Legal

Privacy & data.

What we collect, why, how long we keep it, and how to get rid of it. Plain language version below the legal one.

1 · Data we collect

Account details (name, email, country), payment metadata (card last 4, type — never CVV or full PAN), usage telemetry (pages visited, actions taken), and content you submit (briefs, messages, deliverables).

2 · How we use it

  • To operate the marketplace and process orders.
  • To prevent fraud and abuse.
  • To send transactional notifications (order, payout, security).
  • To improve the product — anonymized aggregates only.

3 · Who we share data with

Payment processors (Stripe, PayPal, Razorpay), email delivery (Postmark), error monitoring (Sentry), and law enforcement when legally required. We do not sell your data to advertisers.

4 · Cookies

Strictly-necessary cookies for sign-in and CSRF. Functional cookies for theme + preferences. Analytics cookies are opt-in via the banner on first visit. You can change preferences anytime in Account → Notifications.

5 · Your rights (GDPR / CCPA)

You can request access, correction, deletion or export of your personal data. Email privacy@nexoraaero.com with proof of identity. We respond within 30 days.

6 · Retention

Account data: as long as your account exists, plus 12 months. Order/invoice data: 7 years (tax compliance). Telemetry: 24 months. Marketing: until you unsubscribe.

7 · Security

TLS 1.3 in transit. AES-256 at rest. SOC 2 Type II in progress (Q3 2026). 2FA strongly recommended for all accounts. Bug bounty: security@nexoraaero.com.

8 · Contact DPO

Data Protection Officer: dpo@nexoraaero.com · Nexora Aero Inc., 11 Madison Ave, NY 10010, USA.

Last updated: 2026-04-12 · For account-specific data requests please email the DPO with proof of identity.