Privacy Policy

In short

The key points of this policy:

• We collect what we need to run your account and Subscription: mainly your email address and your OpenMarket account identity, plus your Discord user ID and name if you connect Discord and your TradingView username if you ask for access there.
• Payments are handled by Stripe. Your full card details never reach NexAlgo.
• We use cookies that are needed to run the Service. For visitors outside Europe, we also use the Meta Pixel to measure and improve our advertising. You can opt out.
• We do not sell your personal data.
• We may send you news and offers about NexAlgo by email. You can unsubscribe at any time.
• We do our best to keep your data safe. It is processed mainly in the United States.
• You can ask to access, correct or delete your data at any time by writing to support@nexalgo.com.

Who is responsible

NEXALGO LLC, a limited liability company organized under the laws of New Mexico, USA, is responsible for the personal data processed through the Service. Under the EU and UK General Data Protection Regulation (GDPR), NexAlgo is the controller.

Email: support@nexalgo.com.

What this policy covers

This policy applies to nexalgo.com, the member area, the emails we send and our Discord server, as far as we process your data there.

It does not cover the services of OpenMarket, TradingView, Discord, Stripe or Meta that you use under your own account with them. Their own terms and privacy policies apply to those services.

The data we collect and where it comes from

Most of the data we process comes from you directly. Some comes from the services you use to pay or connect, and some is created automatically when you use the Service.

• Account data (from you): your email address, your two-factor authentication settings if you turn them on, and your progress in the getting-started checklist in your account.
• OpenMarket connection data (from you and OpenMarket): the username you select, the stable account identity returned by OpenMarket, connection status, access expiry dates and the status messages OpenMarket returns, for example that a username was not found. We use these to connect the correct account and manage access to the included indicators.
• Discord data (from Discord, only if you connect Discord): your Discord user ID and username.
• TradingView data (from you, only if you ask for access there): the TradingView username you give us in a support ticket. We use it to grant and remove access to our indicators on TradingView.
• Subscription data (created by the Service and received from Stripe): your plan (Essentials or Complete), billing interval, subscription and payment status, start, renewal and end dates, upgrades, downgrades, cancellations and offers you accepted, and, for lifetime or complimentary access, the type of access, the reason for it and its expiry date.
• Billing data (from Stripe): the limited details Stripe shares with us, namely your name, your country and billing address, plus the brand and last four digits of your card.
• Support data (from you): the messages and information you send us through the support form in your account, by email or in the priority support channel on Discord, and our replies.
• Cancellation feedback (from you, only if you answer): when you cancel in your account, your answer to our question about why you are canceling, including any comment you write, and which offer we showed you and whether you accepted it.
• Testimonials (from you, only with your permission): the text of your testimonial, your first name, the initial of your last name and your country. See Testimonials below.
• Security data (collected automatically): when you sign in, your IP address, browser and device information and approximate location (country) for your session and the sign-in notification we email you, and counters of sign-in attempts that store your email address or account only in a non-reversible, hashed form.
• Records of access changes (created by the Service): a tamper-proof log of when access to the indicators and Discord was granted, renewed or removed, including the OpenMarket username you selected.
• Consent records (collected automatically when you give a consent or acknowledgement): the time and the version of the text you agreed to, for example at checkout.
• Advertising data (through the Meta Pixel, not for visitors from the EEA, the UK or Switzerland): see Cookies and advertising below.
• Email data (from you and our email provider): your email address and, for news and offers, whether you unsubscribed and, where we measure it, whether an email was opened or a link in it clicked.
• Waiting list data (from you, only if we run a waiting list and you join it): your email address.

What we do not collect

We keep the data we collect to what we need. In particular:

• We never ask for your OpenMarket password, and we do not receive your charts, alerts or activity on OpenMarket.
• We do not ask for access to your brokerage or exchange accounts and we do not collect your trading results.
• Your full card number and security code go directly to Stripe and never reach NexAlgo.
• We do not ask for sensitive data such as health information. Please do not include it in support messages.
• We do not record your sessions on our website.

How we use your data and our legal bases

We use personal data only for the purposes below. If you are in the European Economic Area (EEA) or the United Kingdom, the GDPR requires us to name a legal basis for each purpose. We give it after each purpose.

