PRIVACY POLICY

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

The personal information we collect depends on the context of your interactions, your choices, and the features you use. It may include:

• Names
• Email addresses
• Usernames
• Billing addresses
• Debit/credit card numbers
• Business details
• Passwords
• Social media profiles

Sensitive Information: We do not process sensitive information.

Information automatically collected

In Short: Some information — such as your IP address and/or browser characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact info) but may include device and usage data, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and other technical analytics needed primarily to maintain security, operation, and optimization.

Google API

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for a variety of reasons depending on how you interact with our Services, including:

• To facilitate account creation and authentication: Managing user accounts and keeping them in working order.
• To deliver and facilitate delivery of services: Providing you with the requested strategic consultations or consulting blueprints.
• To respond to user inquiries and offer support: Troubleshooting issues and solving performance bugs.
• To send administrative information: Informing you about technical updates, terms modifications, and security alerts.
• To fulfill and manage your orders: Processing payments, refunds, and management configurations.
• To request feedback: Reaching out to maintain high platform value criteria.
• To send marketing and promotional communications: Based on your preference rules. You can opt out of marketing cycles at any time.
• To protect our Services: Maintaining infrastructure safety, logging, monitoring, and fraud defense.
• To identify usage trends: Tracking operations data to optimize interface experiences.
• To save or protect an individual's vital interest: Preventing immediate physical or financial harm.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason under applicable law.

If you are located in the EU or UK:

The GDPR and UK GDPR require us to outline the explicit legal bases we rely on:

• Consent: You have given explicit permission for a specific framework.
• Performance of a Contract: Necessary to complete requested subscription or product executions.
• Legitimate Interests: Necessary to achieve logical business interests (e.g., diagnosing system errors, preventing fraud, analyzing metrics to upgrade features) that do not outweigh your fundamental rights.
• Legal Obligations: Compliance with auditing bodies, regulatory networks, or judicial litigation requirements.
• Vital Interests: Mitigating extreme potential threats to absolute safety.

If you are located in Canada:

We process data under express or implied consent parameters. Exceptional situations where law permits processing without consent include:

• Collection is clearly in the interest of the individual and timely consent cannot be obtained.
• Investigations, fraud detection, or breach mitigation scenarios.
• Information contained in explicit witness statements needed to settle insurance claims.
• Identifying injured, ill, or deceased persons and communicating with next of kin.
• Reasonable grounds exist indicating structural financial abuse.
• Subpoenas, warrants, court orders, or official rules of judicial discovery.
• Data produced by an individual in the course of employment, business, or profession.
• Publicly available criteria specified explicitly by regional statutory regulations.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section and/or with verified third-party contractors.

We have contracts in place with third-party service providers designed to safeguard data handling bounds. They cannot perform operations outside our direct technical instruction, nor share your data with any independent organizations.

We share information during the following scenarios:

• Business Transfers: During negotiations or executions of mergers, financing, asset operations, or structural acquisitions.
• Affiliates: With corporate groups, parent companies, or subsidiaries, forcing alignment with this Privacy Notice guidelines.
• Business Partners: Sharing with integrated technical providers to offer contextual promotions or tool packages.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We use cookies, web beacons, and canvas tracking pixels to gather state interactions. Some support basic functions and account security rules, while third-party integrations support metrics reporting or targeted advertising frameworks.

To the extent these systems constitute "selling" or "sharing" data under US state privacy mandates, you can instantly leverage optimization choices inside the United States regional sub-clause below to toggle opt-out preferences. Detailed definitions are located within our standalone Cookie Notice.

6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

Our root database servers are located in the United States. Access requests from alternative geographies will necessitate encrypted pipeline flows into our infrastructure inside the US.

For EEA, UK, or Switzerland users: We utilize the European Commission's Standard Contractual Clauses (SCCs) to defend data transitions across regional boundaries, enforcing uniform compliance safety levels on all receiving targets. Copies are available upon official request.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain personal details only for the duration required to satisfy the operational objectives highlighted in this notice, unless tax, auditing, or compliance laws dictate extended archiving windows.

When active processing pipelines finish, the platform triggers automated data lifecycle handlers to permanently delete or anonymize tracking layers. If items sit inside compressed, isolated backup nodes, they are isolated until standard cleanup chronologies trigger complete deletion.

8. DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly solicit data from or market to children under 18 years of age. By operating this interface, you confirm your legal age or represent consent parameters for dependent dependents.

If data logs reveal information collection from minor accounts, the system will execute immediate profile deactivation sequences and clear all related telemetry records. Report discovered minor leaks to k.s@bexra.co.

9. WHAT ARE YOUR PRIVACY RIGHTS?

Depending on geographical residences (EEA, UK, Switzerland, Canada, or select US states), you possess enhanced rights regarding access control layers over your data records. This includes requesting copies, erasure validation, structural correction rules, or automated decision-making objections.

If an automated execution produces legal impacts, we will outline the decision factors and offer an easy method to request human review.

To log objections, lodge regulatory compliance updates, or withdraw processing consent, reach out using the contact references below. EEA/UK residents can submit formal grievances directly to their local data protection authorities.

Account Handling:

You can log into your account dashboard settings to instantly update records. Upon absolute termination requests, our database structures strip profile indices immediately, retaining only isolated ledger crumbs needed to prevent structural fraud or support regulatory audits.

10. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web platforms include a Do-Not-Track ("DNT") signal toggle. Because no uniform technical implementation matrix has been officially established across the software industry, we do not currently monitor or alter processing reactions based on DNT browser outputs. If future legal standards emerge, this framework will be fully refactored.

11. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

Residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia possess distinct statutory privileges to update, extract, or remove tracking files.

12-Month Historical Collection Ledger:

Retention Lifecycles: Collected datasets for active segments (Categories A, B, C, D, and I) persist safely for as long as the user maintains an open account profile.

Commercial Exploitation Rules: We do not sell or share datasets to third parties for commercial use, nor have we performed such operations in the preceding 12 months. We have disclosed Category B data purely under explicit service provider contracts to run internal business procedures.

Your available state privileges encompass:

• Right to know if processing cycles are active.
• Right to extract clear database documentation records.
• Right to fix found structural data inaccuracies.
• Right to enforce complete dataset deletion.
• Right to opt out of targeted ad placement or legal profiling routines (e.g., CT/MN/FL rules).
• Right to limit usage or disclose voice/facial recognition configurations.
• Right to acquire the explicit third-party target list where data was routed (e.g., MN/OR laws).

To appeal a turned-down right processing ticket, submit an email appeal to privacy@bexra.com. Further denials can be directed to your local State Attorney General.

12. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?

Australia:

We process data items following constraints bounded by Australia's Privacy Act 1988. If mandatory info fields remain unfulfilled due to user omission, it will restrict profile updates, validation steps, and client support workflows.

Correction or data extraction requests can be sent via our standard data manager paths. Unresolved disputes can be submitted directly to the Office of the Australian Information Commissioner (OAIC).

13. DO WE MAKE UPDATES TO THIS NOTICE?

Yes, we modify this structural text to maintain compliance with updated global privacy laws. Revised iterations will update the timeline tracking version stamp at the top of the page. Significant structural rewrites will trigger notification popups or direct email dispatches. Review this panel frequently to maintain alignment with tracking structures.

14. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at k.s@bexra.co or contact us by post at:

15. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or state of residence, you can request access to your personal information, extract processing details, correct inaccuracies, or delete records. To submit a data management request, please visit our centralized portal at: https://bexra.co/privacy/request-portal or email our team directly.