Privacy Policy

Last updated: October 15, 2026

1. Who controls this data

Maher Gamal, operating NexAgent as a sole proprietor (enskild näringsidkare) from Sweden, is the data controller for the information described below.

Postal address: available on request. Contact: mate@getnexagent.com

NexAgent is a trade name, not a registered company. There is no data protection officer; enquiries go to the address above.

2. What we collect

To run the service, NexAgent processes:

• From contractor clients: your email address, business name and address, business phone, website, the mobile number calls forward to, your booking link, Google review link and after-hours note, your replies to our weekly check-in text, and billing records.
• From your customers, on your behalf: phone number, name if they give one, the time and status of a missed call, a voicemail recording and its machine transcript if they choose to leave one, and the text of messages they send to your NexAgent number, only for the purpose of replying to them with your booking link, passing their messages and voicemail transcripts on to you by email, honouring opt-outs, and sending a post-job review request. Answered calls are never recorded. Only a voicemail the caller chooses to leave after the automated message and the beep is recorded; Twilio keeps the recording and transcribes it by machine, and the transcript and the caller's number are emailed to you. The recording itself is not emailed.

2a. The signup form and this website

The signup form is not open yet. Until it is, the form does not send the email address you type anywhere. Once it is open, the address you enter is used to create your trial: it is saved in NexAgent's client list (a Google Sheet), sent to Stripe to create a checkout session, passed through n8n (the automation service that runs the signup), and used to send you the trial link by Gmail. If a signup fails, the error and your address can be written to an internal error log in Google Sheets. Cloudflare Turnstile runs on the signup page to stop automated signups and processes technical data about your browser and device.

Loading any page on this website sends your IP address to Cloudflare, which hosts the site. The fonts and styling are served from this site itself, so no other third party receives your IP address when a page loads, apart from Cloudflare's Turnstile check on the signup page. This website sets no cookies of its own and uses no analytics or advertising trackers.

2b. Businesses we email about NexAgent

This part is for roofing businesses that NexAgent emailed to offer the service. Maher Gamal, named in section 1, is the data controller for this data. Contact: mate@getnexagent.com

• What we hold: your business name, address or city and state, website, phone number, the services it lists, the email address we wrote to, your Google rating, review count and listed opening hours, our own scores and notes on your website, the emails we sent and when, any reply you sent, and whether you asked us to stop.
• Where it came from: we collect publicly listed business information from Google Maps through a data provider (Outscraper). We collect the email address from your business's own website, its home page or contact page, and record which page it was on. For a few addresses we hold, we cannot yet say where they came from, so we hold those back and do not write to them. Ask us what data we hold about your business and where it came from.
• Why: to email your business about NexAgent, to send short follow-ups if you do not reply, and to keep a record that stops us emailing you again once you say no.
• Legal basis: legitimate interests (Art. 6(1)(f)). The interest is offering a service to roofing businesses whose contact details are public.
• Who receives it: Google (Google Sheets holds the records, Gmail sends and receives the email), Outscraper, which we send your business name and city to when we check your listing, and n8n and Groq, which read and scored business websites with an AI model. We do not sell it or share it for advertising.
• Transfers: this data may be transferred outside the EU, including to the United States, by these providers; see section 9.
• How long: we keep your business data while we may still contact your business, and delete what we hold on request. If you ask us to delete it, we keep only the record that you asked us to stop, so that we never email you again. There is no automatic deletion yet.

Your right to object: you can object at any time to being emailed about NexAgent. Reply STOP, or say so in any reply, or email mate@getnexagent.com. We then stop emailing you.

You also have the right to access and erase your data; see section 6. You can also complain to Integritetsskyddsmyndigheten (IMY), the Swedish supervisory authority.

