Last updated: September 2026
NEXORA is an independent, unregistered individual project — not a registered company (see our About page). It's operated by one person. This policy explains what personal data is collected across the NEXORA platform, why, and what your rights are.
NEXORA is a software platform that lets merchants build and run their own online stores. This creates two roles that this policy treats separately: NEXORA acts as a data processor for the customer data that flows through merchants' stores (orders, addresses, reviews, etc.) — the merchant is the controller of that data and is responsible for their own store's privacy practices. NEXORA acts as a data controller only for the data it collects directly on its own marketing site (this site) — for example, contact-form messages and merchant account registrations.
If you register a NEXORA merchant account: your name, email address, password (stored hashed, never in plain text), and the business name you provide.
If you shop at a store built on NEXORA: the merchant collects your name, email, phone number, shipping and billing addresses, and order details, in order to process and fulfill your order. If you leave a product review, your display name is shown publicly but your email address is kept private and never published. If you sign up for a store's newsletter, your email (and optionally first name) is stored along with your marketing consent.
If you contact us through the Contact page: your name, email address, and the content of your message, solely to reply to you.
If you enable push notifications on a store: a device push token is stored so order-status updates can be sent to you. No consent timestamp beyond your device's own notification-permission prompt is currently recorded for this.
To create and secure your account, to let merchants fulfill and ship your orders, to respond to support and contact requests, to send order-status and (where you've opted in) marketing communications, and to power the AI features described below.
NEXORA's AI features are built on Anthropic's Claude API. When a merchant uses AI tools (product descriptions, forecasting, pricing recommendations) or when a shopper uses a store's AI chatbot, the relevant business data or chat message is sent to Anthropic to generate a response. Anthropic acts as a subprocessor and does not use this data to train its models under standard API terms.
The AI Fashion Studio feature (virtual try-on) sends a photo to Replicate, a third-party AI image provider, to generate try-on images. Only merchants upload photos for this feature — of themselves or a model they've arranged — never a shopper's own photo. Merchants are responsible for having the consent of anyone whose photo they upload.
We also use the following infrastructure providers, each acting as a data processor: Resend, for transactional email delivery; a cloud file-storage provider (S3-compatible), for images and uploaded files; and, where enabled in production, Sentry, for error monitoring — Sentry receives technical error/crash data only, and session recording is explicitly disabled in our configuration.
See our Cookie Policy for the full, current list of what runs on this site and on merchant storefronts, including the optional, merchant-controlled analytics integration (Hotjar) that some stores may enable.
We keep account and order data for as long as your account or the relevant store remains active, or as needed to comply with legal or accounting obligations, and delete or anonymize it when it's no longer needed for those purposes or when you ask us to.
Under Israel's Privacy Protection Law (as amended), you can ask to access the personal data we hold about you, ask us to correct inaccurate data, ask us to delete it, and object to your data being used for direct marketing at any time. If you're located in the EU/EEA, you have equivalent rights under the GDPR, including the right to lodge a complaint with your local data protection authority. To exercise any of these rights, use the Contact page — for a store-specific request (like a specific order), please also contact that store's merchant directly, since they control that data.
NEXORA and the stores built on it are not directed at children, and we do not knowingly collect personal data from children.
We'll update this page if what we collect or how we use it changes, and update the date at the top of this page accordingly.
Reach us via the contact page.