• To create and run your account, sign you in and protect your account, including optional two-factor authentication and an email when someone signs in to your account. Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
• To sell and manage your Subscription: take payments through Stripe, and handle renewals, upgrades, downgrades and cancellations. Legal basis: contract (Art. 6(1)(b) GDPR).
• To show you offers that fit your plan, such as one upgrade offer right after a purchase or one offer when you cancel, and to apply an offer you accept. Legal basis: our legitimate interest in offering suitable options (Art. 6(1)(f) GDPR); contract (Art. 6(1)(b) GDPR) for an offer you accept.
• To handle your cancellation and, if you answer our question, to learn why members cancel so we can improve the Service. Legal basis: contract (Art. 6(1)(b) GDPR) for the cancellation; our legitimate interest in improving the Service (Art. 6(1)(f) GDPR) for your answer.
• To grant, renew and remove access to the invite-only indicators on OpenMarket using your confirmed OpenMarket account identity, including lifetime and complimentary access, and to keep a record of these changes. Legal basis: contract (Art. 6(1)(b) GDPR); for the record, our legitimate interest in being able to prove how access was given and removed (Art. 6(1)(f) GDPR).
• To grant and remove access to our indicators on TradingView if you ask for it, using the TradingView username you give us. Legal basis: contract (Art. 6(1)(b) GDPR).
• To give you the guides, documentation, strategy playbooks, videos and weekly chart analysis that belong to your plan. Legal basis: contract (Art. 6(1)(b) GDPR).
• To add you to our Discord community and give you the role for your plan, and to remove that role when your Subscription ends. Connecting Discord is optional. Legal basis: contract (Art. 6(1)(b) GDPR).
• To answer support and contact requests. Legal basis: contract for customers (Art. 6(1)(b) GDPR); our legitimate interest in answering questions for everyone else (Art. 6(1)(f) GDPR).
• To send service emails, such as sign-in codes, sign-in notifications, confirmations of purchases and cancellations, reminders before yearly renewals, payment and access notices, and notices about important changes to the Service or our terms. Legal basis: contract (Art. 6(1)(b) GDPR) and, for notices the law requires, legal obligation (Art. 6(1)(c) GDPR).
• To send you news, product updates and offers about NexAlgo by email, and to measure how these emails are read so we can improve them. Legal basis: your consent where the law requires it (Art. 6(1)(a) GDPR); otherwise, for customers, our legitimate interest in telling you about similar products (Art. 6(1)(f) GDPR). Every such email contains a link to unsubscribe, and you can also unsubscribe by writing to support@nexalgo.com.
• To measure and improve our advertising with the Meta Pixel and to show our ads to people who visited our website. We do not load the Meta Pixel for visitors from the EEA, the UK or Switzerland, so no GDPR legal basis is needed for it.
• To calculate and collect taxes through Stripe Tax and to keep invoices and accounting records. Legal basis: legal obligation under EU or Member State law where it applies to us, for example EU VAT rules (Art. 6(1)(c) GDPR); for obligations under US law, our legitimate interest in meeting them (Art. 6(1)(f) GDPR).
• To record your consents and acknowledgements, for example your consent at checkout that the Service starts immediately, your acknowledgement about the right of withdrawal and your confirmation that you have read the Risk Disclosure. Legal basis: legal obligation (Art. 6(1)(c) GDPR) and our legitimate interest in being able to prove them (Art. 6(1)(f) GDPR).
• To keep the Service secure and working, find and fix errors, limit sign-in attempts, prevent fraud and abuse, detect the sharing or resale of access, and enforce our Terms of Service. Legal basis: our legitimate interest in protecting the Service, our customers and our business (Art. 6(1)(f) GDPR).
• To keep the Service running when OpenMarket or another provider changes its terms, fees, features or availability, for example by changing how access is delivered or by running a waiting list. Legal basis: contract (Art. 6(1)(b) GDPR); for a waiting list, steps you ask us to take before a contract (Art. 6(1)(b) GDPR).
• To understand in aggregate how the Service is used, for example how many members use each plan, so we can plan and improve it. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• To show testimonials on our website. Legal basis: your consent (Art. 6(1)(a) GDPR).
• To move the accounts of existing customers from our previous systems (see Moving from our previous systems). Legal basis: contract (Art. 6(1)(b) GDPR); for complimentary access, our legitimate interest in continuing access we promised (Art. 6(1)(f) GDPR).
• To establish, exercise or defend legal claims, including disputes and chargebacks. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) and, where applicable, legal obligation (Art. 6(1)(c) GDPR).
• To comply with the law and with lawful requests from authorities. Legal basis: legal obligation under EU or Member State law (Art. 6(1)(c) GDPR); for other laws, including US law, our legitimate interest in complying with them (Art. 6(1)(f) GDPR).

