Legal

Privacy Policy

Last updated: July 9, 2026

1. Introduction

This Privacy Policy explains how Nexora ("we", "us", "our") collects, uses, discloses and protects personal data when you visit nexora-store.org (the "Site") or purchase our products through our storefront on whop.com. We are the controller of the personal data described in this policy, except where a third-party service acts as an independent controller of its own data (for example, whop.com for payment data).

2. Data we collect

We collect only the data we need to operate the store and fulfil orders:

Order data (from whop.com): receipt id, product id, customer email, order amount, currency, country and timestamp.
Support data: messages you send us by email or through the storefront, together with any information you include.
Technical data: IP address, user-agent, referrer, approximate location derived from the IP, and basic request logs collected by our hosting provider for security and diagnostics.
Cookies and similar technologies: strictly necessary cookies used to keep the site working; we do not use advertising cookies. Any analytics we run is aggregated and does not identify individual users.

We do not collect or store card numbers, CVV codes, or full banking details. Those are handled entirely by whop.com.

3. How we use data

We use personal data to:

process orders and deliver access to purchased materials;
send transactional email such as receipts and delivery links;
provide customer support and handle refund requests;
detect and prevent fraud, abuse and security incidents;
comply with legal, accounting and tax obligations.

4. Legal bases (EEA / UK)

If you are in the EEA or the UK, we rely on the following legal bases under the GDPR / UK GDPR:

Contract: to process and deliver your order.
Legal obligation: to keep records for tax and accounting.
Legitimate interests: to secure the site, prevent fraud, and improve the service, balanced against your rights.
Consent: where required, for example for non-essential communications you specifically opted into.

5. Sharing and processors

We do not sell personal data. We share data only with service providers that help us operate the store, under written agreements that require them to protect the data:

whop.com — merchant of record, checkout, receipts, refunds.
Hosting and database provider — hosts the Site and stores order records.
Transactional email provider — sends delivery and support emails from info@nexora-store.org.

We may also disclose personal data to comply with a legal obligation, to protect the rights, property or safety of Nexora, our customers or others, and in connection with a corporate transaction such as a merger or asset sale.

6. International transfers

Some of our processors are located outside your country. Where personal data is transferred outside the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the UK IDTA.

7. Retention

We keep order records for as long as necessary to provide access to purchased materials, handle support and refund requests, and comply with legal, accounting and tax obligations — typically up to seven (7) years after the order date. Support emails are retained for as long as needed to resolve the request and for a reasonable follow-up period. Technical logs are kept for a short rolling window for security and diagnostics.

8. Security

Order data is stored in a managed Postgres database with row-level security and no public read access; only trusted server-side code can read or write order records. Traffic to and from the Site is encrypted with HTTPS. No system is perfectly secure, but we work to apply reasonable technical and organizational measures appropriate to the risk.

9. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent where processing is based on consent. Residents of California and other US states with equivalent laws may have similar rights, including the right to opt out of certain sharing. To exercise any of these rights, contact us at info@nexora-store.org. You also have the right to lodge a complaint with your local data protection authority.

10. Children

The Site is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last updated" date. Material changes will be announced on the Site.

12. Contact

Nexora — info@nexora-store.org
Storefront: whop.com/yournexora