Privacy Policy

1. Who we are and what this covers

502ZONE LLC ("502ZONE", "we", "us") makes Nexum, a collections platform, and optional software Modules for it. This policy explains what personal information we handle, why, and what choices you have. It covers (a) visitors to 502.zone and its subdomains, (b) prospects and customers who contact us, buy Modules or use our support, and (c) the limited information we may see while installing or supporting Nexum. It does not cover the data an Agency keeps inside its own Nexum installation. That data, including information about debtors and their accounts, sits in the Agency's own AWS account and is controlled by the Agency. For that data the Agency is the responsible party and 502ZONE acts only as its software provider (see Section 5).

2. Information we collect

• Contact details you give us: name, business name, role, work email, phone number and what you tell us about your needs.
• Chat and form content: messages sent to our MIA chat assistant, demo requests and intake forms.
• Purchase and licensing records: which Modules an Agency bought, versions, renewal dates and a license identifier for the installation.
• Payment information: handled by our payment provider. We receive confirmation and limited details (such as card brand and last four digits), never full card numbers.
• Support information: what you send us when you ask for help, and logs or screenshots you choose to share.
• Technical data: IP address, browser type, pages visited and timestamps, collected through server logs and basic analytics.
• Update checks: when an installation checks for updates, it sends its license identifier, site address and software versions. It does not send the Agency's debtor or account data.

3. How we use it

We use this information to answer questions and run demos, to install, license, update and support Nexum and its Modules, to process purchases and renewals, to send service notices such as version and security updates, to keep our website secure, to improve our products, and to meet legal obligations. We send marketing email only to people who have asked to hear from us or who are business contacts, and every marketing message has an opt-out. We do not sell personal information and we do not share it for cross-context advertising.

4. Where the Agency's data lives

Nexum is installed on the Agency's own AWS account. The Agency's database, files, recordings, messages and credentials are stored there, under the Agency's control. 502ZONE does not host that data, does not keep a copy of it, and does not use it for our own purposes. We do install and support Nexum, so we have authorized administrative access to the installation, but only to the extent the Agency grants it and only for installation, updates and support. During that work we may incidentally see records. We treat anything we see as confidential, access it only as needed to solve the problem, and do not copy it out of the Agency's environment unless the Agency asks us to. The Agency can limit, suspend or revoke our access at any time.

5. Our role: Agency data and consumer requests

For data in an Agency's installation, the Agency decides what is collected and why, so the Agency is the controller (in some laws, the "business"), and 502ZONE is a service provider that acts only on the Agency's instructions. We will sign a data processing agreement on request. If you are a consumer and your information is held by a collections agency that uses Nexum, contact that agency about your information. 502ZONE has no collections relationship with you and does not hold your account records. If you send us such a request, we will pass it to the agency concerned where we can identify it, and tell you who to contact.

6. AI features and the MIA chat assistant

MIA, the assistant on our website, is powered by a third-party AI provider. What you type to MIA is processed by that provider so it can answer, and we keep chat transcripts to improve the service and follow up on requests. Please do not put sensitive personal information into the chat. Inside Nexum, AI-based features run only if the Agency turns them on and supplies its own provider credentials. The data goes to the provider the Agency chose, under the Agency's own agreement with it. 502ZONE does not use Agency data to train models. We cannot control how a third-party provider handles data, so the Agency should review that provider's terms.

7. Who we share information with

We share information only with providers that help us run the business, under confidentiality and security obligations: a payment processor, website hosting and email delivery, our AI provider for MIA, analytics, and professional advisers. We may disclose information if the law, a court or a regulator requires it, to protect rights and safety, or in a merger or sale of the business. We do not sell your information. We do not share Agency installation data with anyone, because we do not hold it.

8. Cookies and analytics

Our website uses cookies and similar technology that are needed for the site to work (such as a session cookie and the chat widget), plus Claude AI to understand how the site is used. You can block or delete cookies in your browser; some features may stop working. We honor browser opt-out signals such as Global Privacy Control where the law requires. The public demo uses fictional data only.

9. Security

We use reasonable safeguards: encrypted connections, access controls on our systems, and encryption of stored credentials in the Nexum credential vault, which sits in the Agency's own installation. No system is perfectly secure. Because the Agency runs Nexum on its own AWS account, the Agency is responsible for the security of that account and its users. If we learn of a breach affecting information we hold, we will notify affected parties as the law requires.

10. How long we keep it

We keep contact and chat records while we have a business relationship and for a reasonable period after, usually no more than six months. Purchase and license records are kept as long as needed for tax, accounting and legal reasons and to support updates. Server and analytics logs are kept for a short period. We delete or anonymize information when it is no longer needed. The Agency decides how long its own installation data is kept.

11. Your choices and rights

Depending on where you live, you may have the right to know what we hold about you, and to ask us to access, correct, delete or export it, to object to or limit certain uses, and to opt out of marketing. You will not be treated unfairly for using these rights. To make a request, contact us using the details in Section 15; we may need to verify your identity, and we will reply within the time the law requires (generally 30 to 45 days). You can opt out of marketing email at any time using the link in the message. If you are in the EEA, UK or a similar region, our legal bases are performing our contract with you, our legitimate business interests, your consent where we ask for it, and legal obligations. You may also complain to your local data protection authority.

12. International transfers

502ZONE is based in the United States and our providers may process information in the United States and other countries. Where the law requires, we use safeguards such as standard contractual clauses for transfers. An Agency's installation data stays in the AWS region the Agency chooses.

13. Children

Our website and Services are for businesses and are not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

14. Changes to this policy

We may update this policy as our products or the law change. We will post the new version here with a new date, and tell customers directly if a change is significant.

15. Contact us

502ZONE LLC Website: 502.zone Phone: (786) 524-4252 Privacy email: support@502.zone Address: 5900 Balcones Drive ste 100 Austin Tx 78731