JustPressOne
Effective date: August 1, 2026 · Last updated: August 1, 2026 · Version: 1.0
This policy explains what personal information JustPressOne collects from people who use the Nexus applications, why we collect it, who we share it with, and the choices you have. It applies to the Nexus web application, the Nexus iOS and Android companion apps, the Nexus desktop companion, and the Nexus APIs that support them (together, the “Services”).
Nexus is a business contact-center platform. It is licensed to organizations (each, a “Customer”) and used by the people those organizations authorize — agents, supervisors, and administrators. This policy describes how we handle the personal information of those authorized users. Throughout this policy, “you” means an authorized Nexus user.
Nexus accounts are created and controlled by the Customer that employs or engages you. You cannot self-register for Nexus, and Nexus is not offered to the general public.
Because Nexus is used in a work context and records how you work, this policy also serves as our notice at collection for California workers under Cal. Civ. Code § 1798.100(a). It is provided to you at or before the point we collect your information — when your account is provisioned and when you first sign in. Sections 3 and 6 state the categories we collect and the purposes for each; Section 9 states how long we keep them.
About the people you talk to. When you handle a call, voicemail, or text message in Nexus, that interaction contains personal information about the caller or texter. We process that content on behalf of the Customer, under the Customer’s instructions and our services agreement with them — not for our own purposes. If you are a caller or texter and want to know how your information is handled, contact the business you called; they decide what is collected and how long it is kept. Our commitments to Customers regarding that data are set out in our services agreement, not in this policy.
The Services are operated by JustPressOne, Inc., a Delaware corporation (“JustPressOne,” “we,” “us”), with its principal place of business at 17870 Newhope St, Suite 211, Fountain Valley, CA 92708-5439, United States.
For your account and profile information, and for the technical operation, security, and improvement of the Services, JustPressOne determines how the information is used. For call, message, and customer-record content that flows through Nexus, the Customer determines how the information is used and we act on the Customer’s behalf.
The categories below describe what we have collected in the twelve months preceding the date of this policy, and what we collect on an ongoing basis. We collect it from three sources: from you, when you sign in, use the apps, or write content; from the Customer that issued your account, when it provisions your profile, role, and assignments; and automatically from your device and our telephony provider, as you work.
Your employer or the Customer you work for uses this information to manage staffing and performance. If you have questions about how it is used in your employment, ask your employer.
Some of what we handle is sensitive personal information under California law. Specifically:
We use sensitive personal information only to perform the Services, to keep them secure, and for the other purposes permitted by Cal. Civ. Code § 1798.121(d). We do not use or disclose it to infer characteristics about you. Because our use is limited to those permitted purposes, the right to limit its use described in Section 11 does not apply — but if you believe we have used it otherwise, tell us and we will correct it.
Mapped to the categories in Cal. Civ. Code § 1798.140(v)(1):
| Category | Collected | Examples in Nexus |
|---|---|---|
| A. Identifiers | Yes | Name, work email, account ID, IP address, device and push tokens |
| B. Customer records (Cal. Civ. Code § 1798.80(e)) | Yes | Name, telephone extension, employer, hashed password |
| C. Protected classifications | No | — |
| D. Commercial information | No | — |
| E. Biometric information | No | — |
| F. Internet or network activity | Yes | Sign-in events, app usage and idle time, error and crash traces, server logs |
| G. Geolocation data | No | No location permission is requested or used |
| H. Audio, electronic, and similar information | Yes | Call recordings, voicemail audio and transcripts, SMS and MMS content and attachments |
| I. Professional or employment information | Yes | Role, permissions, queue assignments, availability, handle time, performance metrics |
| J. Education information | No | — |
| K. Inferences | No | We do not build profiles or infer characteristics about you |
| Sensitive personal information (§ 1798.140(ae)) | Yes | Log-in credentials; contents of messages, voicemail, and recorded calls |
Every category marked “Yes” has been disclosed for a business purpose in the preceding twelve months to the categories of recipients listed in Section 7: the Customer that issued your account, our service providers, and, where required, legal and governmental authorities. None has been sold or shared for cross-context behavioral advertising.
