Privacy Policy

Last updated: August 1, 2026 · NxtGateW — NEXORA

NEXORA SASU (“we”, “us”), editor of the NxtGateW SaaS platform, is committed to protecting personal data in line with the GDPR (EU Regulation 2016/679) and French law. This Policy explains how we collect, use and safeguard data when you visit our website, create a Merchant / PSP account, or use our APIs and dashboards.

Introduction

This Policy should be read with our Terms of Service and Cookie Policy.

Data controller

Personal data collected via the NxtGateW website, registration, dashboards and support channels is controlled by NEXORA SASU, 195 Rue Pierre et Marie Curie, 27310 Bourg-Achard, France (SIREN 102 944 022), unless we inform you that another entity acts as controller for a specific product.

Where you (as Merchant) send End-customer identifiers into the Platform (e.g. external_user_id, webhook URLs), you typically remain controller for that End-customer data and NEXORA acts as processor under documented instructions.

1. Personal information we collect

• Account data: name, email, company, role (merchant / PSP / admin), hashed password, API credentials metadata.
• Usage & technical data: IP address, browser, timestamps, request logs, security events.
• Support: messages you send via the contact form or email, including attachments you choose to provide.
• Operational crypto metadata: wallet addresses, transaction hashes, network, status fields needed to operate splits and NFT queues (usually business / technical identifiers).
• Cookies: as described in the Cookie Policy (session, preferences, optional analytics).

2. Purposes and legal bases

• Provide the SaaS (contract / pre-contract steps): accounts, APIs, dashboards, webhooks.
• Security and abuse prevention (legitimate interest / legal obligation): auth, HMAC nonces, rate limits, logs.
• Support and onboarding (legitimate interest / contract): respond to contact requests.
• Legal & accounting (legal obligation): invoices and records where fees apply.
• Product improvement (legitimate interest): aggregated usage statistics.

3. Sharing

We do not sell personal data. We may share data with:

• hosting, email and infrastructure processors acting on our instructions;
• blockchain RPC / explorer providers as needed to operate the service;
• authorities when required by law;
• successors in a corporate transaction, under continued protection.

4. Transfers outside the EEA

If processors are located outside the EEA, we implement appropriate safeguards (e.g. Standard Contractual Clauses) and supplementary measures where needed.

5. Security

We apply access controls, encryption in transit (HTTPS/TLS), hashed passwords, encrypted private keys at rest where stored by the Platform, and operational monitoring. Absolute security cannot be guaranteed on the internet.

6. Your rights

You may request access, rectification, erasure, restriction, portability, or object to certain processing, and withdraw consent where applicable. You may lodge a complaint with the CNIL (www.cnil.fr). Contact us using the details below; we aim to respond within one month.

7. Retention

8. Cookies

See our Cookie Policy for details on types of cookies and how to manage them.

9. Changes

We may update this Policy to reflect legal or product changes. The “Last updated” date will be revised. Material changes may be notified via the website or email where appropriate.

10. Contact

Privacy / data protection — NEXORA SASU
195 Rue Pierre et Marie Curie, 27310 Bourg-Achard, France
Web: Contact form