Privacy Policy
Last updated: May 2026 — GDPR compliant.
This policy explains what personal data NexoraStream collects, why we collect it, and what rights you have.
1. Data we collect
- Order data: name, email, plan and country (provided by you on the contact / order form).
- Technical data: IP address, user-agent, anonymised device info (logged briefly for security).
- Analytics: page views and clicks, aggregated and anonymous (Google Tag Manager, opt-in only).
2. Why we use it
- Deliver and activate your subscription.
- Provide customer support.
- Detect fraud and abuse.
- Improve our website (with your consent for analytics).
3. Your rights (GDPR)
You have the right to access, rectify, delete or port your data, and to object to processing. Contact us anytime to exercise these rights.
4. Data retention
Order data is kept for the legal accounting period (10 years in most EU countries). Support messages are kept for up to 24 months. Analytics data is anonymised after 14 months.
5. Third-party services
- Backend & database: Supabase (EU region).
- Analytics: Google Tag Manager (only after cookie consent).
- We never sell your data to third parties.
6. Cookies
We use a small number of essential cookies (session, language) and optional analytics cookies. You can manage your preferences via the cookie banner at the bottom of the page.
7. Contact / Data Protection
For any privacy request, use our contact form. We respond within 30 days.