Nexus asks for the following permissions. Each is requested at the point it is needed, with an explanation, and each can be denied or revoked in your device settings. Denying a permission limits the related feature but does not prevent you from signing in.
| Permission | Platform | Why Nexus needs it |
|---|---|---|
| Microphone | iOS, Android | To carry your voice on calls you place and answer in Nexus. Without it, calls cannot connect. Nexus does not open the microphone outside an active call. |
| Notifications | iOS, Android | To alert you to an incoming call, a new task, or a new message when the app is in the background or closed. |
| Bluetooth / nearby devices | Android | To route call audio to a paired headset. Nexus reads the connection state of audio devices only; it does not scan for or track nearby devices. |
| Contacts | Android | To display a caller’s name from your device address book on an incoming call. The lookup is performed on your device and contacts are never uploaded. |
| Manage own calls / foreground service | Android | To present incoming Nexus calls through the Android system call interface and keep a call alive while the app is in the background. |
Calls handled in Nexus may be recorded, where the Customer has enabled recording for the account or channel. Recording exists so the Customer can verify what was said, resolve disputes, train staff, and meet its own regulatory obligations.
Notice is given at the start of the call. On channels configured for recording, Nexus plays an automated announcement before the conversation begins, so that every party is told. Recording captures your voice as well as the other party’s. If you do not consent to being recorded, do not handle calls on a recorded channel and raise it with your employer.
Recordings and voicemail audio are captured by our telephony provider, Twilio, which is the system of record for them. Copies may be stored in our Azure file storage for backup and playback. Either way, they are accessible only to Nexus users whose role permits it. Where a Customer enables voicemail transcription, Twilio converts the audio to text automatically; the transcript is not routinely read by our staff, though an engineer may access one when investigating a fault you or the Customer reports.
Recording laws vary by state, and several states require the consent of all parties to a call. Whether recording is switched on, and whether it is lawful to switch it on, is the Customer’s decision and the Customer’s responsibility.
| Purpose | Information used |
|---|---|
| Authenticate you and keep your session secure | Account, authentication, device |
| Route calls, messages, and tasks to you and connect audio | Account, device, push tokens, call activity |
| Notify you of incoming calls, tasks, and messages | Push tokens, device |
| Show your team’s supervisors staffing, queue, and performance views | Work activity, call activity |
| Provide call, message, and recording history to the Customer | Call activity, message content, recordings |
| Diagnose crashes, investigate faults, and improve reliability | Diagnostic, device, account identifier |
| Detect and prevent abuse, fraud, and unauthorized access | Authentication, device, server logs |
| Meet legal obligations and respond to lawful requests | Any of the above, as required |
We do not use your information to build advertising profiles, and we do not use the contents of calls or messages to train machine-learning models.
Your employer or the organization that issued your Nexus account can see your profile, your activity and availability history, your performance metrics, the calls and messages you handled, and any recordings of those calls, subject to the permissions configured in their account.
We use a small number of vendors to run the Services. Each is engaged under a written contract that restricts it to using the information only to provide its service to us, prohibits it from selling the information or retaining it for its own purposes, and requires it to provide a level of protection at least equivalent to the protections described in this policy. These vendors are service providers under Cal. Civ. Code § 1798.140(ag); disclosures to them are not sales.
| Provider | Role | Information received |
|---|---|---|
| Twilio | Telephony and messaging | Call audio and metadata, recordings, voicemail and its transcription, SMS and MMS content, worker identifiers, push delivery |
| Microsoft Azure | Cloud hosting, database, file storage, secrets | All data stored by the Services |
| Microsoft Entra ID | Single sign-on (where the Customer enables it) | Sign-in identifiers and authentication events |
| Google (Firebase Cloud Messaging) | Android push notification delivery | Push tokens and notification payloads |
| Google (Firebase Crashlytics) | Mobile crash reporting | Crash traces, device model, OS version, app version |
| Apple (Push Notification service) | iOS push notification delivery | Push tokens and notification payloads |
| Sentry | Application error monitoring | Error traces, user identifier, request context |
| Twilio SendGrid | Transactional email | Email address and message content |
This list is exhaustive. No other third party receives personal information from the Services.
We may disclose information if we believe in good faith that disclosure is required by law, subpoena, or other legal process, or is necessary to protect the rights, property, or safety of JustPressOne, our Customers, or the public.
If JustPressOne is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We will notify Customers before their data becomes subject to a different privacy policy.
JustPressOne does not sell personal information, and does not share personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act. We have not done either in the preceding twelve months, including with respect to the personal information of anyone under 16. Because we do not sell or share, there is no opt-out to offer — but we honor an opt-out preference signal if we receive one, and we will not treat you differently for sending it.