Where we rely on legitimate interests, we have weighed them against your interests and rights. You can object to this processing at any time (see Your rights), and to emails with news and offers without giving reasons. Where we rely on consent, you can withdraw it at any time. This does not affect processing that took place before you withdrew it.

Do you have to give us your data?

You need to give us your email address and connect an OpenMarket account to use the indicators in a Subscription. Without them we cannot create your account or grant access to the indicators. Stripe needs your payment details to process your payment.

Connecting Discord, turning on two-factor authentication, answering our question when you cancel and giving a testimonial are optional. You can opt out of the Meta Pixel.

Automated processing

When a payment succeeds or fails, or when a Subscription ends, our systems grant, renew or remove your access automatically. This follows directly from your Subscription status and is how we carry out our contract with you.

Apart from this, we do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.

Cookies and advertising

Cookies are small files a website stores in your browser. We place these cookies, which are strictly necessary to run the Service and do not need your consent:

• __Host-a_session_nexalgo-platform-prod: keeps you signed in. It expires after 7 days or when you sign out.
• __Host-a_session_nexalgo-platform-prod_pending: remembers your sign-in while you enter the code from your email. It expires with the code after 15 minutes.
• nexalgo_discord_state: protects the connection of your Discord account against forgery. It expires after 10 minutes.

The fonts on our website are served from nexalgo.com, so loading a page does not send requests to third-party font services. When you pay or connect Discord, you use pages provided by Stripe or Discord. Those providers may use their own cookies, for example for fraud prevention, under their own policies.

Meta Pixel. For visitors outside the European Economic Area, the United Kingdom and Switzerland, we use the Meta Pixel, a technology provided by Meta Platforms, Inc. (“Meta”). It places cookies in your browser and sends Meta information such as your IP address, browser and device information, the pages you visit on our website and actions such as a purchase. We use it to measure how well our ads on Facebook and Instagram work and to show our ads to people who visited our website. Meta may link this information with your Facebook or Instagram account and use it under its own privacy policy. We do not advertise in Europe and do not load the Meta Pixel for visitors from the EEA, the UK or Switzerland.

Your choices. You can opt out of the Meta Pixel at any time: if your browser sends a Global Privacy Control signal, we do not load it. You can also block or delete cookies in your browser settings and change your ad settings in your Meta account. Our website does not respond to browser “Do Not Track” signals in any other way.

We will update this policy before we add other cookies or tracking technologies.

Service providers we use

We use the following service providers to run the Service. They process personal data on our behalf and under our instructions, as set out in their data processing terms. They may not use your data for their own purposes, except where stated below.

• Appwrite (hosting, database, file storage and sign-in): hosts our website, member area and server functions, stores account, subscription and access data and the member files such as videos, and sends sign-in codes and sign-in notifications. Your data is stored in New York, United States; the website itself is delivered from several locations so that pages load quickly. Appwrite also processes the technical request and security data needed to operate these services.
• Stripe (payments, subscriptions and tax calculation through Stripe Tax): receives your email address, billing name, country and address, the payment details you enter directly with Stripe, and technical data such as your IP address for fraud prevention. For some purposes, such as fraud prevention and its own legal obligations, Stripe acts as an independent controller under its own privacy policy.
• Resend (email delivery): receives your email address and the content of the emails we send you, such as sign-in codes, service emails and, if you receive them, news and offers.
• Cloudflare (DNS): manages the domain name system for nexalgo.com and processes the technical data needed to direct your browser to our servers.
• Hostinger (email hosting): hosts our support@nexalgo.com mailbox, which stores the emails you send us and our replies.

Meta receives data through the Meta Pixel as described in Cookies and advertising.

Services you use under your own account

OpenMarket: your selected username connects an OpenMarket account to your NexAlgo entitlement. We exchange that username, the linked account identity and access expiry with OpenMarket to grant, renew and remove access. OpenMarket operates under its own terms and privacy policy. NexAlgo is independent and is not affiliated with or endorsed by OpenMarket.

TradingView: if you ask for access there, we enter the TradingView username you give us at TradingView to grant and later remove access to our indicators. TradingView operates under its own terms and privacy policy. NexAlgo is independent and is not affiliated with or endorsed by TradingView.

Discord: if you connect Discord, you sign in with Discord and Discord gives us your user ID and username. We use them to add you to our server and give you the role for your plan. Discord processes your data under its own privacy policy as an independent controller. Messages you post in our Discord server can be seen by other members and by our team.

