Privacy Policy

Effective 27 August 2026 · Updated 4 October 2026

Nexora Invoice Desk is a service of Nexora Labs LLC, a Nevada limited liability company in Las Vegas, Nevada. This policy explains what information we handle, how we use it, and what we will never do with it.

It applies to our website, our invoice follow-up service, and any Google or Microsoft account you connect to our service.

1. Who we are

Nexora Labs LLC, doing business as Nexora Invoice Desk. Our mailing address and contact details are at the bottom of this page. Nexora Labs LLC is the data controller for the information described here.

2. Information you give us directly

• Business and contact details — your name, business name, email address, phone number and mailing address.
• Invoice information — the details you provide so we can prepare reminders, such as customer name, invoice number, amount, issue date and due date.
• Approved reminder wording — the message templates you sign off on before any reminder is prepared.
• Correspondence — emails and messages you send us.

3. Google user data — what we access and why

If you connect your Google account, Nexora Invoice Desk requests these three scopes:

What these permissions do not allow

They do not let Nexora open, read, change or delete anything in your mailbox, contacts, calendar or Google Drive files. We cannot read your inbox, sent mail, drafts, archive or attachments. Customer replies go to your own inbox; this connection does not let Nexora see them.

How we use them

Only to confirm the connected account and send invoice reminders using wording you approved, to the customers you identified, on the schedule you agreed. A person at Nexora checks and approves each message before it goes out.

What we store

• An encrypted refresh token from Google, which permits approved sending later without signing in each time. It contains no message content.
• The connected email address.
• Send records — the recipient, date and time, invoice referenced and approved template used.

We do not copy, download, index or retain mailbox contents through this connection, because these permissions do not provide access to them.

Limited Use disclosure

3a. Microsoft account data — what we access and why

If you connect your Microsoft account, Nexora requests these permissions. Microsoft's consent screen describes them in its own words:

Nexora can send the reminders you approve and confirm which account connected. Nexora can't open, read, change or delete anything in your mailbox, contacts, calendar or OneDrive files. We use the profile permission only to confirm the account and address; it gives no mailbox access.

What we store

• An encrypted refresh token, used for approved sending later.
• The Microsoft account ID and connected email address.
• Send records — the recipient, date and time, invoice referenced and approved template used.

We do not retrieve or store your mailbox contents through this connection. Customer replies go to your own inbox; Nexora cannot read them through these permissions.

4. How you stay in control

• You approve the wording once, in writing, before any reminder is prepared. Wording is never changed without your approval.
• Google: revoke access at myaccount.google.com/permissions. Google notes that a revocation can take a short time to take full effect; our ability to send from your account ends within the hour.
• Microsoft personal accounts: open your Microsoft account consent options, select Nexora Invoice Desk, then Remove these permissions.
• Microsoft work or school accounts: open My Apps, select the menu next to Nexora Invoice Desk, then Manage your application and Revoke Permissions. If your administrator granted the permissions, ask them to revoke access; you cannot remove those permissions yourself.
• Help switching it off: call or text Jonee or Louis Cartwright at (725) 500-0201.
• You can ask us to delete your data. Email us and we will delete your stored authorization and your records, other than anything we are required to retain by law or for accounting purposes.
• Connecting an email account is optional. If you would rather not, ask us — before you sign anything, we'll tell you whether there's another way to send from your address.

5. Who we share information with

We do not sell your information. Ever. To anyone.

We share it only with service providers who make the service work — for example the email delivery provider that transmits messages, and our hosting and storage providers — and only to the extent they need it to perform that function. They are not permitted to use it for anything else.

We may disclose information where we are legally required to, or where it is necessary to protect our rights or the safety of others.

6. How long we keep it

We keep your business and invoice information for as long as you are a client, and afterwards only for as long as we are required to for legal, tax and accounting purposes. Authorization tokens stop working when you revoke access. We delete them when your engagement ends, or sooner if you ask.

7. Security

Authorization credentials are stored encrypted, and access to them is restricted to the people who need it to run the service. The email connection can only send and confirm which account connected; it can't reach your mailbox. The business and invoice information you give us directly is kept under the same access limits.

8. Children

This is a business-to-business service. It is not directed at children and we do not knowingly collect information from anyone under 18.

9. Changes to this policy

If we change this policy we will update the effective date at the top of this page. If a change materially affects how we handle Google or Microsoft account data, we will tell affected clients directly rather than relying on you to notice.

10. Contact us