What this notice covers
Nexelya provides LeadLuna to commercial cleaning businesses. This notice covers the LeadLuna account and the proposed managed inquiry service, including connected email and calendars when available and authorized. Our website inquiry notice separately explains the public Nexelya inquiry form.
Your business controls the information it provides and its connected accounts. Supply only information you are authorized to share and obtain any permission needed from people whose inquiries you provide. Do not enter passwords, card numbers, alarm codes or unnecessary sensitive information into setup, inquiry or support fields.
Information we handle
- Account and support: name, email, login and verification records, business workspace membership, support requests, security and operational records.
- Business setup: service areas, services and exclusions, approved answers and qualification questions, hours, walkthrough preferences, reviewer and escalation contacts, and your instructions and approvals.
- Orders and billing: accepted order terms, payment status, transaction and receipt references, cancellation and refund records. Card details are entered in Stripe's hosted payment flow, not into LeadLuna.
- Connected inquiry and calendar information, when you authorize it: the selected account and resource identity; inquiry message text, subject, sender, Reply-To and routing details; conversation summaries and drafts; and selected calendar availability and walkthrough booking details.
We use these records to secure accounts, save setup progress, provide support and billing, operate the agreed inquiry and walkthrough workflow, enforce limits and approvals, investigate failures, and maintain records where appropriate. Connecting a provider or accepting an order does not by itself grant every data-use permission or start service.
Connections, review and your choices
When a supported connection becomes available, you authorize it through the provider's permission screen and select the appropriate account, dedicated inquiry inbox and walkthrough calendar. LeadLuna does not ask for mailbox passwords. Your provider or administrator may require additional approval. Provider access can be revoked with the provider; LeadLuna also provides disconnect and purpose-withdrawal controls in the account.
Collection, managed storage, named human review and transfer to an AI processor are separately disclosed and authorized in the account. The permission screen identifies the resource, purpose and applicable time or record scope. Withdrawing permission blocks future use within that scope; a request or message already transmitted cannot be recalled. A disconnection or withdrawal can pause the affected service and require a new authorization and checks before resumption.
During the pilot, a person approves initial outgoing responses and Nexelya reviews every pilot conversation. Access by named Nexelya reviewers to inquiry content requires the applicable documented permission for the specific records. Approval to view information is separate from approval to send a message. Your team remains responsible for prices, quotes, attending walkthroughs and providing cleaning services.
Google information
If you authorize a Google connection, LeadLuna requests the permissions needed to identify the selected account, read inquiries and send approved replies from the selected mailbox, or check availability and manage walkthrough events in the selected calendar. Separate mailbox and calendar flows explain the requested access. Google customer connections are currently limited to controlled testing; unrestricted customer availability has not been approved.
LeadLuna's use and transfer of information received from Google Workspace APIs will adhere to the Google Workspace User Data and Developer Policy, including its Limited Use requirements. We do not sell Google user data, use it for advertising or use it to train a general AI model. We restrict human access and transfers to the applicable permission and policy requirements, including documented affirmative agreement to view specific data where required.
Service providers and AI
We use service providers to help operate LeadLuna. Google supplies its account, Gmail and calendar services for authorized connections; Stripe handles hosted payments and related billing records; Nexelya's hosting and backup systems store the service's records. A connected provider receives the information necessary for actions you authorize, such as sending an approved reply or creating an approved calendar event.
For an authorized AI-assisted response, LeadLuna is designed to send the disclosed inquiry context and approved business information to OpenAI's API to prepare a draft for review. Customer-service AI processing is not currently active. The applicable account permission identifies the processor and context before transfer. We do not enable general-model training on Google-derived content. OpenAI's API data settings for this project have data sharing for inputs and outputs disabled; OpenAI may retain certain data for abuse monitoring under its data controls. We do not represent this arrangement as zero retention.
We do not send inquiry content to advertising platforms for ad targeting. The LeadLuna account experience currently uses essential session and security cookies and does not have Meta advertising tracking enabled. If this changes, we will update our disclosures and any required choices before enabling it.
Storage and retention
LeadLuna protects the service database and backups with encryption, encrypts connection tokens and restricts access to authorized people and processes. No system can promise absolute security. We keep operational and security information needed to operate and protect the service.
Our current preference is to retain authorized inquiry archives and related business, billing and legal records without an automatic expiry. Continued retention depends on the authority to hold the particular information, provider requirements, applicable rights and any actual legal obligations. A mailbox connection or archive choice alone does not establish rights to every message. We do not promise that all records can be retained indefinitely or that a backup will be erased immediately.
Disconnecting a provider or ending service does not itself erase service records or the original messages and events in your accounts. We review requests for access, export, correction or deletion, including relevant active records, provider copies, restricted backups and any records that must be retained separately. We explain any remaining records and the reason for retaining them. Restored backups require privacy and payment-state review before use.
Access, export and privacy requests
A verified workspace owner can open account Help to download available service records or save a privacy request for access, export, deletion or withdrawal. A fresh password check protects these actions. You may also email support@nexelya.com; please do not include passwords or unnecessary inquiry content. We verify the requester's authority before releasing or changing records.
We handle requests through a documented manual review and provide a reference and status in the account. We identify applicable retention obligations and explain completed or remaining work. Rights and any applicable response periods depend on the circumstances and applicable law. If your information was sent to a cleaning business using LeadLuna, you may also contact that business directly about its records.
Changes and contact
We may update this notice as the service or its providers change. The date above identifies the latest version. We will provide additional notice or obtain consent where required. Questions can be sent to support@nexelya.com.