Privacy Policy

Last updated: February 19, 2026

1. Data controller

The data controller responsible for your personal data is:

  • Company name: Nyxo
  • SIRET: 93938004400015
  • Email: support@nyxo.com

2. Data we collect

We collect the following data:

  • Registration data: name, email address, password (hashed)
  • Discord login data: Discord ID, username, avatar (if you sign in via OAuth)
  • Payment data: processed directly by Stripe — we store no card details
  • Usage data: order history, active subscriptions, residential credits
  • Technical data: IP address, browser type, session cookies

3. Purposes of processing

Personal data is collected for the following purposes:

  • Creating and managing your user account
  • Processing and tracking your orders
  • Providing and managing proxy services
  • Communications about your account and subscriptions
  • Complying with our legal and accounting obligations

4. Legal basis for processing

Processing is based on:

  • Contract performance: to provide the services you ordered
  • Legal obligation: to comply with accounting and tax requirements
  • Legitimate interest: to improve our services and prevent fraud

5. Retention periods

Personal data is retained for the following periods:

  • Account data: for the duration of your registration, then 3 years after last activity
  • Order data: 10 years in accordance with accounting obligations
  • Technical data (logs): maximum 12 months
  • Session cookies: duration of session or maximum 30 days

6. Cookies

Nyxo uses only essential cookies:

  • Session cookies: required for authentication and keeping you logged in
  • Preference cookies: selected language

No advertising, analytics, or third-party tracking cookies are used.

7. Data sharing

Your personal data may be shared with:

  • Stripe: for secure payment processing
  • Discord: only if you use Discord OAuth login
  • Vercel: website hosting provider
  • Supabase: database hosting provider

We never sell, rent, or transfer your personal data to third parties for commercial purposes.

8. Your rights (GDPR)

Under the GDPR, you have the following rights:

  • Right of access: obtain a copy of your personal data
  • Right to rectification: correct inaccurate or incomplete data
  • Right to erasure: request deletion of your data
  • Right to restriction: limit processing of your data
  • Right to portability: receive your data in a structured format
  • Right to object: object to the processing of your data

To exercise these rights, contact us at: support@nyxo.com

You may also lodge a complaint with your national data protection authority.

9. Data security

We implement appropriate technical and organisational measures to protect your personal data. Passwords are hashed, communications are encrypted via HTTPS, and payments are processed securely by Stripe.

10. Changes to this policy

We reserve the right to update this policy at any time. Changes will be published on this page with an updated date.