Privacy Policy

We collect information you provide directly to us when you create an account, use our services, or contact us for support. This includes: - Account information: name, email address, password, phone number - Profile information: business type, country, team size - Payment information: processed securely through our payment providers - Usage data: how you interact with our platform, features you use, actions you take - Device information: IP address, browser type, operating system - Communications: messages you send us or through our platform We do not sell your personal information to third parties. Ever.

We use the information we collect to provide, maintain and improve our services. Specifically we use it to: - Create and manage your account - Process payments and send transaction confirmations - Send service updates, security alerts and support messages - Personalize your experience and recommend relevant services - Analyze usage patterns to improve our platform - Detect and prevent fraud and abuse - Comply with legal obligations We will never use your data for targeted advertising or share it with advertisers.

We do not sell, trade or rent your personal information to third parties. We may share your information only in these limited circumstances: - Service providers: trusted partners who help us operate our platform (payment processors, cloud infrastructure, email delivery) under strict confidentiality agreements - Legal requirements: when required by law, court order or governmental authority - Business transfers: in connection with a merger, acquisition or sale of assets, with prior notice to you - With your consent: when you explicitly authorize us to share specific information All third-party service providers are contractually required to protect your data and may only use it to provide services to us.

We take the security of your data seriously and implement industry-standard measures to protect it. Our security practices include: - AES-256 encryption for data at rest - TLS 1.3 encryption for all data in transit - SOC 2 Type II certified infrastructure - Regular third-party security audits and penetration testing - Two-factor authentication available for all accounts - Role-based access controls for our team - 24/7 security monitoring and threat detection In the event of a data breach that affects your personal information, we will notify you within 72 hours as required by applicable law.

We use cookies and similar tracking technologies to improve your experience on our platform. Types of cookies we use: - Essential cookies: required for the platform to function (authentication, security, preferences) - Analytics cookies: help us understand how you use our platform so we can improve it - Preference cookies: remember your settings and customizations We do not use advertising or tracking cookies. You can control cookie settings through your browser at any time. Disabling essential cookies may affect platform functionality. We do not use third-party tracking pixels or share browsing data with advertisers.

You have full control over your personal data. Your rights include: - Access: request a copy of all personal data we hold about you - Correction: update or correct inaccurate personal information - Deletion: request permanent deletion of your account and associated data - Portability: export your data in a machine-readable format - Restriction: ask us to limit how we process your data - Objection: object to certain types of data processing - Withdrawal: withdraw consent at any time where processing is based on consent To exercise any of these rights, contact us at privacy@neclot.com. We will respond within 30 days. We will never discriminate against you for exercising your privacy rights.

We retain your personal information only for as long as necessary to provide our services and comply with legal obligations. Retention periods: - Active account data: retained for the duration of your account - Deleted account data: permanently deleted within 30 days of account deletion - Payment records: retained for 7 years as required by financial regulations - Support communications: retained for 2 years - Analytics data: anonymized and aggregated after 12 months You can request earlier deletion of your data by contacting our privacy team. Some data may be retained longer if required by law.

If you have questions, concerns or requests regarding this Privacy Policy or our data practices, please contact us. Privacy Team: - Email: privacy@neclot.com - Response time: within 30 days (usually within 5 business days) Data Protection Officer: - Email: dpo@neclot.com - For GDPR-related inquiries and formal data subject requests Postal address: Neclot Platform Ltd. Privacy Department [Company Address] If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.