Privacy Policy

This Privacy Policy explains how Blyxxa LLC ("Company", "we", "us", or "our") collects, uses, protects, and discloses your personal data when you visit or use the NexusPages platform (https://nexuspages.com), our directory services, custom domain client storefronts, and related web applications.

1. Information We Collect

When you browse, register, or transact on our platform, we may collect the following categories of information:

• Account & Profile Information: Name, email address, telephone number, business profile, service categories, and physical location provided voluntarily during account creation or profile setup.
• Google User Data (OAuth 2.0): When you choose to sign in via Google OAuth, we only access your basic public profile information (such as your name, email address, and verified avatar) strictly to authenticate your identity and create your member profile. We never access your Google contacts, Google Drive files, or any other private data, and we never sell or share Google user data with third parties.
• Merchant Verification Documents: For verified merchant badges, business identity credentials (e.g., business licenses, tax certificates, owner ID) are submitted securely. These documents are stored exclusively in AES-256 encrypted storage vaults, accessible solely by authorized compliance staff, and are never made public.
• Device & Browsing Data: IP address, browser type, operating system, referring URLs, device identifiers, and page interaction timestamps collected automatically via standard server logs and cookies.
• Payment Information: All payment transactions (credit/debit cards, subscription plans) are processed directly and securely through Stripe. We do not store full credit card numbers or security CVV codes on our servers.

2. How We Use Your Information

We use the data collected strictly for legitimate business and operational purposes:

• To publish, host, and maintain your business profile, service listings, and digital marketplace presence.
• To authenticate user sessions, prevent fraudulent activities, and maintain platform security.
• To process membership upgrades, featured storefront packages, and subscription billings via Stripe.
• To send transactional emails, inquiry notifications, and vital administrative notices.
• To comply with legal obligations, consumer protection laws, and intellectual property enforcement.

3. Cryptographic Data Protection & Security (AES-256)

We implement strict administrative, physical, and technical safeguards to ensure your data remains confidential and protected against unauthorized access, loss, or disclosure:

• Encrypted Document Vault (AES-256-GCM): Sensitive verification files are instantly encrypted upon upload and kept in isolated storage inaccessible directly via the public web.
• TLS/SSL Encryption: All communications between your browser and our servers are encrypted using modern 256-bit TLS/SSL protocols.
• Restricted Access: Only vetted personnel with explicit authorization can review compliance records.

4. Third-Party Disclosures

We do not sell, rent, or trade your personal information to third-party data brokers. Information is only shared with:

• Service Providers: Trusted infrastructure and processing partners (such as Stripe for payments, transactional email delivery services, and secure cloud hosting).
• Legal Requirements: Regulatory authorities, law enforcement, or judicial entities when mandated by enforceable law or court orders.

5. Data Retention & Your Deletion Rights

We retain your personal information for as long as your account remains active or as necessary to fulfill the services requested. You have full control over your personal data:

• Account Deletion: You can permanently delete your user account and purge all associated profile data directly in your account dashboard under My Profile > Delete Account.
• Web Request: You can also submit an automated deletion request anytime at https://nexuspages.com/delete-account.

6. Global Privacy Rights (GDPR, CCPA/CPRA, International)

Depending on your location, you hold statutory rights regarding your personal information:

• California Residents (CCPA/CPRA): You have the right to know what personal data is collected, request deletion, and opt-out of any data sales (we do not sell your data).
• European Economic Area & UK (GDPR): You have the right to access (SAR), rectify, erase, restrict processing, and request portability of your personal data.
• Other Jurisdictions: We respect consumer privacy rights globally in accordance with local applicable statutes.