Privacy Policy

1. Data Controller

The controller of your personal data is NexNow LTD, a company incorporated under Bulgarian law with registered office at 3 Prof. Milko Bichev Str., 1527 Sofia, Bulgaria, company number (EIK) 208287942, VAT number BG208287942 ("NeuralEdge", "we", "us").

You can contact the controller for any request regarding the processing of your personal data or the exercise of your rights at [email protected] or via the website nexnow.eu.

NexNow LTD is established in Bulgaria, within the European Union. NeuralEdge is a macro-financial information and analytics tool: it does not provide investment advice, is not a broker, and does not execute orders on behalf of clients.

2. Data We Collect

Account data: email address, name, password (stored only in hashed form) and, if you choose to sign in with Google, the identifier associated with your Google OAuth account (Google LLC).

Billing and payment data: billing address and the information needed to manage your subscription. Full card details are handled directly by our payment providers (Stripe and Revolut Business) and are not stored on our systems.

Usage and technical data: information about how you use the platform, preferences, session data and product analytics in aggregated or pseudonymised form, collected to operate and improve the service.

Communication data: the content of transactional emails and support requests you send to us.

3. Purposes and Legal Bases

Providing the service: we process account and usage data to deliver the platform and manage your subscription. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Payments and billing: we process payment data to manage subscriptions, renewals and tax and accounting obligations. Legal basis: performance of a contract and legal obligation (Art. 6(1)(b) and (c) GDPR).

Transactional emails and security: we send service communications and take measures to keep the platform secure. Legal basis: performance of a contract and legitimate interest (Art. 6(1)(b) and (f) GDPR).

Marketing and analytics: we use tools such as Google Ads and Meta (Facebook) Pixel/CAPI, together with product analytics. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

4. Service Providers and Processors

To deliver the service we rely on third-party providers that process data on our behalf, acting as processors or independent controllers, under agreements compliant with Art. 28 GDPR.

Payments: Stripe and Revolut Business, for card and subscription processing.

Authentication: Google LLC, for the optional sign-in via Google OAuth.

Email: delivery of transactional emails via SMTP servers.

Marketing and measurement: Google (Google Ads) and Meta Platforms (Facebook Pixel/CAPI), activated only with your consent.

5. International Data Transfers

Some providers (in particular Google and Meta) may process data outside the European Economic Area, for example in the United States.

In such cases, transfers take place in compliance with Chapter V of the GDPR, based on adequacy decisions, the Standard Contractual Clauses approved by the European Commission, or other appropriate safeguards provided for by applicable law. On request, we can provide information about the safeguards in place.

6. Data Retention

We keep account data for the duration of the contractual relationship and, afterwards, for as long as necessary to comply with legal obligations or to defend our rights.

Billing data is retained for the period required by applicable tax and accounting law (generally up to ten years).

Data collected on the basis of consent is kept until you withdraw your consent and, in any case, no longer than the periods indicated in the relevant tools. At the end of the retention period, data is deleted or irreversibly anonymised.

7. Cookies and Similar Technologies

Strictly necessary cookies: session, authentication and consent-storage cookies. They are essential for the site to function and do not require your consent.

Analytics and marketing cookies: tools such as Meta Pixel and Google Ads, which require your prior consent and which you can manage at any time through the cookie banner.

For more details on cookie categories and how to manage them, please see our Cookie Policy.

8. Your Rights

As a data subject, under Articles 15 to 22 GDPR you have the right to: access your data, request its rectification, erasure or the restriction of processing, receive your data in a portable format, object to processing, and withdraw any consent you have given at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, you can contact us at [email protected]. We will respond within the timeframes set out by applicable law, generally within one month.

You also have the right to lodge a complaint with the competent supervisory authority. The lead authority for NexNow LTD is the Bulgarian Commission for Personal Data Protection (CPDP/KZLD, Sofia). As the service is also offered in Italy, you may additionally lodge a complaint with the supervisory authority of your country of residence; for Italy, this is the Garante per la protezione dei dati personali.

9. Security and Changes to This Policy

We adopt appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse, including password hashing and secure communication channels.

We may update this policy to reflect legal or service changes. Where changes are material, we will provide appropriate notice. The date of the latest update is shown at the top of this document.