Privacy Policy
Introduction
Nexoid Ltd. (“Nexoid,” “we,” “us,” or “our”) operates the Trakory platform. This Privacy Policy explains how we collect, use, share, and protect your personal information when you access or use our website, application, and services.
We are committed to protecting your privacy and handling your data with transparency. This Policy covers information collected through our website https://www.trakory.com, the Trakory application, and related services.
Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, and authentication credentials, collected when you register for an account via Clerk.
- Profile Information: Avatar, display name, and profile settings you choose to provide.
- Billing Information: Payment method details, billing address, and transaction history, collected and processed by Stripe. We do not store full payment card numbers.
- Communications: Information you provide when contacting support or responding to surveys.
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, time spent, and interactions within the platform.
- Device Information: IP address, browser type and version, operating system, device identifiers, and screen resolution.
- Cookies and Tracking: Information collected through cookies and similar technologies. See our Cookie Policy for details.
- Error Data: Error logs, crash reports, and performance metrics collected via Sentry.
2.3 Information from Third Parties
- Authentication: Clerk provides us with verified identity information when you log in.
- Payment: Stripe provides us with payment confirmation, billing details, and transaction metadata.
- Analytics: Google Analytics provides aggregated usage statistics and behavioral data.
How We Collect Information
- Direct Collection: Through registration forms, account settings, billing flows, and support communications.
- Automated Collection: Through server logs, analytics tools, error monitoring services, and cookies.
- Third-Party Collection: Through authentication providers (Clerk), payment processors (Stripe), error monitoring (Sentry), and analytics (Google Analytics). Each provider operates under its own privacy framework.
How We Use Information
We use your information for the following purposes and legal bases:
Providing Services and Performing Our Contract
To create and manage your account, authenticate your identity, process payments, deliver platform features, and provide customer support.
Legitimate Interests
To improve and optimize the platform, ensure security and prevent fraud, analyze usage patterns, send service-related communications, and enforce our Terms of Service.
Compliance with Legal Obligations
To comply with applicable laws, regulations, legal processes, and governmental requests, including tax and record-keeping obligations.
With Your Consent
To send marketing communications (where required by law), deploy non-essential cookies, and collect sensitive information where applicable.
We do not use your information for automated decision-making that produces legal effects concerning you, or for targeted advertising.
Data Retention
We retain your personal information for as long as your account is active, plus 90 days following account deletion, to allow for data export and to meet legal obligations. After this period, your data is permanently deleted or anonymized.
Billing information is retained for 7 years as required by tax and financial regulations. Anonymized usage and error data may be retained indefinitely.
Upon termination, you may request data export within 30 days. After 90 days, we reserve the right to permanently delete your data. Some information may be retained in backups for a reasonable period.
Data Security
We implement and maintain reasonable technical, administrative, and physical security measures to protect your information, including:
- Encryption of data in transit (TLS 1.2+) and at rest (AES-256).
- Access controls and authentication requirements for personnel.
- Regular security assessments and monitoring.
- Incident response and breach notification procedures.
- Vendor security assessments for third-party providers.
No method of transmission or storage is 100% secure. We cannot guarantee absolute security but will notify you of any data breach affecting your personal information in accordance with applicable law.
Your Rights and Choices
Depending on your jurisdiction, you may have the following rights regarding your personal information:
Right of Access
Know what personal data we hold and request a copy.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Deletion
Request deletion of your personal data, subject to legal retention requirements.
Right to Restrict
Request restriction of processing in certain circumstances.
Right to Portability
Receive your data in a structured, commonly used format.
Right to Object
Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent.
Right to Lodge a Complaint
File a complaint with your local data protection authority.
To exercise your rights, contact contact@nexoid.com. We will respond within 30 days. You may also manage your account information through your account settings.
International Data Transfers
Your information may be transferred to and processed in countries other than your own, including Israel (where our company is registered), the United States (where our hosting providers are based), and the European Union (where some service providers operate).
When transferring data from the EEA, UK, or Switzerland, we rely on: (i) Adequacy decisions by the European Commission for countries deemed to provide adequate protection, (ii) Standard Contractual Clauses approved by the European Commission, and (iii) other lawful transfer mechanisms as applicable.
Children's Privacy
The platform is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us at contact@nexoid.com and we will take steps to delete it.
Third-Party Services
This Privacy Policy does not apply to third-party services integrated with the platform. Each third party is responsible for its own privacy practices. We encourage you to review the privacy policies of:
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will notify you by email or through the platform. Your continued use after the effective date constitutes acceptance of the updated Policy.
GDPR Notice (European Economic Area and UK)
Data Controller: Nexoid Ltd. is the data controller for personal data collected through the platform.
Legal Bases: We process personal data on the following bases: (i) performance of a contract (e.g., account management, payment processing), (ii) legitimate interests (e.g., platform security, improvement, analytics), (iii) compliance with legal obligations (e.g., tax retention), and (iv) consent (e.g., marketing, non-essential cookies).
Your Rights: In addition to the rights listed in Section 8, EEA and UK users have the right to lodge a complaint with their local supervisory authority.
Data Transfers: We transfer data outside the EEA and UK using appropriate safeguards, including Standard Contractual Clauses.
Representative: For GDPR purposes, we may be contacted at contact@nexoid.com.
CCPA Notice (California Residents)
Categories of Personal Information Collected: Identifiers (name, email, IP address), commercial information (billing records), internet activity (usage data, cookies), and inferences drawn from the above.
Business Purpose for Collection: Providing services, security, debugging, quality improvement, and compliance.
No Sale of Personal Information: Nexoid does not sell your personal information. We do not have actual knowledge of selling personal information of minors under 16.
Your Rights: California residents have the right to know, delete, opt out, and non-discrimination. To exercise your rights, contact contact@nexoid.com. We aim to respond within 45 days.
Authorized Agent: You may designate an authorized agent to make requests on your behalf. We will require verification.
Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices: