Privacy Policy

We collect the following categories of information when you create an account, use our Services, or communicate with us:

• Account information: your full name, email address, and password. Your password is processed entirely by Firebase Authentication — it never reaches or is stored on Nexaris servers in any form.
• Communications: messages you send through our live chat feature, including support requests and project discussions.
• Transaction records: service descriptions, invoice amounts, payment status, and timestamps associated with your orders. We do not receive or store your card number, expiration date, or CVC — see "Payment Data" below.
• Basic technical data such as browser type and general usage logs, generated automatically by our hosting provider for security and reliability purposes.

We use the information we collect to:

• Create and maintain your account and authenticate your access to the Services.
• Deliver the software development or training services you request.
• Communicate with you about your projects, courses, invoices, and support requests.
• Process payments and generate the payment links and receipts associated with your orders.
• Maintain the security, integrity, and proper functioning of our platform.

We share limited information with the following third-party providers, solely to operate the Services:

• Firebase (a Google product) — used for account authentication and to store your account, chat, and transaction records in a cloud database.
• Stripe, Inc. — used exclusively to process payments. Stripe receives your payment details directly; Nexaris never has access to your full card information.
• Vercel Inc. — used to host our website and application infrastructure.

Nexaris LLC does not collect, transmit, or store any credit card numbers, expiration dates, CVC codes, or other full payment card data on our own servers at any time. All payment processing is handled directly and exclusively by Stripe, a PCI-DSS-compliant payment processor. We only retain the resulting transaction status (such as "pending" or "paid"), the amount, and the associated service description.

Our website uses a limited number of cookies and browser storage mechanisms necessary for authentication (via Firebase Authentication) and to keep you signed in between visits. We do not currently use third-party advertising cookies. For full details, see our separate Cookie Policy.

Your account, chat, and transaction data is stored using Google Firestore, hosted in the europe-west3 region (Frankfurt, Germany). This means that if you access our Services from Iraq, the United States, or elsewhere, your data is transferred to and stored on servers located outside of your country of residence, including outside of Iraq. By using our Services, you consent to this international transfer and storage of your information, which is protected by industry-standard encryption and access controls.

We retain your account and transaction information for as long as your account remains active, and for a reasonable period afterward as required to comply with our legal, accounting, and tax obligations, resolve disputes, and enforce our agreements. Chat message history is retained to preserve a record of service agreements and support history. You may request earlier deletion as described below, subject to our legitimate business and legal record-keeping needs.

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information, subject to legal retention requirements.
• Object to or request restriction of certain processing of your information.
• Request a copy of your data in a portable format.

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the right to know what personal information we collect, request its deletion, and opt out of any "sale" of personal information. Nexaris does not sell your personal information to third parties. To exercise any CCPA rights, contact us using the details below.

While our Services are primarily intended for users in the United States and Iraq, if you access our Services from the European Economic Area, the United Kingdom, or Switzerland, you may have additional rights under the General Data Protection Regulation (GDPR), including the rights described above and the right to lodge a complaint with your local data protection authority. Our legal basis for processing your information is the performance of our contract with you and our legitimate business interests.

Our Services are not directed to, and are not intended for use by, individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have inadvertently collected such information, we will delete it promptly.

We rely on industry-standard security measures provided by our infrastructure partners, including encryption of data in transit (HTTPS/TLS) and at rest, access controls, and authentication safeguards. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will update the "Last Updated" date at the top of this page whenever we make changes. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or wish to exercise any of your privacy rights, please contact us at academy@nexarisllc.com or (915) 339-9081.