The Nexus applications contain no advertising, no advertising SDKs, and no cross-app tracking or behavioral analytics SDKs. The only third-party code that reports back from the apps is crash and error reporting, described in Section 3.7, which we use to fix faults.
Some browsers send a “Do Not Track” signal. There is no common industry standard for how to respond to one. Because we do not track users across third-party websites over time, the Nexus web application does not behave differently when it receives a Do Not Track signal — there is no cross-site tracking for it to switch off.
We keep information for as long as your account is active. After that, our standard retention period is 90 days, after which we delete or de-identify it.
| Category | Retention period |
|---|---|
| Account and profile | For the life of the account, then 90 days after deactivation |
| Call and message metadata | 90 days |
| Call recordings and voicemail | 90 days |
| SMS and MMS content and attachments | 90 days |
| Agent activity and performance events | 90 days |
| Crash and error reports | 90 days |
| Server access logs | 90 days |
| Push notification tokens | Until the device is unregistered or the token is rejected as stale |
Where we de-identify information instead of deleting it, we maintain it in de-identified form, do not attempt to reidentify it, and contractually require the same of anyone we give it to.
We may keep information longer than the periods above where the law requires it, where it is needed to resolve a dispute or enforce our agreements, or where a Customer’s written agreement with us specifies a longer period for that Customer’s data.
No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the affected Customer without undue delay and within the timeframes applicable law requires.
Depending on where you live, you may have the following rights over the personal information we hold about you:
These rights are recognized under the California Consumer Privacy Act, as amended by the CPRA, and under comparable laws in Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. Residents of those states have substantially the rights described above, and we extend them to every Nexus user regardless of where they live.
You can reach us two ways:
We will confirm receipt within 10 business days and verify your identity before acting. We will respond substantively within 45 days, extendable once by a further 45 days where the request is complex, and we will tell you if we need the extension. There is no charge for a reasonable request.
You may use an authorized agent to submit a request. We will ask the agent for written proof of your authorization and may ask you to confirm it directly.
One important limitation. Because your Nexus account belongs to the organization that issued it, much of the information described in this policy is held by us on that organization’s behalf. If your request concerns call recordings, message content, or work performance records, we will forward it to that organization and support them in responding. Their decision governs, and we will tell you where we have done this.
If we decline your request, you may appeal by replying to our decision with the word “Appeal” and your reasons. We will respond to an appeal within 45 days. If we deny the appeal, California residents may complain to the California Privacy Protection Agency or the California Attorney General; residents of other states may contact their state attorney general.
Nexus has no self-registration. You cannot create a Nexus account, and for that reason the apps do not include a button that immediately destroys one. Your account is issued, assigned, and withdrawn by the organization that employs or engages you. Letting an individual agent delete their own account on the spot would interrupt that organization’s staffing and remove records it may be legally required to keep.
You can still ask for your account and personal information to be deleted, at any time, by any of these routes:
On a verified request we delete your profile, name, email address, photo, credentials, session and API tokens, push notification tokens, and your role and assignment records. We complete this within 30 days and confirm it in writing.
Records of work performed for the organization that issued your account — call and message logs, call recordings, voicemail, and the notes and client records you wrote — belong to that organization. We hold them as its service provider, and whether they are deleted is its decision, not ours. If your request covers them, we will pass it to the organization within 10 business days, help it respond, and tell you that we have done so and who to follow up with.
We also keep information where the law requires us to. In every case we will tell you what was deleted, what was retained, and why.
The Services are hosted in Microsoft Azure data centers in the United States, and are offered to Customers established in the United States. Our service providers may process limited data in other countries where they operate. If you access Nexus from outside the United States — for example, as a remote agent — your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. This policy does not address the requirements of the EU or UK GDPR; if your organization needs those addressed, contact us.
Nexus is a workplace tool intended only for adults authorized by a Customer. It is not directed to children, we do not knowingly collect personal information from anyone under 13, and we do not knowingly collect, sell, or share the personal information of anyone under 16. If we learn that we have collected information from a child, we will delete it promptly.
We may update this policy as the Services change or as the law requires. When we do, we will revise the “Last updated” date above. If the change is material, we will give notice in the app or by email at least 15 days before it takes effect. The current version is always available at ringnexus.ai/privacy.
For any question about this policy or about how we handle your information:
JustPressOne, Inc.