NexaChain Legal

Privacy Policy

This Privacy Policy explains how BioProtocol collects, uses, stores, and protects information when you use the NexaChain website, NexaChain Merchant application, NexaChain Buyer application, and related services.

Effective date: 22 July 2026

1. Who We Are

NexaChain provides non-custodial software that allows merchants to create digital-asset payment requests and allows buyers to review and authorize payments using self-custodied wallets.

For privacy-related questions, requests, or complaints, contact:

BioProtocol@proton.me

2. Scope of This Policy

This Privacy Policy applies to:

  • The NexaChain website.
  • The NexaChain Merchant application.
  • The NexaChain Buyer application.
  • Payment requests, QR-code payments, and secure payment links created through NexaChain.
  • Related authentication, cloud synchronization, support, and operational services.

This policy does not govern independent blockchain networks, wallet providers, blockchain explorers, Google Play, or other third-party services that maintain their own privacy policies.

3. Information We May Collect

3.1 Account information

When you create or use a NexaChain account, we may process information such as:

  • Email address.
  • Account identifier.
  • Authentication and login information.
  • Merchant or user profile information.

3.2 Merchant and payment-request information

Merchants may provide information required to create and manage payment requests, including:

  • Merchant name or business information.
  • Product or service descriptions.
  • Item prices and selected digital assets.
  • QR-code and payment-link information.
  • Payment-request identifiers and status.

3.3 Public blockchain information

NexaChain may process or display information that is publicly available on BNB Smart Chain, including:

  • Public wallet addresses.
  • Transaction hashes.
  • Digital-asset amounts.
  • Transaction confirmation status.
  • Blockchain timestamps and network information.

Blockchain records are public and may remain permanently available independently of NexaChain.

3.4 Device and technical information

Depending on the services and third-party technologies used, limited technical information may be processed, such as:

  • Device type and operating-system version.
  • Application version.
  • Error logs and diagnostic information.
  • Security and authentication events.
  • Basic network and connection information.

3.5 Camera access

The NexaChain Buyer application may request camera access so users can scan merchant-generated QR codes. Camera access is used for this user-initiated function and is subject to the permissions granted on the user's device.

3.6 Support communications

If you contact NexaChain, we may process your email address, message content, attachments, and other information you choose to provide.

4. Information NexaChain Does Not Control

NexaChain is designed as non-custodial software.

  • NexaChain does not take custody of users' digital assets.
  • NexaChain does not authorize blockchain transactions on behalf of users.
  • NexaChain does not control user wallet balances.
  • NexaChain does not have the authority to reverse confirmed blockchain transactions.
  • NexaChain does not have the authority to freeze user-controlled wallets.

Private keys remain under user control.

NexaChain is designed so that blockchain transaction signing occurs locally on the user's device. Users are responsible for protecting their devices, wallet credentials, and private keys.

5. How We Use Information

Information may be used to:

  • Create and authenticate user accounts.
  • Provide merchant and buyer application functionality.
  • Create, retrieve, and synchronize payment requests.
  • Display payment details before user authorization.
  • Record application-level payment history.
  • Confirm blockchain transaction status.
  • Maintain application security and prevent misuse.
  • Diagnose technical problems and improve reliability.
  • Respond to support and privacy inquiries.
  • Comply with applicable legal obligations.

6. How Information May Be Shared

NexaChain does not sell personal information. Information may be processed or shared in the following limited circumstances:

6.1 Service providers

NexaChain may use third-party infrastructure providers for services such as authentication, cloud-hosted databases, application hosting, error monitoring, and security.

These providers may process limited information solely to provide their services to NexaChain and are subject to their own contractual and privacy obligations.

6.2 Blockchain networks

When a user authorizes a blockchain transaction, transaction information is submitted to BNB Smart Chain. Blockchain data may become publicly visible and independently verifiable.

6.3 Legal and safety requirements

Information may be disclosed when reasonably necessary to comply with applicable law, lawful requests, court orders, or to protect users, NexaChain, and the public from fraud, security threats, or unlawful activity.

6.4 Business changes

If NexaChain is involved in a merger, restructuring, acquisition, financing, or transfer of business assets, relevant information may be transferred subject to applicable law and appropriate safeguards.

7. Third-Party Services

NexaChain may rely on services provided by third parties, including:

  • Google Firebase authentication and cloud services.
  • Google Play distribution services.
  • BNB Smart Chain infrastructure.
  • Blockchain RPC providers and explorers.
  • Website hosting and deployment providers.

Each third party may process information under its own privacy policy. Users should review the policies of the relevant providers.

8. Data Storage and Security

NexaChain uses reasonable technical and organizational measures intended to protect information against unauthorized access, misuse, alteration, loss, or disclosure.

These measures may include:

  • Authenticated access to application services.
  • Encrypted network communications.
  • Access controls for cloud-hosted information.
  • Separation of application data from private wallet keys.
  • Monitoring and maintenance of application infrastructure.

No system can guarantee absolute security. Users remain responsible for securing their devices, accounts, wallet credentials, and private keys.

9. Data Retention

NexaChain retains personal information only for as long as reasonably necessary to provide the services, maintain security, comply with legal obligations, resolve disputes, and enforce applicable agreements.

Retention periods may vary depending on the type of information, the reason it was collected, and applicable legal requirements.

Public blockchain transactions cannot generally be modified or deleted by NexaChain because they are maintained independently by the blockchain network.

10. Account and Data Deletion

Users may request deletion of their NexaChain account and associated application-level personal information by contacting:

Request account deletion

To protect users, NexaChain may request reasonable verification before processing a deletion request.

Certain information may be retained where required for legal, security, fraud-prevention, dispute-resolution, or compliance purposes.

Deleting a NexaChain account does not delete or alter public blockchain transactions.

11. Your Privacy Rights

Depending on your location, you may have rights concerning your personal information, including the right to:

  • Request access to your personal information.
  • Request correction of inaccurate information.
  • Request deletion of eligible information.
  • Object to or restrict certain processing.
  • Request a portable copy of eligible information.
  • Withdraw consent where processing relies on consent.
  • Lodge a complaint with an appropriate authority.

Rights may be subject to legal limitations and verification requirements.

12. International Data Processing

NexaChain and its service providers may process information in countries other than the country where the user is located. Where required, appropriate safeguards will be used for international transfers of personal information.

13. Children’s Privacy

NexaChain is not intended for children under the minimum legal age required to use digital-asset and payment services in their jurisdiction.

NexaChain does not knowingly collect personal information from children in violation of applicable law. If you believe that a child has provided personal information, contact us so the matter can be reviewed.

14. Website Cookies and Similar Technologies

The NexaChain website may use essential technologies required for security, performance, navigation, and basic website operation.

If optional analytics, advertising, or non-essential cookies are introduced, this policy and any required consent mechanism will be updated accordingly.

15. Changes to This Privacy Policy

NexaChain may update this Privacy Policy as the platform, technology, legal requirements, or data practices evolve.

The updated policy will be published on this page with a revised effective date. Material changes may also be communicated through the website, applications, or other appropriate channels.

16. Contact Us

For privacy questions, data-access requests, correction requests, or account-deletion requests, contact: