Privacy Policy

1. Information We Collect

We collect information to provide better services to all our users. We collect information in the following ways:

• Information you give us: Account credentials, recovery email, verified phone numbers, and profile details.
• Information we get from your use of our services: Log data, device information, location information, and interaction metrics.
• Security and Authentication data: Hardware tokens (Passkeys), TOTP devices, single-sign-on authorizations, and biometric hash identifiers.

2. How We Use the Information

We use the information we collect from all of our services to:

• Provide, maintain, and improve our authentication systems.
• Develop new features, such as advanced behavioral risk analysis.
• Protect Nexora and our users from fraud, abuse, and security threats.
• Notify you regarding account activity, security alerts, and administrative messages.

3. Data Sharing and Disclosure

We do not share your personal information with companies, organizations, or individuals outside of Nexora except in the following cases:

• With your consent: When you authorize a third-party integrated application via OAuth.
• For legal reasons: To meet any applicable law, regulation, legal process, or enforceable governmental request.
• With domain administrators: If you use Nexora through an organization, your domain administrator will have access to your account information.

4. Information Security

We work hard to protect Nexora and our users from unauthorized access to or unauthorized alteration, disclosure, or destruction of information we hold. We enforce encryption (TLS) on all data in transit and AES-256 for data at rest. We also provide features like Multi-Factor Authentication (MFA) and hardware security keys for account defense.

5. Your Data Rights

You can review, modify, or export the data we hold about you by visiting the Data & Privacy section of your Nexora Dashboard. You also have the right to request account deletion, which removes your data from our active systems permanently.