Privacy Policy

The data controller responsible for your personal data is:

• Company name: Nyxo LLC (trading as Nyxoproxies)
• Address: 30 N Gould St, Ste N, Sheridan, WY 82801, USA
• Contact: our Discord server (our only contact channel)

We collect the following data:

• Registration data: name, email address, password (hashed)
• Discord login data: Discord ID, username, avatar (if you sign in via OAuth)
• Payment data: processed directly by Stripe — we store no card details
• Usage data: order history, active subscriptions, residential credits and consumed volume
• Technical data: IP address, browser type, session cookies

Personal data is collected for the following purposes:

• Creating and managing your user account
• Processing and tracking your orders
• Providing and managing proxy services
• Communications about your account and subscriptions
• Complying with our legal and accounting obligations

Processing is based on:

• Contract performance: to provide the services you ordered
• Legal obligation: to comply with accounting and tax requirements
• Legitimate interest: to improve our services and prevent fraud

Personal data is retained for the following periods:

• Account data: for the duration of your registration, then 3 years after last activity
• Order data: 10 years in accordance with accounting obligations
• Technical data (logs): maximum 12 months
• Session cookies: duration of session or maximum 30 days

Nyxo uses essential cookies, set without consent:

• Session cookies: required for authentication and keeping you logged in
• Preference cookies: selected language, and your choice about advertising cookies (kept for 6 months)

Measuring our ads (Google Ads): the Google Ads tag measures how well our ads work (visits, sign-ups and purchases coming from an ad, with their amount). Without your consent, it sets no cookie and only sends cookieless signals to Google. With your consent, given on the cookie banner, it uses advertising cookies, keeps a click identifier for 90 days and sends your email address in hashed form when you make a purchase to link it to the ad.

Sign-up source: if you arrive from one of our campaigns (utm parameters in the address), the originating campaign and keyword are saved with your account when you sign up, without cookies, to measure our campaigns. This information is not shared with third parties.

Audience measurement: we use Vercel Web Analytics, which counts page views anonymously and in aggregate (page visited, country, device type, referring site), without cookies, without a persistent identifier and without storing your IP address. No consent is therefore required.

Your personal data may be shared with:

• Stripe: for secure payment processing
• Google (Google Ads): measuring how well our ads work (cookieless without your consent)
• Discord: only if you use Discord OAuth login
• Vercel: website hosting provider
• Supabase: database hosting provider
• Resend: sending verification and password reset emails
• Upstash: abuse protection (rate limiting by IP address)
• Our proxy providers: our datacenter and residential networks, which carry the traffic you send through our proxies

We never sell, rent, or transfer your personal data to third parties for commercial purposes.

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of your data
• Right to restriction: limit processing of your data
• Right to portability: receive your data in a structured format
• Right to object: object to the processing of your data

To exercise these rights, contact us on our Discord server (our only contact channel).

You may also lodge a complaint with your national data protection authority.