Privacy policy

Who we are

OSES-J is operated by CNEX AI ("we"). This policy explains what data the service processes and why. Contact: admin@cnexai.com.

Workspace data

Your workspace contains the accounts of your team members, your company facts, the leads and clients you collect, messages, documents, settings and provider credentials. This data belongs to your organisation. We process it only to provide the service and never sell it.

Public business information

Lead discovery and enrichment collect information that businesses publish about themselves on Instagram, Facebook and their own websites (brand name, public profile details, business contact channels). Every field stores its source. You are responsible for using this information in line with the laws that apply to your outreach, including opt-out requests, which OSES-J enforces once recorded.

Provider credentials

Apify tokens, AI provider keys and Meta access tokens are encrypted at rest with a key that is never stored in the database. They are used only to call the provider on your behalf.

Messaging accounts

OSES-J never asks for or stores your Instagram or Facebook password. The browser extension operates inside your own browser session; the official Meta integration uses tokens you grant through Meta and can revoke at any time.

AI processing

When you use AI features, the relevant company facts, lead details and conversation text are sent to the AI provider you configured (or the platform default) to generate the result. Every AI action is logged in your workspace.

Security

Sessions are stored as hashes, sign-in is rate limited, webhooks are signature-verified, uploaded files are stored outside the web root, and an audit log records important actions.

Retention and deletion

Deleted items stay in Trash for 7 days and are then purged. You can request deletion of an entire workspace by contacting us.

Changes

We will update this page when the policy changes and note the effective date above.