3. How we use it

Apart from emailing businesses as described in section 2b, data is used only to operate the service: replying by text with your booking link when a call is missed or a text comes in, emailing the contractor the text of messages their customers send and the caller's number and a machine transcript of any voicemail a caller leaves, and sending review-request texts after a job is marked complete. We text the contractor's mobile at most once a week to ask which of that week's leads booked or sold, and record the answer against those leads to produce the contractor's results page and monthly report. We do not use your customers' data for any purpose beyond delivering the service to you, and we do not sell data to anyone.

3a. Our legal basis for processing

Under Article 6 of the GDPR we rely on:

• Performance of a contract (Art. 6(1)(b)) for everything needed to run a contractor's subscription — account details, billing, and the message logs that make the service work.
• Legitimate interests (Art. 6(1)(f)) for contacting roofing businesses about the service, using business contact details, and for keeping records that let us prove an opt-out was honoured. You may object to this at any time using the contact address above, and we will stop.
• Legal obligation (Art. 6(1)(c)) for retaining invoices, which Swedish bookkeeping law requires us to keep for seven years.

Where a homeowner's details are processed so a contractor can reply to them, we act on that contractor's instructions and for their purposes.

4. Who we share it with

NexAgent relies on these third-party providers to function, and each processes data under its own terms: Twilio (phone numbers, calls, text messages, voicemail recordings and their transcription), Groq (the AI model that drafts replies), n8n (the automation service that connects the steps), Google (Google Sheets for records, Gmail for email), Stripe (billing and trial checkout), and Cloudflare (website hosting and the Turnstile bot check). We do not share your data with anyone for advertising or resale.

5. Data retention

Call and message records are retained for as long as your account is active plus a reasonable period afterward for support, dispute, and legal-recordkeeping purposes, after which they are deleted on request. There is no automatic deletion yet. The same applies to voicemail recordings kept in Twilio: they are not deleted automatically yet, and are deleted on request. That includes a signup that never became a trial: email us and we will delete what we hold.

6. Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable, machine-readable format (data portability). Where we rely on your consent, you may withdraw that consent at any time, and withdrawing it does not affect processing carried out before you did.

Exercise any of these by emailing mate@getnexagent.com. We respond within one month. You also have the right to lodge a complaint with a supervisory authority — in Sweden that is Integritetsskyddsmyndigheten (IMY), and in the EU/EEA you may complain to your local authority instead.

Providing the data needed to run the service is a contractual requirement; without it the service cannot be delivered.

Automated decision-making: the service uses an automated system to draft the text message a customer receives. It does not make any decision that produces legal effects or similarly significantly affects anyone, and there is no profiling within the meaning of Article 22.

6a. AI-generated content, and what it can get wrong

The first reply this service sends is generated by artificial-intelligence models operated by third-party providers, from the information described in section 2; the review request and the fallback message are fixed wording. AI makes mistakes. Output may be inaccurate, incomplete, or out of date, and it may sound specific and confident while still being wrong.

An AI-generated message is not advice, not a quote, and not a binding commitment by the contractor or by NexAgent. Anyone who receives one should confirm anything that matters — an appointment time, a price, the scope of the work — directly with the contractor before relying on it.

To the maximum extent permitted by law, Maher Gamal is not liable for any loss arising from reliance on AI-generated content that was not confirmed directly with the contractor. Nothing in this section limits your rights under the GDPR, including the rights set out in section 6, or any liability that cannot be excluded by law.

7. Opting out of text messages

Every text NexAgent sends includes "Reply STOP to opt out." Any customer can reply STOP, or ask in their own words to stop, and receives no further automatic texts from that number. They can also contact their contractor directly.

8. Security

We take reasonable technical and organizational measures to protect data in transit and at rest, using our infrastructure providers' security controls. No system is 100% secure, and we cannot guarantee absolute security.

9. International transfers

Because NexAgent is operated from Sweden and serves clients in the United States (and potentially elsewhere), data may be transferred and processed outside your home country. We rely on our infrastructure providers' standard safeguards for these transfers.

10. Changes to this policy

We may update this policy as the service evolves. Material changes will be communicated by email.

11. Contact

Questions about this policy: mate@getnexagent.com