Other disclosures

We may also disclose personal data in these cases:

• To authorities, courts or other parties when the law requires it, or when it is needed to protect our rights, our customers or others, for example against fraud.
• To our professional advisers, such as lawyers, accountants and auditors, who are bound by confidentiality.
• To a buyer, successor or investor if NexAlgo is involved in a merger, acquisition, financing or sale of all or part of its business. The recipient must protect your data in line with this policy, and we will inform you where the law requires.
• To anyone else with your consent or at your request.

Testimonials

We show testimonials from customers on our website. For each one we show the text word for word, the author’s first name, the initial of their last name and their country.

We publish a testimonial only with its author’s permission. You can withdraw your permission at any time by writing to support@nexalgo.com. We then remove your testimonial from our website promptly. Withdrawing does not affect our use of the testimonial before you withdrew.

Moving from our previous systems

If you were a NexAlgo customer before this policy took effect, we move the data we need to continue your Subscription or access from our previous systems to the systems described in this policy. This includes your email address, the username you used on our previous indicator platform and your plan or type of access. An old platform username does not automatically become an OpenMarket connection. We move only the data of customers whose Subscription or access continues. Your payment data stays with Stripe, which we continue to use. We inform existing customers about the move by email.

Our previous systems were a separate database hosted by Supabase and a tool hosted by PythonAnywhere that managed access on our previous indicator platform. After the move we stop using them and delete them. We keep an encrypted backup of the previous database only as long as we need it to answer questions about earlier purchases and access, and then delete it.

Our previous website used the Meta Pixel and the session-recording tool Mouseflow. Technical data and advertising identifiers from that time may be stored with earlier payment records at Stripe.

We do not sell your data

We do not sell your personal data. Our website shares data with Meta through the Meta Pixel for advertising, as described in Cookies and advertising. Under California law this can count as “sharing” for cross-context behavioral advertising. You can opt out at any time by sending a Global Privacy Control signal or by blocking cookies in your browser. Our previous website also used the Meta Pixel.

International transfers

NexAlgo is based in the United States. We and our service providers process your data mainly in the United States. Some providers may also process data in other countries where they or their subcontractors operate.

The United States may not offer the same level of data protection as your home country. When personal data is transferred from the EEA, the UK or Switzerland, we rely on the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework where the recipient is certified; on the European Commission’s Standard Contractual Clauses, with the UK Addendum where relevant, in our agreements with providers; and, where no other safeguard applies, on the fact that the transfer is necessary to perform our contract with you (Art. 49(1)(b) GDPR).

You can ask us for more information about these safeguards, and for a copy where applicable, using the contact details below.

How long we keep your data

We keep personal data only as long as we need it for the purposes in this policy or as the law requires. After that we delete or anonymize it. Our service providers may keep some data longer where their own legal obligations require it.

• Account data: while your account exists. When you ask us to delete your account, we delete it, except the data we must or may keep for the reasons below.
• OpenMarket connection data: while you have access, and afterwards as long as we need it to confirm that access was removed.
• TradingView username: while you have access there, and afterwards as long as we need it to confirm that access was removed.
• Discord user ID and username: while your Discord account is connected, and afterwards as long as we need them to remove your roles.
• Subscription, invoice and payment records: as long as tax and accounting laws require, generally seven years.
• Support messages and cancellation feedback: as long as we need them to handle your request and improve the Service, and no longer than your account exists, unless they are needed for a legal claim.
• Testimonials: while we show them or until you withdraw your permission. We keep the record of your permission afterwards as long as we may need to prove it.
• Security data: your sign-in session ends after 7 days at the latest. Counters of sign-in attempts expire after one day at the latest. Our hosting provider keeps technical logs for a short time only.
• Records of access changes: kept as a tamper-proof log as long as we need them to prove how access was given and removed and to prevent abuse.
• Consent records: while the related contract exists and afterwards as long as claims can be made about it.
• Email data for news and offers: until you unsubscribe or ask us to delete it.
• Waiting list entries: until you get access or ask to be removed.
• Backups: our daily database backups are kept for 7 days, so deleted data can remain in them until they expire.
• Data connected to a legal claim or dispute: until the matter is resolved.

How we protect your data

We do our best to keep your data safe and use technical and organizational measures suited to the risk. They include encrypted connections (HTTPS and encrypted database connections), database rules that let each account see only its own data, access to personal data limited to the people who need it for their work, server-side checks for every payment and every change of access, sign-in with email codes, optional two-factor authentication, limits on sign-in attempts and daily backups. Your card details are handled by Stripe and never reach our systems.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will inform you and the authorities where the law requires it. Please keep your email account secure, because it is used to sign in to NexAlgo.

