Legal

Privacy Policy

Last updated: September 13, 2026

This document is provided as a plain-language draft and is not a substitute for advice from a qualified attorney, particularly regarding GDPR, since this business is operated from Sweden.

1. Who controls this data

Maher Gamal, operating NexAgent as a sole proprietor (enskild näringsidkare) from Sweden, is the data controller for the information described below.

Postal address: Marnäsgatan 27, 771 30 Ludvika, Sweden. Contact: mate@getnexagent.com

NexAgent is a trade name, not a registered company. There is no data protection officer; enquiries go to the address above.

2. What we collect

To run the service, NexAgent processes:

From contractor clients: your email address, business name and address, business phone, website, the mobile number calls forward to, your booking link, Google review link and after-hours note, and billing records.
From your customers, on your behalf: phone number, name if they give one, the time and status of a missed call, and the text of messages they send to your NexAgent number, only for the purpose of replying to them with your booking link, honouring opt-outs, and sending a post-job review request. Calls are not recorded or transcribed.

2a. The signup form and this website

The signup form is not open yet. Until it is, the form does not send the email address you type anywhere. Once it is open, the address you enter is used to create your trial: it is saved in NexAgent's client list (a Google Sheet), sent to Stripe to create a checkout session, passed through n8n (the automation service that runs the signup), and used to send you the trial link by Gmail. If a signup fails, the error and your address can be written to an internal error log in Google Sheets. Cloudflare Turnstile runs on the signup page to stop automated signups and processes technical data about your browser and device.

Loading any page on this website sends your IP address to Cloudflare, which hosts the site. The main pages also load fonts from Google Fonts and a styling script from unpkg.com, which receive your IP address when they do. This website sets no cookies of its own and uses no analytics or advertising trackers.

3. How we use it

Data is used only to operate the service: replying by text with your booking link when a call is missed or a text comes in, and sending review-request texts after a job is marked complete. We do not use your customers' data for any purpose beyond delivering the service to you, and we do not sell data to anyone.

3a. Our legal basis for processing

Under Article 6 of the GDPR we rely on:

Performance of a contract (Art. 6(1)(b)) for everything needed to run a contractor's subscription — account details, billing, and the message logs that make the service work.
Legitimate interests (Art. 6(1)(f)) for contacting roofing businesses about the service, using business contact details, and for keeping records that let us prove an opt-out was honoured. You may object to this at any time using the contact address above, and we will stop.
Legal obligation (Art. 6(1)(c)) for retaining invoices, which Swedish bookkeeping law requires us to keep for seven years.

Where a homeowner's details are processed so a contractor can reply to them, we act on that contractor's instructions and for their purposes.

4. Who we share it with

NexAgent relies on these third-party providers to function, and each processes data under its own terms: Twilio (phone numbers, calls and text messages), Groq (the AI model that drafts replies), n8n (the automation service that connects the steps), Google (Google Sheets for records, Gmail for email), Stripe (billing and trial checkout), and Cloudflare (website hosting and the Turnstile bot check). We do not share your data with anyone for advertising or resale.

5. Data retention

Call and message records are retained for as long as your account is active plus a reasonable period afterward for support, dispute, and legal-recordkeeping purposes, after which they are deleted on request. There is no automatic deletion yet. That includes a signup that never became a trial: email us and we will delete what we hold.

6. Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable, machine-readable format (data portability). Where we rely on your consent, you may withdraw that consent at any time, and withdrawing it does not affect processing carried out before you did.

Exercise any of these by emailing mate@getnexagent.com. We respond within one month. You also have the right to lodge a complaint with a supervisory authority — in Sweden that is Integritetsskyddsmyndigheten (IMY), and in the EU/EEA you may complain to your local authority instead.

Providing the data needed to run the service is a contractual requirement; without it the service cannot be delivered.

Automated decision-making: the service uses an automated system to draft the text message a customer receives. It does not make any decision that produces legal effects or similarly significantly affects anyone, and there is no profiling within the meaning of Article 22.

6a. AI-generated content, and what it can get wrong

The text messages this service sends are generated by artificial-intelligence models operated by third-party providers, from the information described in section 2. AI makes mistakes. Output may be inaccurate, incomplete, or out of date, and it may sound specific and confident while still being wrong.

An AI-generated message is not advice, not a quote, and not a binding commitment by the contractor or by NexAgent. Anyone who receives one should confirm anything that matters — an appointment time, a price, the scope of the work — directly with the contractor before relying on it.

To the maximum extent permitted by law, Maher Gamal accepts no liability for errors in AI-generated content, or for any loss arising from reliance on it. Nothing in this section limits your rights under the GDPR, including the rights set out in section 6, or any liability that cannot be excluded by law.

7. Opting out of text messages

Every text NexAgent sends includes "Reply STOP to opt out." Any customer can reply STOP, or ask in their own words to stop, and receives no further automatic texts from that number. They can also contact their contractor directly.

8. Security

We take reasonable technical and organizational measures to protect data in transit and at rest, using our infrastructure providers' security controls. No system is 100% secure, and we cannot guarantee absolute security.

9. International transfers

Because NexAgent is operated from Sweden and serves clients in the United States (and potentially elsewhere), data may be transferred and processed outside your home country. We rely on our infrastructure providers' standard safeguards for these transfers.

10. Changes to this policy

We may update this policy as the service evolves. Material changes will be communicated by email.

11. Contact

Questions about this policy: mate@getnexagent.com