This Privacy Policy explains how Ukiyo Nexus ("Ukiyo Nexus", "we", "us") collects, uses, shares, and protects information in connection with our website, software, and services. Our services are designed for business use.
When you connect a third-party platform, we receive data from that platform using the authorization you grant. Depending on which integrations you enable, this may include:
We request access limited to what the connected feature requires, and we read data from these platforms rather than treating our records as authoritative over them.
Integrations use industry-standard OAuth authorization. We store the access and refresh tokens necessary to maintain the connection you authorized, along with the identifiers of the connected account. You may revoke a connection at any time through the platform or through the third-party provider; revocation stops future data retrieval.
Our systems automatically record technical information such as IP address, browser and device type, pages or screens accessed, timestamps, referring pages, and error and request logs. We use this information for security, diagnostics, and service operation.
We use cookies and similar browser storage to the extent needed to operate our website and to keep you signed in to the application. Third-party components we embed — such as scheduling and chat widgets — may set their own cookies or storage under their own policies. You can control cookies through your browser settings, though some features may not function without them.
We may collect a phone number when you voluntarily provide one. Providing a phone number does not by itself constitute consent to receive SMS messages, and we do not treat it as consent.
Where we ask for SMS consent, it is obtained through a separate, explicit opt-in that is unchecked by default and never required in order to submit a form, request access, or purchase anything. SMS consent is purpose-specific: agreeing to service and follow-up messages does not authorize promotional messages, and agreeing to promotional messages does not authorize any other purpose. Each purpose is recorded separately.
If you opt in, message frequency varies and message and data rates may apply. Reply STOP to opt out of SMS at any time, or HELP for assistance. Opting out of SMS does not affect email or other communications you have separately requested. You may unsubscribe from marketing email using the link in those messages.
We retain records of consent and opt-out events — including the purpose, the exact wording shown to you, and the time of the statement — for compliance and operational proof. Those records are handled in accordance with this Privacy Policy.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
We do not sell your personal information. We share information in limited circumstances:
We do not provide your customer conversation content to advertising platforms as part of our advertising features.
Third-party platforms you connect are independent controllers of the data they hold. Their collection and use of information is governed by their own terms and privacy policies, which we encourage you to review. We are not responsible for their practices.
Where you provide or authorize us to receive information about your own contacts, customers, or personnel, you are responsible for having a lawful basis and any required notices or consents, including for communications you direct through the platform.
We retain information for as long as needed to provide the services, to satisfy the purposes described in this Policy, and to meet legal, accounting, security, and record-keeping requirements. Retention periods vary by data type and context. When information is no longer needed, we delete or de-identify it in accordance with our practices.
We use technical and organizational safeguards intended to protect information, including encryption in transit, access controls that separate customer accounts, and restricted handling of integration credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We do not claim any specific security certification or third-party attestation.
You may request access to, correction of, or deletion of information we hold about you, withdraw consent where applicable, disconnect an integration, or opt out of marketing communications. Contact us at sales@ukiyonexus.com. We will respond consistent with applicable law and may need to verify your identity or authority. Some information may be retained where we have a legal or legitimate business reason to do so.
You may request deletion of the personal information and account-related information Ukiyo Nexus holds about you by emailing sales@ukiyonexus.com with the subject line Data Deletion Request. Please include enough information for us to identify the relevant account or business relationship, such as the email address or business name associated with your account. Do not send passwords, credentials, API keys, tokens, or other unnecessary sensitive information by email.
We may need to verify your identity or authority before acting on the request. We process deletion requests consistent with applicable law and our retention obligations.
Deletion applies to personal information and account-related information actually held by Ukiyo Nexus and eligible for deletion under applicable law and our retention obligations. Some information may be retained where reasonably required for legal, tax, accounting, security, fraud-prevention, dispute-resolution, legitimate record-keeping, or other lawful purposes described in this Policy.
Disconnecting a third-party integration stops future data retrieval by Ukiyo Nexus where the provider supports revocation. Deleting information held by Ukiyo Nexus does not itself delete information held independently by the connected provider; requests to delete provider-held information should also be directed to that provider where applicable.
Where a Meta connection is used, Ukiyo Nexus reads advertising account identity, campaign, ad set and advert identity, advertising spend and provider-reported performance figures, account currency, and account-local reporting dates and time zone. Where the business separately authorizes lead capture, Ukiyo Nexus also receives the answers a person submitted in that business's own Meta lead form — typically a name, an email address and a phone number — together with the advert and form the enquiry came from. Those answers are treated as an enquiry only. They are not treated as permission to be contacted by any channel, and they are not treated as a sale, a value or an outcome.
The Meta advertising analytics connection does not ingest Meta consumer profiles or individual-level advertising-user personal data beyond the lead answers described above, and it does not send conversion or customer data back to Meta. That advertising connection reads authorized account and performance information and does not change campaigns, budgets, audiences or adverts.
A business may separately authorize an organic social connection to its Facebook Page and linked Instagram professional account. For that connection, we may receive account identifiers, owned posts and media, comments, insights, and eligible inbound Messenger and Instagram conversations. We use these records to show the authorized operator activity and to carry out a specific post, comment action, or reply that the operator approves. We store the authorization credentials and records needed to operate and audit that connection with service providers described above. Customer-facing publishing and messaging remain unavailable until the relevant platform permissions are granted and the feature is activated. We do not use customer conversations for advertising targeting.
Disconnecting a Meta connection stops future authorized retrieval and stops the receipt of new lead notifications. On request, lead information Ukiyo Nexus holds for a business is deleted subject to the retention limits described in this section; information held independently by Meta must be deleted through Meta.
Our services are intended for businesses and for individuals 18 years of age or older. We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us and we will take appropriate steps.
Ukiyo Nexus operates in the United States, and information we process is stored and handled in the United States by us and our service providers. If you access the services from outside the United States, you understand that your information will be transferred to and processed in the United States.
We may update this Policy from time to time. The "Last updated" date above indicates when the current version took effect. Material changes will be reflected on this page.