1. Our role
For customer CRM data uploaded into Nestree, the customer is usually the controller and Nest Digital Canada Inc. acts as processor. For Nestree account, billing, website, analytics, support, and business operations data, Nest Digital Canada Inc. acts as controller.
2. Data we process
- Account data, such as name, email, authentication state, workspace membership, and role.
- Workspace data, such as contacts, companies, deals, tasks, activities, segments, campaigns, forms, tickets, custom fields, exports, and erasure logs.
- Usage and diagnostic data, such as route views, feature usage, activation events, request logs, error signals, device/browser metadata, and IP-derived operational data.
- AI feature data, such as the prompt, selected CRM context, response, feature name, token usage, cost estimate, human-review status, and output reference needed to operate the requested AI assist.
- Support and communication data, such as messages you send to us and operational notices we send to you.
3. How we use data
- Provide, secure, monitor, and improve Nestree.
- Authenticate users, enforce workspace membership, and protect tenant isolation.
- Enable CRM workflows, exports, erasure, campaign consent, support tickets, and activity history.
- Provide assistive AI features selected by users, with human review expected before consequential action.
- Track aggregate activation and product-health events so we can improve onboarding and reliability.
- Comply with legal obligations, prevent abuse, and enforce our terms.
4. AI data handling
Nestree AI is assistive, not autonomous. AI drafts, summarizes, enriches, searches, or suggests. A human stays responsible for review before sending messages, changing records, or making consequential decisions.
Customer CRM data is not used to train foundation models. We send only the context needed for the selected AI feature, log AI use for audit and cost control, and label AI-generated or AI-assisted outputs in the product.
5. Cookies and analytics
Nestree uses essential cookies for authentication, sessions, security, and user preferences. We also use Vercel Web Analytics for privacy-friendly product and website measurement. We do not use advertising cookies, third-party retargeting pixels, or sale of personal data.
6. Sub-processors
These providers process data needed to run Nestree.
| Provider | Purpose | Data |
|---|---|---|
| Supabase | Managed Postgres database, authentication, and platform services | Account, workspace, CRM, auth, and audit data |
| Vercel | Application hosting, deployment, edge delivery, and web analytics | Request, deployment, analytics, and limited diagnostic data |
| Anthropic | Claude inference for assistive AI features selected by users | Minimized prompts and CRM context needed for the selected AI action |
| Resend | Transactional and campaign email delivery when email features are enabled | Recipient, sender, message, unsubscribe, bounce, and complaint data |
7. International transfers
Nestree's primary database is hosted in Canada, in ca-central-1. Canada has EU adequacy status. Some sub-processors may process operational or AI-related data in the United States or through global infrastructure. Where required, we rely on appropriate transfer mechanisms and contractual safeguards.
8. Retention, export, and erasure
Customers can export workspace data and request or perform erasure through the product. We retain account, audit, security, backup, and legal records only as long as needed for service operation, compliance, dispute resolution, and abuse prevention.
9. Your rights
Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to processing of personal data. If your data belongs to a Nestree customer workspace, we may direct you to that customer as controller.
Contact privacy@nestdigital.ca to make a privacy request.
10. Changes
We may update this policy as Nestree changes. If a change materially affects your rights or how we process data, we will provide reasonable notice through the product or by email.