Privacy Policy

This policy explains how Nelkins CRM handles information when real-estate professionals use the platform and connect business communication services such as WhatsApp.

Effective date: 27 August 2026 · Operator: Nelkins Technologies FZ-LLC, Dubai, United Arab Emirates

1. Scope

Nelkins CRM (“Nelkins”, “we”, “us” or “our”) is a customer relationship and brokerage operations platform operated by Nelkins Technologies FZ-LLC. This Privacy Policy applies to our websites, applications, connected communication channels and related support services. It covers information about account holders as well as business contacts whose details are processed by an authorised account holder.

2. Information we process

Depending on how the service is used, we may process:

  • Account information: name, business email, telephone number, role, organisation and authentication information.
  • CRM information: contact details, property requirements, property records, lead stage, notes, tasks, viewing information and communication history entered by authorised users.
  • WhatsApp and Meta information:WhatsApp Business Account ID, Phone Number ID, sender identity, message content and metadata, delivery and read events, attachments, template information and webhook events made available through Meta's authorised APIs.
  • Connection credentials: access tokens and app secrets supplied by an authorised user. These are encrypted at rest and are not displayed again after submission.
  • Technical and security information: device and browser information, IP address, timestamps, audit records, diagnostic events and security logs.
  • Support information: messages and materials sent when requesting help.

3. How we use information

  • Provide, secure and administer Nelkins CRM.
  • Send and receive authorised business communications and synchronise conversation activity.
  • Manage contacts, enquiries, listings, property requirements, viewings and brokerage workflows.
  • Authenticate users, prevent abuse and maintain audit trails.
  • Provide support, diagnose faults and improve reliability.
  • Meet legal, regulatory and record-keeping obligations.

Nelkins does not sell personal information. We do not use connected WhatsApp message content for unrelated advertising.

4. Responsibilities of business users

Account holders determine which contacts and conversations they add to Nelkins CRM. They must have a lawful basis or valid permission for their communications, honour opt-outs, keep records accurate and comply with applicable privacy, real-estate, marketing and WhatsApp Business requirements. Unknown contact status must not be treated as consent.

5. Meta and WhatsApp

When a user connects a WhatsApp Business account, Nelkins processes data supplied through Meta's WhatsApp Business Platform APIs to provide messaging, delivery-status and synchronisation functions. Meta and WhatsApp process information under their own terms and privacy policies. Users can disconnect a sender from Nelkins and revoke the app's access within Meta Business settings.

6. Sharing and service providers

We share information only as needed to operate the service, including with Meta/WhatsApp, cloud hosting, database, authentication, email, security, monitoring and support providers acting under appropriate obligations. We may also disclose information when required by law, to protect rights and safety, or as part of a business reorganisation subject to appropriate safeguards.

7. Retention

We retain information while an account is active and for as long as reasonably necessary for the purposes described above, including security, dispute resolution and legal or regulatory record keeping. Encrypted backups may remain for a limited rotation period. Where deletion is requested, data is deleted or de-identified unless retention is required by law or needed to establish, exercise or defend legal claims.

8. Security

We use access controls, encryption, secret protection, audit logging and operational safeguards designed to protect information. No online system is completely secure, and users are responsible for protecting their devices, passwords, Meta credentials and account access. Suspected security incidents may be reported to security@nelkins-os.xyz.

9. International processing

Our service providers may process information in countries other than the user's location. Where required, we use contractual and technical safeguards intended to protect information during international processing.

10. Your choices and rights

Subject to applicable law, individuals may request access, correction, deletion, restriction or objection, or ask questions about how their information is used. Account holders can update many CRM records directly. Requests concerning records controlled by a brokerage account may first be referred to that account holder for verification and action.

For deletion steps, see our Data Deletion Instructions.

11. Children

Nelkins CRM is a business service and is not directed to children under 18. We do not knowingly solicit account registration from children.

12. Changes

We may update this policy when our service or legal obligations change. The current version and effective date will always be published on this page.

13. Contact

For privacy questions, rights requests or complaints, email privacy@nelkins-os.xyz with the subject line Nelkins CRM Privacy Request. For general product assistance, email support@nelkins-os.xyz.