Last updated August 25, 2026
This Privacy Policy explains how Cole Wilkinson, doing business as Nexus Star AI Co. ("we," "us," "our"), collects, uses, and protects information when you use Nexus Star CRM (the "Service").
Account information. When you sign up, we collect your email address and, if you set one, your name, along with a password managed securely by our authentication provider, Supabase — we never see or store your raw password.
Business data. Information you or your team enter into the Service to run your business: contacts, leads, notes, calendar events, and file attachments. This may include personal information about people you interact with (like names, emails, and phone numbers of your own contacts) — you're responsible for having the right to store that information.
Billing information. If you subscribe to a paid plan, our payment processor, Stripe, collects and stores your payment details directly — we don't store full card numbers ourselves. We receive limited billing metadata from Stripe, like your subscription status and plan.
Usage information. Basic technical information like IP address, browser type, and pages visited, collected automatically to operate and secure the Service.
We use the information above to:
We don't sell your personal information, and we don't use your business data to train AI models or share it with advertisers.
We share information only with the service providers that help us operate Nexus Star CRM, and only as needed to provide the Service:
Each of these providers processes data under their own privacy and security commitments. We don't share your information with third parties for their own marketing purposes.
We may also disclose information if required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets — in which case we'd notify you.
We rely on database-level Row Level Security so that one business's data is never visible to another, encrypted connections between the Service and our database, and access-controlled private file storage for attachments. No system is perfectly secure, and we can't guarantee absolute security, but we take reasonable, industry-standard steps to protect your information.
We retain your account and business data for as long as your account is active. If you cancel your subscription or close your account, we retain data for a reasonable period afterward in case you want to reactivate, then delete it, except where we're required to keep records for legal or accounting reasons.
You can access, update, or delete most of your business data directly within the Service. You can request a copy of your account data, or ask us to delete it entirely, by emailing legal@meridiancrmai.com. If you're located in the EU, UK, or another jurisdiction with its own data protection laws, you may have additional rights — contact us and we'll do our best to accommodate them.
We use essential cookies to keep you signed in and remember your theme preference. We don't use third-party advertising or tracking cookies.
The Service isn't directed at children, and we don't knowingly collect information from anyone under 18. If you believe a child has provided us with personal information, contact us and we'll delete it.
We may update this Privacy Policy from time to time. If we make material changes, we'll provide reasonable notice before they take effect.
Questions about this policy, or want to exercise your data rights? Email us at legal@meridiancrmai.com.