Privacy Policy
Effective July 2026
This Privacy Policy explains how TAO Nexus, Inc. ("TAO Nexus," "we," "us") collects, uses, discloses, and protects personal information when you use our platform, websites, applications, and services (collectively, the "Service").
1. Information We Collect
Account Information: name, work email, company, role, phone number, profile picture (if provided via Google Sign-In).
Customer Data: project records, contacts, vendors, documents, invoices, voice call recordings and transcripts, and change orders you create or upload.
Usage Data: pages viewed, features used, IP address, device, browser, and referrer.
Cookies & Local Storage: see our Cookie Policy.
2. How We Use Information
We use information to (a) provide, secure, and improve the Service; (b) authenticate users and prevent fraud; (c) deliver AI features (lead scoring, change-order drafting, voice AI, insurance scope building); (d) respond to support requests; (e) send transactional emails and, with consent, product updates.
3. AI Processing and Sub-processors
Certain features send Customer Data to third-party AI providers strictly to generate the requested output. Current sub-processors include:
- Anthropic (Claude) — CRM lead scoring, change-order drafting
- OpenAI — text summarization, voice AI (Realtime API)
- Twilio — inbound/outbound voice call routing
- Emergent — hosting infrastructure and Universal LLM proxy
- MongoDB Atlas — encrypted database storage
- Calendly — appointment scheduling
We do not use Customer Data to train third-party foundation models. Sub-processor list is available on request and updated as our stack evolves.
4. Sharing of Information
We do not sell personal information. We share information only with (a) sub-processors under contract, (b) legal or regulatory authorities when required by law, (c) a successor entity in the event of a merger, acquisition, or asset sale (with notice).
5. Data Retention
We retain Customer Data for the life of your account plus 90 days, unless a longer period is required by law. You may request earlier deletion at any time by emailing legal@taonexus.com.
6. Your Rights
Depending on your jurisdiction (GDPR, CCPA, etc.), you may have the right to access, correct, port, or delete your personal information, and to opt out of certain processing. To exercise these rights, contact legal@taonexus.com. We will respond within 30 days.
7. Security
We use TLS in transit, encryption at rest, least-privilege access controls, and regular security reviews. No method of transmission or storage is 100% secure, but we work continuously to protect your data.
8. International Transfers
Our servers are located in the United States. If you access the Service from outside the U.S., you consent to the transfer and processing of your information in the U.S.
9. Children
The Service is intended for business use and is not directed to children under 16.
10. Changes to This Policy
We will post any changes here and update the "Effective" date. Material changes will be communicated via email or in-app notice.