Privacy Policy

Last updated September 2026.

Who this covers

This policy covers najmarketing.co (the public site), Nexus (NAJ’s internal operations tool), and Bloom (the client portal) — one data layer behind three doors. It doesn’t cover a client’s own website, ad accounts, or other tools NAJ manages on their behalf; those are governed by the client’s own agreements and the platforms’ own policies.

What we collect

Depending on which door you’re using:

• Visiting najmarketing.co. Standard server logs (IP address, browser, pages requested) kept for security and troubleshooting. No advertising trackers or analytics pixels run on the public site.
• Submitting a form (contact, project brief, the startup readiness survey, a calculator result you choose to send). Whatever you type into it — name, email, company, and the specifics of the form itself.
• Using Nexus (NAJ staff). Your account, role, and whatever business data you or a colleague enters — client records, tasks, proposals, time, and the rest of day-to-day agency operations.
• Using Bloom (NAJ clients). Your account, and the slice of your own account’s data Nexus shares with you — briefs, content, approvals, invoices, and campaign performance for ad accounts you’ve connected.
• Paying an invoice. Payment is handled directly by Stripe; NAJ never receives or stores your card details, only the resulting payment status.

How it’s used

• To respond to an inquiry, deliver a proposal, or run a project you or your company has engaged us for.
• To operate Nexus and Bloom — access control, notifications, and the records those tools are built around.
• To report on ad campaign performance, for a client who has connected a Meta (Facebook/Instagram) ad account — read directly from Meta’s own reporting API using that account’s own authorization, not collected by us independently and not routed through a third-party aggregator.
• To send transactional email — a proposal, an invoice reminder, a password reset — never marketing email without asking first.

Who else sees it

Only the processors that make the above possible, each bound to use it solely for that purpose:

• Supabase — the database and authentication behind Nexus and Bloom.
• Stripe — payment processing for Bloom’s Billing page.
• Resend — transactional email delivery.
• Google Drive — internal file storage for NAJ staff; connected by NAJ, not by clients or site visitors.
• Meta — the platform itself, for a client who has connected a Facebook/Instagram ad account; no third-party aggregator sits in between.

We don’t sell data, and we don’t share it beyond what’s listed here.

Cookies and local storage

Signing in to Nexus or Bloom stores your session in your browser’s local storage so you stay signed in — the same mechanism, not a tracking cookie. A separate local preference remembers light or dark mode. Neither is used to track you across other sites.

Your choices

To see, correct, or delete the data we hold about you, or ask a question about any of this, email hello@najmarketing.co. A Nexus or Bloom account can also be deactivated on request.

Changes

If this policy changes in a way that matters, we’ll update the date at the top of this page.