Privacy Policy

1. Browsing and technical data

You can browse public pages without creating an account. Our servers may keep standard technical records such as IP address, browser or device information, requested pages, timestamps and security events for delivery, abuse prevention and troubleshooting.

2. Account data

If you register, Nexito stores your email address, display name, a one-way password hash, verification status, account timestamps and course progress. Authentication records include a hashed IP value, user agent, session times and revocation status. Password-reset and verification tokens are stored as hashes.

3. Cookies and local storage

Nexito uses a language-preference cookie and browser local storage to remember your language. When you register, sign in or use protected forms, a secure first-party session cookie is used for authentication and CSRF protection. We do not use advertising or cross-site tracking cookies.

4. Telegram data

If you use the Nexito Telegram bot or Mini App, Telegram provides your numeric user ID, and — for groups and channels — chat identifiers. We use these only to deliver requested rates, verify channel membership where required, and manage bot activity. We do not sell this data.

5. First-party link analytics

The Nexito link-hub page may record a pseudonymous visitor identifier, page views, link clicks, language, referrer, campaign parameters and device category. These records are used to understand Nexito link performance and are not advertising profiles.

6. Third-party providers

Market prices, news and other service data may be fetched from third-party providers. Pages can also load source images or links from external websites. Those providers receive normal web-request information and apply their own privacy policies.

7. Data security

We apply technical controls including password hashing, hashed authentication tokens, CSRF protection, login rate limits, secure session cookies and restricted access to internal files. No online service can guarantee absolute security.

8. Retention and your choices

Operational records are retained according to service, security and troubleshooting needs and may be rotated. You can clear language storage, end sessions, stop using Telegram services, manage or delete your account from the account area, and request help or information about your data. Account deletion anonymizes the core profile and revokes active sessions.

9. Contact

For privacy or data questions, use the official support email below. Do not send passwords, authentication codes, private keys or wallet recovery phrases.

Support emailsupport@nexito.ir

10. Changes

We may update this policy. The latest version will always be available on this page.