Privacy Policy

1. Who we are

Nuvraxis is based in the Netherlands. For anything in this policy, you can reach us at legal@nuvraxis.com.

2. Scope of this policy

This policy covers:

• Visitors to id.nuvraxis.com, including anyone who submits the "Request access" form
• People who hold an account in the Nuvraxis ID console (organization owners, administrators, and other console users)

If you are signing in to a product that uses Nuvraxis ID for authentication (for example, one of the products in the Nuvraxis suite), we process your sign-in data on that product's behalf and under its instructions — we act as a processor, not the controller, for that data. That product's own privacy policy governs how your data is used, and you should direct privacy requests about your use of that product to them, not to us.

3. What we collect

Depending on how you interact with us, this may include:

• Contact details you give us (name, email address) — for example, through the access-request form
• Account information for console users — email address, authentication method (we store a cryptographic hash of your password, never the password itself), multi-factor authentication enrollment status, and organization membership
• Technical and security data — IP address, timestamps, and activity logs used to keep sign-ins secure, detect abuse, and enforce rate limits
• Configuration data you or your organization provide while using the console (for example, organization settings or connected sign-in methods)

We do not collect more than we need for the purposes below, and we do not sell personal data.

4. Why we collect it

• To operate the service: authenticating you, maintaining your session, and running the console
• To keep the service secure: detecting and preventing abuse, unauthorized access, and fraud
• To respond to you: replying to access requests and support inquiries
• To meet legal obligations, where applicable

5. Who we share it with

We do not sell your data. We share it only:

• With service providers who help us operate the service (for example, email delivery), strictly to perform that function on our behalf
• Where required by law, or to protect the rights, safety, or property of Nuvraxis, our users, or others
• With your consent

6. How long we keep it

We keep your data for as long as your account is active or as needed to provide the service. If you would like your data deleted, email legal@nuvraxis.com and we will delete it — except where we are required or permitted by law to retain it for a longer period (for example, for legal, tax, audit, or security purposes).

7. Your choices

You can ask us to access, correct, or delete the personal data we hold about you by emailing legal@nuvraxis.com, subject to any applicable legal exceptions. If you are an end user of a product that uses Nuvraxis ID for sign-in (rather than a direct Nuvraxis ID console user), please contact that product directly — see Section 2.

8. Security

We use industry-standard technical and organizational measures to protect your data, including encryption of sensitive credentials and access controls on our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International transfers

We are based in the Netherlands. If we transfer personal data outside the country where you are located, we take steps to ensure it remains protected consistent with this policy.

10. Children

Our services are not directed at children, and we do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date above when we do. Material changes will be noted here.

12. Contact us