1) What this policy covers
This Privacy Policy applies to visitors of nyxlo.com, buyers and creators using the Nyxlo marketplace, members of the Nyxlo Discord community, and anyone who contacts us for support.
It does not cover third-party services we integrate with (for example Stripe, PayPal, Discord). These services process personal data under their own privacy policies.
2) Personal data we collect
We collect information you provide directly, such as account details (name, email, password), profile information, creator onboarding information (store name, payout details, tax or VAT numbers), support requests and attachments, and community content you post in Discord.
We also collect information automatically, such as IP address, browser type, device information, referral URLs, session logs, and cookies or similar technologies for login, checkout, analytics and preferences.
We may receive data from third parties, such as payment confirmation, payout status and fraud signals from Stripe or PayPal, and Discord account information if you link your accounts.
3) Why we process data
We process your data to operate the marketplace, provide support and safety, send necessary communications, deliver marketing with your consent, improve the service, and comply with legal and tax obligations.
Our legal bases include performance of contract, legitimate interests, consent where you choose to give it, and legal obligations.
4) Marketplace specifics
Nyxlo is the controller for data needed to operate the marketplace, such as accounts, transactions and payouts.
Creators may also process buyer data independently when providing their own support; in those cases, they act as separate controllers and must provide their own privacy notices.
Stripe and PayPal act as independent controllers for payment and payout processing.
5) Discord community
If you join our Discord, Discord itself is the data controller for activity on its platform. We only receive limited information such as your handle and server activity to provide roles, moderation and support.
6) Retention
We keep your data only as long as needed. Account and transaction data are kept for the life of your account and for statutory retention periods. Support tickets are usually kept for up to 24 months after closure. Marketing data is kept until you unsubscribe. We may anonymize data for statistics and service improvement.
7) Sharing of data
We share your data with payment and payout providers such as Stripe (including Stripe Connect) and PayPal, infrastructure providers for hosting, email, ticketing and analytics, and with Discord if you join our server. We may also share data with law enforcement or regulators where required by law.
8) Cookies and analytics
We use essential cookies for login, checkout and security, functional cookies to remember preferences, and analytics cookies to improve the service. You can manage non-essential cookies through our cookie banner or your browser settings.
9) Your rights
Under GDPR you have the right to access, rectify or erase your data, restrict processing, object to processing based on legitimate interests, request portability of your data, and withdraw consent at any time. You can exercise these rights by contacting us at info@nyxlo.com. You also have the right to complain to your supervisory authority.
10) International transfers
If we transfer your personal data outside the EEA or UK, we use appropriate safeguards such as the EU Standard Contractual Clauses and additional security measures where required.
11) Security
We implement technical and organizational measures to protect your data, including encryption in transit, access controls, and vendor due diligence. No system is completely secure, but we continually improve our safeguards.
12) Children’s privacy
Nyxlo is not directed to children under 16. We do not knowingly collect data from children under 16 without the required consent. If you believe a child has provided us data, please contact us and we will take action.
13) Marketing communications
We send transactional communications related to your account or purchases. We send marketing communications only with your consent, and you can opt out at any time using the unsubscribe link or by contacting us.
14) Automated decision-making
We do not use automated decision-making that produces legal or similarly significant effects without human involvement. Fraud and abuse signals may be automatically scored but are reviewed by staff.
15) Changes to this policy
We may update this Privacy Policy from time to time. We will post updates on our website. For material changes, we may provide additional notice by email or banner.
16) Contact us
If you have questions about this Privacy Policy or your data rights, contact us at info@nyxlo.com.