Privacy Policy

Effective 17 August 2026

Nexora Invoice Desk is a service of Nexora Labs LLC, a Nevada limited liability company in Las Vegas, Nevada. This policy explains what information we handle, how we use it, and what we will never do with it.

It applies to our website, to our invoice follow-up service, and — importantly — to any Google account you connect to our service.

1. Who we are

Nexora Labs LLC, doing business as Nexora Invoice Desk. Our mailing address and contact details are at the bottom of this page. Nexora Labs LLC is the data controller for the information described here.

2. Information you give us directly

• Business and contact details — your name, business name, email address, phone number and mailing address.
• Invoice information — the details you provide so we can prepare reminders, such as customer name, invoice number, amount, issue date and due date.
• Approved reminder wording — the message templates you sign off on before any reminder is prepared.
• Correspondence — emails and messages you send us.

3. Google user data — what we access and why

If you choose to connect your Google account so that reminders go out from your own email address, Nexora Invoice Desk requests a single OAuth scope:

What this permission allows

It allows our system to send an email message from your Gmail or Google Workspace account. That is the entire extent of it.

What this permission does not allow — and what we therefore cannot do

• We cannot read any message in your mailbox — not your inbox, not your sent mail, not your drafts, not your archive.
• We cannot access your contacts, your calendar, your Google Drive files, or any other Google service.
• We cannot delete, modify or move anything in your account.
• We cannot see replies your customers send you. If a customer replies, that reply goes to you and only you.

How we use it

Solely to send invoice reminder messages, using wording you approved in advance, to the customers you identified, on the schedule you agreed. Every individual message is reviewed and approved by a person at Nexora before it is sent. We do not send automated messages you have not seen the wording for.

What we store

• An authorisation token from Google, held in encrypted form, which is what permits sending. It contains no message content.
• A record of what we sent — the recipient, the date and time, the invoice referenced and the approved template used. This is our audit trail and it is how you can see exactly what went out in your name.

We do not copy, download, index or retain the contents of your mailbox, because we have no ability to access it.

Limited Use disclosure

4. How you stay in control

• You approve the wording once, in writing, before any reminder is prepared. Wording is never changed without your approval.
• You can revoke our access at any time, instantly and without contacting us, at myaccount.google.com/permissions. Revoking access stops all sending immediately.
• You can ask us to delete your data. Email us and we will delete your stored authorisation and your records, other than anything we are required to retain by law or for accounting purposes.
• Connecting a Google account is optional. If you would rather not, we will set up an alternative sending arrangement with you instead.

5. Who we share information with

We do not sell your information. Ever. To anyone.

We share it only with service providers who make the service work — for example the email delivery provider that transmits messages, and our hosting and storage providers — and only to the extent they need it to perform that function. They are not permitted to use it for anything else.

We may disclose information where we are legally required to, or where it is necessary to protect our rights or the safety of others.

6. How long we keep it

We keep your business and invoice information for as long as you are a client, and afterwards only for as long as we are required to for legal, tax and accounting purposes. Authorisation tokens are deleted when you revoke access or when your engagement ends, whichever comes first.

7. Security

Authorisation credentials are stored encrypted. Access is restricted to the people who need it to operate the service. No system is perfectly secure, but the design of this one deliberately limits the damage any failure could do: because we hold send-only permission, a compromise of our systems still would not expose the contents of your mailbox.

8. Children

This is a business-to-business service. It is not directed at children and we do not knowingly collect information from anyone under 18.

9. Changes to this policy

If we change this policy we will update the effective date at the top of this page. If a change materially affects how we handle Google user data, we will tell affected clients directly rather than relying on you to notice.

10. Contact us