Your rights

Wherever you live, you can ask us what personal data we hold about you, ask us to correct it, or ask us to delete it. You can cancel your Subscription and disconnect Discord in your account at any time. To change your email address or your connected OpenMarket account, write to support@nexalgo.com.

If you are in the EEA, the UK or Switzerland, you have these rights under data protection law:

• Access: get a copy of your personal data and information about how we use it.
• Rectification: have incorrect or incomplete data corrected.
• Erasure: have your data deleted, unless we must keep it, for example invoice records required by tax law.
• Restriction: ask us to limit how we use your data, for example while we check a complaint.
• Portability: receive the data you gave us in a structured, commonly used, machine-readable format, or have it sent to another provider where technically possible.
• Objection: object at any time to processing based on our legitimate interests, on grounds relating to your situation. You can object to direct marketing, including emails with news and offers, at any time without giving reasons.
• Withdrawal of consent: withdraw any consent you gave, at any time and with effect for the future.
• Complaint: lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work or where you think the infringement took place. In the UK this is the Information Commissioner’s Office (ICO), in Switzerland the Federal Data Protection and Information Commissioner (FDPIC). We would appreciate the chance to resolve your concern first.

Your California privacy rights

If you are a California resident, you have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA). We honor these rights for California residents.

In the last 12 months we collected the categories of personal information listed below. We collected them from the sources and used them for the business purposes described in this policy, and disclosed them for business purposes only to the service providers and parties listed above. We share identifiers and internet activity data with Meta through the Meta Pixel for advertising. We keep each category for the periods in How long we keep your data.

• Identifiers: email address, OpenMarket account identity and username, TradingView username if you ask for access there, Discord user ID and username, IP address and advertising identifiers from the Meta Pixel.
• Customer records: name, billing address, and the brand and last four digits of your card.
• Commercial information: your plan, your Subscription and payment history, and offers you accepted.
• Internet or other electronic network activity: security data such as browser information and sign-in events, and your activity on our website collected by the Meta Pixel.
• General location: your country and your billing address. We do not collect precise geolocation.
• Sensitive personal information: your account login details (your email address together with a sign-in code). We use them only to sign you in and protect your account.
• Other information you give us: support messages, cancellation feedback and, with your permission, testimonials with your first name, last initial and country.

You have the right:

• to know what personal information we collect, use and disclose, and to receive the specific pieces of it;
• to delete it;
• to correct it;
• to opt out of its sale or sharing (we do not sell it; we share it with Meta through the Meta Pixel, and you can opt out as described in Cookies and advertising);
• to limit the use of sensitive personal information (we use it only for purposes the law allows without this right);
• not to be discriminated against for exercising any of these rights, which means we will not deny you the Service or charge you a different price for doing so.

Authorized agents. You can use an authorized agent to make a request. We may ask the agent for your signed permission and ask you to confirm your identity with us directly.

Response times. We confirm receipt of a request within 10 business days and respond within 45 days. If we need more time, we will tell you and may extend this by another 45 days.

Notice at collection. This policy is our notice at collection under California law. We link to it wherever we collect personal data, for example when you create an account and at checkout.

Shine the Light. We do not disclose personal information to third parties for their own direct marketing purposes (California Civil Code section 1798.83).

How to exercise your rights

Email support@nexalgo.com from the email address on your account and tell us what you would like us to do. To protect your data, we verify your identity before we act, usually by confirming that you control that email address. We may ask for more information if we need it.

Exercising your rights is free. Where the law allows, we may refuse a request or charge a reasonable fee, for example if a request is clearly unfounded or excessive. If we cannot fulfill a request in full, we will tell you why.

Under the GDPR we respond within one month. For complex or numerous requests we may extend this by two further months, and we will tell you if we do.

Children

The Service is only for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has given us personal data, please contact us. We will close the account and delete the data, except records we must keep by law, such as invoices.

Links to other websites

Our website links to other websites and services, such as OpenMarket and Discord. We are not responsible for their privacy practices. Please read their privacy policies.

Changes to this policy

We may update this policy when the Service, our providers or the law change. We will post the new version on this page with a new date. If a change is significant, we will tell you by email or in your account before it takes effect. Where the law requires your consent to a change, we will ask for it.

Contact

NEXALGO LLC, New Mexico, USA.

Email: support@nexalgo.com