Privacy notice

Nexora decides how and why your data is used. In data protection law that makes us the controller.

Our registered company name, number and registered office are not published here yet. They will appear in this section before Nexora accepts payment from anybody, and they are the details you would need to bring a complaint to a supervisory authority.

For anything in this notice, write to privacy@nexora.example.

Four kinds of data, and each exists for a different reason.

1. Account data. Email address, username, password (stored hashed, never in readable form), country of residence, and your account preferences.
2. Payment data. What you bought, when, and the amount. Card numbers are handled by our payment processor and never reach our servers. For payouts we hold the wallet address you nominate.
3. Trading data. Every order, fill, position and balance change on your accounts, plus the equity readings used to check the loss limits.
4. Technical data. IP address, browser and device type, approximate location derived from the IP, and pages visited.

We do not ask for and do not want your national ID number, financial statements or anything else beyond the list above, except the verification documents in section 04.

1. To run your account. Creating it, signing you in, showing your positions and enforcing the loss limits. Without this we cannot provide the service at all.
2. To take payment and make payouts. Processing the fee, and sending USDC to the wallet you nominate.
3. To keep the platform honest. Detecting the prohibited practices in the rulebook, such as one person running accounts under several identities, or accounts trading a shared signal.
4. To meet legal duties. Sanctions screening, tax and accounting records, and responding to lawful requests.
5. To improve the product. Aggregated, anonymous statistics such as pass rates, which page people leave from, and where the platform is slow.
6. To contact you. Service messages about your account, and marketing only if you have asked for it.

Where the law requires a legal basis, ours is performance of a contract for 1 and 2, legal obligation for 4, legitimate interests for 3 and 5, and consent for marketing under 6.

1. No identity document is needed to browse, buy an evaluation or trade. It is required once, before your first payout.
2. We collect a government-issued ID and, where required, a selfie to match against it.
3. Verification is carried out by a specialist provider on our behalf. They see the document; we see the result and a record that the check passed.
4. Documents are kept only as long as anti-money-laundering law requires, then deleted. The record that you passed is kept for as long as the account exists.
5. We never share verification documents with anyone except that provider and, where a legal or sanctions obligation demands it, the authority making the request.

1. Essential cookies keep you signed in and remember your settings. The site cannot work without them and they cannot be turned off.
2. Analytics cookies tell us which pages are used and where people give up. They are aggregated and are not used to build a profile of you.
3. We use no advertising cookies and no third-party trackers. Nothing on this site follows you to another one.
4. You can clear or block cookies in your browser. Blocking the essential ones will sign you out and keep you out.

We share only what a specific job needs, and only with these:

1. Payment processors, to take your fee and confirm it cleared.
2. The identity verification provider, for the one-time check in section 04.
3. Hosting and infrastructure providers, who store the data that runs the platform.
4. Email and support tools, to send service messages and answer your questions.
5. Market data providers, who supply prices to us. They receive no data about you.
6. Authorities, where a law, a court order or a sanctions obligation requires it.

We do not sell your data, and we do not share it with advertisers or data brokers. If we are ever acquired, your data moves with the business and this notice continues to apply until you are told otherwise.

Our infrastructure and some of our providers are outside your country, so your data may be transferred across borders. Where that happens we rely on the standard contractual clauses or an equivalent safeguard, which obliges the receiving party to protect the data to the same standard as here.

1. Account data, while the account is open, and for 30 days after you close it so a mistaken deletion can be undone.
2. Payment and payout records, for as long as tax and accounting law requires, typically seven years. These we cannot delete on request.
3. Verification documents, for the period anti-money-laundering law sets, then deleted automatically.
4. Trading data, while the account exists. After closure it is anonymised and kept only as aggregate statistics.
5. Technical logs, for 90 days.

Depending on where you live, you can ask us to:

1. Show you the data we hold about you.
2. Correct anything wrong. Most of it you can edit yourself in account settings.
3. Delete your data, except records we are legally required to keep, such as payment history.
4. Export your data in a portable format. Your full trading record can be exported from the dashboard at any time.
5. Object to or restrict a use that relies on legitimate interests.
6. Withdraw consent for marketing, at any time and without giving a reason.

Write to privacy@nexora.example and we will respond within 30 days. We never charge for this, and asking never affects your account or a pending payout.

1. Traffic is encrypted in transit, and data at rest is encrypted on our infrastructure.
2. Passwords are stored hashed. Nobody at Nexora can read yours, which is also why we can never send it back to you.
3. Access to production data is limited to the people whose job needs it, and is logged.
4. Two-factor authentication is available on your account and is required before your first payout. Turning it on early is the single most useful thing you can do here.
5. If a breach ever puts your data at risk, we will tell you and the relevant authority within the time the law allows.

Nexora is not for anyone under 18, or under the age of majority where they live if that is higher. We do not knowingly collect data from children. If we learn that we have, we delete it and close the account.

1. Service emails, such as a risk alert or a payout confirmation, are part of the product and are not marketing.
2. Product news and offers are sent only if you have asked for them.
3. Every marketing email carries an unsubscribe link that works immediately, and turning it off never affects your account.

Every change is published here with the date it took effect, and the version number is printed at the top. Material changes are notified by email at least 14 days before they take effect, so you have time to object or close your account.

If you think we have handled your data badly, write to privacy@nexora.example first. We would rather fix it than argue about it.

You also have the right to complain to the data protection authority in your country, and you can do that without coming to us first.