How data is processed when using Nexelorant: purposes, data categories, and user rights.

The official language of this document is English. The English text is legally binding and prevails in the event of any discrepancy between language versions.

/

General Provisions

This Privacy Policy (the "Policy") governs the processing and protection of user information when using the Nexelorant technology platform (the "Platform").

This Policy describes how information is processed when using Nexelorant. Reading the Policy or continuing to use the Platform does not, by itself, substitute for consent, where applicable law requires separate consent for the processing in question.

Data Processing Principles

Nexelorant follows the principle of data minimization and processes only the data necessary for the Platform to function, to keep it secure, and to improve the user experience.

In the current implementation, the Platform does not collect or store KYC data. This describes the current data-processing model; it is not a waiver of identification requirements where such requirements are imposed by applicable law.

Categories of Data Processed

In the current implementation, Nexelorant stores the Telegram ID, the Telegram username where one exists, linked wallet addresses, deal history and related system data, correspondence with support, data needed to operate Nexelorant's internal analytics features, and internal records linking the Telegram account, wallets, and operations and ensuring that state is correctly displayed in the interface and the database.

In the current implementation, Nexelorant does not collect or store, as separate categories, IP addresses, device or browser fingerprints or similar device identifiers, email addresses, phone numbers, or KYC data. Separate cookie-based web analytics, advertising trackers, and third-party behavioral analytics are not used. Nexelorant's internal analytics features are not third-party, cookie-based web analytics.

Some data is stored on Nexelorant's own server-side infrastructure: interaction through Telegram and the server database requires retaining information to identify the user, link their account, wallets, and operations, and correctly display state. This information may constitute personal data under applicable law; the user's anonymity is not guaranteed.

Blockchain Data

Transactions carried out on public blockchain networks when using Nexelorant are recorded on those networks. This is distinct from interface-interaction data and other data processed off-chain.

The user understands and agrees that such data is publicly available, cannot be changed or deleted, and is not controlled by Nexelorant.

Nexelorant bears no responsibility for the processing, analysis, or distribution of such data by third parties.

Cryptographic Signatures and TON Connect

In Nexelorant, actions that require user authorization are confirmed using the corresponding digital wallet. In the current implementation, TON Connect is used for this. Such actions are distinct from the infrastructure's permitted technical messages; the specific user-authorization mechanism may change in later versions of the service.

The Platform may receive user-signed data needed to carry out operations, but it has no access to private keys and cannot create signatures on the user's behalf.

Such signed data is used solely to confirm the user's actions, execute smart-contract logic, and submit transactions to the blockchain.

Transaction Submission Mechanisms

Nexelorant may use technical services, including transaction-submission infrastructure, to relay messages to the blockchain.

This technical infrastructure may relay data signed by the user, or initiate messages the code provides for, from a permitted sender. These mechanisms do not give the Platform any ability to create the user's signature, change the parameters they signed, or dispose of deal funds arbitrarily.

Disclosure to Third Parties

Nexelorant does not sell user data to third parties.

In the current implementation, user data is processed and stored within Nexelorant's own infrastructure. The user database is not handed over to external services for independent processing. The public nature of blockchain data, interaction with Telegram and the TON network, and ordinary infrastructure-level network exchanges are distinct from handing over the user database. These external interactions may occur outside Nexelorant's infrastructure and do not mean all related information is under its control. This description of the current model does not override the obligations imposed by applicable law.

Data Security

Nexelorant takes reasonable technical and organizational measures to protect data against unauthorized access, loss, alteration, or destruction.

However, the user acknowledges that using the internet, digital services, and blockchain technology carries inherent risk, and absolute security cannot be guaranteed.

Data Retention

Data is retained for as long as necessary to operate the service, fulfill obligations, and comply with applicable requirements. This Policy does not set a single fixed retention period by data category.

Data recorded on the blockchain cannot be changed or deleted by Nexelorant.

User Rights

Depending on applicable law, the user may have rights regarding their data, including the right to access that data, request its correction or deletion, restrict its processing, or object to its processing.

The user understands and agrees that exercising these rights may be limited by the nature of blockchain technology and decentralized systems.

International Data Processing

Using Nexelorant involves interaction with Telegram, public blockchain networks, and the infrastructure that keeps the service running. The external or public nature of these interactions does not mean the user database is handed over to external services for independent processing. It also does not, by itself, establish the legal classification of an international data transfer.

Data processing is subject to applicable data-protection law, including requirements on international transfers where they apply. Using the Platform or reading this Policy does not substitute for separate consent or another legal basis required by law, where one is required.

Changes to the Policy

Nexelorant reserves the right to amend this Policy at any time.

The updated version of the Policy is published in this section and takes effect upon publication, unless stated otherwise. Publishing an update or continuing to use the Platform does not substitute for any additional step that applicable law requires — separate notice, consent, or another condition — for the relevant processing.

Contact

For questions related to data processing, the user may contact Nexelorant through the Platform's interface or the official contact channels Nexelorant provides.

Questions about the legal documents

If a wording is ambiguous or a translation diverges from the English version, tell us the document, the clause number, and the text that needs clarifying.