which immediately revokes our access and deletes stored tokens.
  • Revoke via Meta: You can also revoke Nysonik's access directly from your Facebook Settings > Apps and Websites or Instagram Settings > Apps and Websites.
  • Data deletion: Upon disconnection, all OAuth tokens are deleted. To request deletion of conversation history, contact us at nysonik@nysonian.com.
  • No selling of data: We do not sell Meta platform user data under any circumstances.

Compliance with Meta Platform Policies

Our use of Meta platform data complies with the Meta Platform Terms and the Meta Platform Developer Policies. We only request permissions that are necessary for the CRM messaging features described in this policy and do not use Meta data beyond the approved use cases.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

  • To provide and maintain our Service, including to monitor its usage.
  • To manage Your Account and Your registration as a user of the Service.
  • For the performance of a contract — the development, compliance, and undertaking of purchase or service contracts.
  • To contact You via email, telephone, SMS, or push notifications regarding updates or communications related to the Service.
  • To manage Your requests submitted to Us.
  • For business transfers — to evaluate or conduct a merger, acquisition, or sale of assets.
  • For other purposes — data analysis, identifying usage trends, and improving Our Service.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, to comply with legal obligations, resolve disputes, and enforce our agreements.

Transfer of Your Personal Data

Your information may be transferred to and maintained on computers located outside of Your state, province, country, or other governmental jurisdiction where data protection laws may differ. The Company will take all steps reasonably necessary to ensure Your data is treated securely and in accordance with this Privacy Policy.

Delete Your Personal Data

You have the right to delete or request that We assist in deleting the Personal Data We have collected about You. You may do so by signing into Your Account and visiting account settings, or by contacting Us. Please note that We may need to retain certain information when we have a legal obligation to do so.

Security of Your Personal Data

The security of Your Personal Data is important to Us. While We strive to use commercially reasonable means to protect Your Personal Data, no method of transmission over the Internet or method of electronic storage is 100% secure.

GDPR Privacy Rights

If You are a resident of the European Economic Area (EEA), You have certain data protection rights under the GDPR, including the right to access, rectification, erasure, restriction of processing, data portability, and the right to withdraw consent. Please contact us to exercise any of these rights.

California Privacy Rights (CalOPPA & CCPA)

California residents have the right to know what personal information we collect, request deletion of their data, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at nysonik@nysonian.com.

Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and believe Your child has provided Us with Personal Data, please contact Us immediately.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, You can contact us:

You can also review our Terms of Service and Vulnerability Disclosure Policy.