Privacy Policy

NEXORA TECH SOLUTIONS (“we”, “us”, “our”) operates Miss No Call, an inbound AI voice appointment-scheduling service for businesses in Canada. The product is designed so business customers can answer inbound calls and book, reschedule, or cancel appointments — not for outbound sales calling or sales-agent campaigns. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in the course of commercial activities, consistent with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy expectations for our Ontario-based operations.

1. Accountability

We are responsible for personal information under our control. Day-to-day privacy questions and access or correction requests should be directed to the contact details in Section 12.

2. What we collect

Depending on how you interact with us, we may collect:

• Website / marketing visitors: contact form details (name, email, phone, business name, trade, message), and optional marketing-email consent if you opt in.
• Business accounts: account credentials, business profile, contact information, settings (e.g. AutoPay), and support requests.
• Callers (end customers of our business customers): phone number, name, email, address (when required for booking), appointment details, and call audio/transcripts/summaries generated while using the inbound AI scheduler.
• Billing: wallet/credit transactions and payment-related records processed via our payment provider (we do not store full card numbers on our servers).
• Technical / essential data: session cookies and security logs needed to operate authenticated portals.

3. Purposes (why we use information)

We use personal information to:

• Operate inbound AI call answering and appointment booking, cancellation, and related scheduling tools;
• Provide business portals (call logs, transcripts, appointments, wallet, settings);
• Process credits, recharges, and related billing communications;
• Respond to consultation, contact, and support requests;
• Send optional product updates or offers only where you have consented (see CASL note below);
• Maintain security, prevent fraud/abuse, debug reliability issues, and meet legal obligations.

We limit collection to what is reasonably needed for these purposes. We do not sell personal information.

4. Consent

Where required, we obtain meaningful consent for collection, use, and disclosure of personal information. Business customers engage us to process caller information to provide inbound appointment-scheduling services. Callers providing information over the phone for booking are generally doing so for that transactional purpose. Sensitive information and non-essential tracking require a higher standard of consent. You may withdraw consent subject to legal or contractual restrictions and reasonable notice; some features cannot operate without certain data.

5. Cookies and similar technologies

We use essential cookies for session authentication and security on our website and portals. We do not currently load advertising or cross-site tracking pixels on the marketing site. See our Cookie Notice for details and preferences. If we later add analytics or marketing cookies, non-essential technologies will remain off until you opt in.

6. Sharing and service providers

We share personal information with service providers (“subprocessors”) only as needed to deliver the inbound appointment-scheduling product. Vapi, Twilio, Stripe, Cloudflare R2, AI model, voice, and transcription providers (via Vapi), Hostinger (application hosting and managed database), and Email delivery provider — solely to operate the inbound appointment-scheduling service.

Personal information may be stored or processed outside Canada, including in India (where our application hosting and primary database are located) and in other countries where our service providers operate. Where we transfer personal information across borders, we take steps appropriate to the risk and applicable law (including contractual and organizational measures).

7. Retention

• Accounts: Business account and profile data are retained while the account is active, and for 60 days after account closure or lasting inactivity, except billing and financial records retained as described below, or longer if required for security, dispute resolution, or law.
• Calls / recordings / transcripts: Call metadata, transcripts, summaries, and recordings are retained for 60 days after the call, unless a longer period is required for an open dispute, security investigation, or legal obligation.
• Appointments: Appointment and scheduling records are retained for 60 days after the appointment is completed or cancelled, unless a longer period is required for an open dispute, security investigation, or legal obligation.
• Billing: Wallet, credit, and payment-related records are retained for 7 years, consistent with common Canadian accounting and tax record-keeping practice, or longer if required by law or an open dispute.
• Leads / support: Contact, consultation, and support form submissions are retained for 60 days, or until marketing consent is withdrawn where the record is held only for that purpose.
• Server logs: Application and security logs are retained for approximately 60 days for operations, debugging, and abuse prevention, unless a longer period is needed for an active investigation.

8. Safeguards

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encrypted transport (HTTPS), access controls on admin and business portals, and restricted handling of recordings and transcripts. No method of transmission or storage is perfectly secure.

9. Access and correction

Subject to exceptions under applicable law, individuals may request access to, or correction of, their personal information in our custody. Business customers may manage much of their account data in-product; callers should typically contact the business they called, and may also contact us using the details below. We will respond within a reasonable time.

10. Breach notification

If a breach of security safeguards creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required under PIPEDA, and take other steps required by applicable provincial law.

11. Electronic messages (CASL)

Transactional messages related to your account, appointments, billing, password resets, or responses to your inquiries are sent as part of providing the service. Commercial electronic messages (for example, optional product news or offers) are sent only with express or implied consent as permitted by Canada’s Anti-Spam Legislation (CASL), and will include identification and an unsubscribe mechanism where required.

12. Contact us

13. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes will be highlighted on this page or communicated through appropriate channels.