1. Who we are
Nexora (“we”, “us”) operates the community operating system at nexora.reversal.org, including discovery, memberships, dashboard tools, Discord-related features, and payment flows powered by Backout / Stripe.
2. Information we collect
Depending on how you use the service, we may collect:
- Account data — name, email, password hash (if using email signup), role, avatar, and login timestamps.
- Authentication data — identifiers and profile fields from Google or Discord when you sign in with SSO.
- Community & product data — organizations you own or join, memberships, products, coupons, settings, and content you submit.
- Payment data — checkout metadata, billing status, and related IDs. Card numbers are processed by Stripe; we do not store full card PAN data on our servers.
- Usage & technical data — IP address, browser type, device info, referral codes, and basic event logs needed to secure and operate the service.
- Communications — messages you send to support and transactional emails we send you.
3. How we use information
- Provide accounts, login (including SSO), communities, billing, and dashboard features.
- Process membership payments and platform plans through our payment partners.
- Operate Discord integrations you connect (for example online counts, invites, or bot tooling).
- Prevent fraud, abuse, and unauthorized access; diagnose outages; improve reliability.
- Send service notices (security, billing, product changes). Marketing email is only sent where allowed and with obvious unsubscribe options when applicable.
- Comply with law and enforce our Terms of Service.
4. Legal bases (where applicable)
Where GDPR/UK GDPR apply, we process personal data to perform a contract with you, for legitimate interests (security, product improvement, fraud prevention), with consent (where required), or to meet legal obligations.
5. Sharing
We do not sell personal information. We share data with:
- Service providers — hosting, email delivery, analytics if enabled, and payment processors (Stripe / Backout).
- Identity providers — Google or Discord solely to complete sign-in or linking you request.
- Community operators — limited profile or membership details needed for communities you join (for example display name or access status).
- Legal recipients — when required by law, regulation, or to protect rights, safety, and the integrity of the service.
6. Cookies and sessions
We use essential cookies and session storage for authentication, CSRF/OAuth state, and security. Disabling essential cookies may prevent login and account features from working.
7. Retention
We keep account and operational records for as long as your account is active and as needed for billing, security, and legal retention. You may request account closure; residual logs may remain for a limited period for fraud prevention and compliance.
8. Security
We use industry-standard safeguards such as HTTPS, hashed passwords, and access-controlled infrastructure. No method of transmission or storage is perfectly secure; please use a unique password and protect your devices.
9. International transfers
Data may be processed in the United States or other countries where we or our providers operate. Where required, we rely on appropriate transfer mechanisms and contractual protections.
10. Your choices and rights
You can update account details in the dashboard, disconnect some integrations where supported, and request access, correction, deletion, or export of personal data subject to legal exceptions. Contact [email protected]. If you reside in a region with local privacy laws (for example GDPR or CCPA), you may also have rights to restrict certain processing or appeal decisions as those laws provide.
11. Children’s privacy
Nexora is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal data from children. Contact us if you believe a child has provided data so we can delete it.
12. Changes
We may update this policy. Material changes will be reflected by a new effective date on this page and, when appropriate, notice in product or email. Continued use after the effective date constitutes acceptance of the updated policy where permitted by law.
13. Contact
Privacy questions: [email protected]. Also see our Terms of Service and FAQ.