01Scope and responsible service
This policy applies to nexahop.com, NexaHop Portal, subscription delivery, support tickets, and features directly connected to those services. NexaHop is the service brand and operator.
Third-party client apps, payment processors, email services, content delivery networks, and external websites have their own privacy practices. Review their policies before using them.
02Information we process
We limit processing to information reasonably needed for clear, specific service purposes.
- Account data: email address, account identifier, referral relationship, language, and notification preferences.
- Order data: plan, amount, currency, payment method, transaction reference, and order or callback status. Payment credentials are handled by the payment provider.
- Service data: plan entitlements, subscription status, traffic usage, connection times, node and service health, and necessary diagnostic records.
- Security and anti-abuse signals: IP or network-range signals, irreversible device-identifier digests, registration and login events, verification status, unusual requests, and risk decisions.
- Support data: messages, attachments, and case history that you submit. Never send passwords, verification codes, private keys, seed phrases, or complete payment credentials.
03Why we process information
- Create and secure accounts; provide email verification, sign-in, password reset, and notices.
- Create orders, validate payment callbacks, prevent duplicate crediting, and activate the purchased plan.
- Deliver subscriptions, measure traffic, operate nodes, diagnose incidents, and provide support.
- Limit repeated trial claims, automated registrations, account takeover, attacks, and other misuse.
- Measure service quality, campaign attribution, and product improvements when those functions are enabled, using only the necessary aggregate or event data.
- Meet applicable legal, dispute, audit, and security obligations.
04Security controls and trial eligibility
To distribute the one-day trial fairly, the system compares signals such as account history, device digests, IP, and network quotas. Risk outcomes determine trial eligibility and are not used to sell user profiles.
Anti-abuse risk records are normally retained for no more than 180 days. Records needed for a security incident, fraud, refund, or legal dispute may be retained for the necessary additional period.
05Payments and service providers
Payments are processed by the third-party method selected at checkout. NexaHop receives the amount, currency, transaction reference, and payment status needed to complete the order. We do not ask you to provide an account password, 2FA code, wallet private key, or seed phrase in a ticket.
We may use cloud infrastructure, DNS/CDN, email, payment, monitoring, and security providers. They process information only as needed to perform the contracted service and remain subject to their contracts and applicable law.
06Cookies, language, and attribution
The website uses session cookies for sign-in, security checks, and language selection. The public site may record source and conversion events that exclude passwords, search terms, and complete sensitive query parameters to evaluate pages and campaigns.
PropellerAds audience pixels load only after you choose to allow them. They place site visitors, registration intent, and registered users into time-limited audiences to reduce repeated ads, support retargeting, and exclude registered users from acquisition campaigns. The pixels do not read email addresses, verification codes, passwords, or form contents.
The public site uses Microsoft Clarity in cookieless, strictly text-masked mode to aggregate page-loading and interaction quality; this mode does not store a Clarity identifier in the browser. Persistently identified heatmaps and session-experience analysis are enabled only after you choose to allow them. Clarity does not read or record email addresses, verification codes, passwords, form inputs, or complete sensitive URLs.
You may limit non-essential cookies in your browser. Blocking session or security cookies may prevent sign-in, checkout, or saved language choices from working.
07Retention, disclosure, and international processing
We retain information for the time needed to deliver the service, meet financial obligations, resolve disputes, and protect the platform. When no longer needed, information is deleted, anonymized, or securely isolated.
NexaHop does not sell personal information. We disclose it only to necessary service providers, as part of a lawful merger or asset transaction, when required by law, or when necessary to protect users, the platform, or public safety.
Because nodes and providers operate in multiple regions, information may be processed outside your home region. We use applicable contractual, access-control, and security safeguards.
08Your rights and choices
Subject to applicable law, you may request access, correction, export, or deletion; object to or restrict certain processing; or withdraw consent where it can be withdrawn. Some order, security, or dispute records cannot be deleted immediately because of legal obligations.
Submit a request through an account ticket or at email@nexahop.com. To protect the account, we may verify your identity before responding.
09Minors, updates, and contact
The service is intended for users who have legal capacity to contract and is not directed to anyone under 18. A guardian who believes a minor submitted information should contact us promptly.
We may update this policy when our service, providers, or legal duties change. Material updates will be announced on the website, in the account, or by email, and the current date will appear above. Privacy questions may be sent to email@nexahop.com.