Legal

Privacy & data.

What we collect, why, how long we keep it, and how to get rid of it. Plain language version below the legal one.

1 · Data we collect

Account details (name, email, country), payment metadata (card last 4, type — never CVV or full PAN), usage telemetry (pages visited, actions taken), and content you submit (briefs, messages, deliverables). If you claim a rewards kit, also your shipping address — see section 9.

2 · How we use it

  • To operate the marketplace and process orders.
  • To keep the marketplace safe: Nexora admins may read conversations between members (read-only) when checking a dispute, a safety report or a goodies claim. We never sell or share your messages.
  • To prevent fraud and abuse.
  • To send transactional notifications (order, payout, security).
  • To improve the product — anonymized aggregates only.

3 · Who we share data with

Payment processors (Stripe, PayPal, Razorpay), email delivery (Postmark), error monitoring (Sentry), and law enforcement when legally required. We do not sell your data to advertisers.

4 · Cookies

Strictly-necessary cookies for sign-in and CSRF. Functional cookies for theme + preferences. Analytics cookies are opt-in via the banner on first visit. You can change preferences anytime in Account → Notifications.

5 · Your rights (GDPR / CCPA)

You can request access, correction, deletion or export of your personal data. Email privacy@nexoraaero.com with proof of identity. We respond within 30 days.

You can also delete your account yourself, any time, from Account → Security → Delete my account. Your login, profile, photo, gigs, messages and uploaded files are removed straight away, and we email you a confirmation. We keep a short record — your name, email, member number and the date — so we can answer questions about past orders and payments.

6 · Retention

Account data: as long as your account exists, plus 12 months. Order/invoice data: 7 years (tax compliance). Telemetry: 24 months. Marketing: until you unsubscribe.

7 · Security

TLS 1.3 in transit. AES-256 at rest. SOC 2 Type II in progress (Q3 2026). 2FA strongly recommended for all accounts. Bug bounty: security@nexoraaero.com.

8 · Contact DPO

Data Protection Officer: dpo@nexoraaero.com · Nexora Aero Inc., 11 Madison Ave, NY 10010, USA.

9 · Goodies shipping details

If you claim a rewards kit, we collect your name, phone number, shipping address and clothing size. We use them only to review your claim and ship your kit, and we share them with the courier for delivery. Only you and Nexora admins can see them — they are never shown on your public profile. We delete them on request: email privacy@nexoraaero.com.

Last updated: 2026-10-03 · For account-specific data requests please email the DPO with proof of identity.