11.4 Data Privacy Notice

NXT Protocol, in collaboration with its infrastructure partners, collects and processes personal information only to the extent necessary for regulatory compliance, platform security, and user support. Such information may include identity documents, proof-of-address, wallet addresses, transaction hashes, device identifiers, and limited usage analytics. Data collection adheres to the principle of data minimisation, meaning only information essential for legal or operational reasons is requested.

Personal data are stored using encryption at rest and in transit. Access is restricted to employees, contractors, or service providers who require the information to perform clearly defined duties, all of whom are bound by confidentiality agreements. Where NXT utilises cloud infrastructure, providers are vetted for industry-standard security certifications and compliance with recognised data-protection frameworks.

Processing may involve cross-border transfers when servers or support staff reside in different jurisdictions. In such cases, NXT implements safeguards—such as standard contractual clauses or equivalent legal mechanisms—to maintain adequate protection levels. Data are retained only for the duration mandated by applicable laws or the period necessary to achieve stated purposes, whichever is longer. Afterwards, records are securely deleted or anonymised.

Users retain rights, consistent with prevailing privacy regulations, to request access to their personal data, to correct inaccuracies, to withdraw consent where processing is based on consent, and to request deletion under certain circumstances. Exercising these rights may be subject to verification procedures and limitations imposed by regulatory record-keeping requirements.

NXT never sells personal information to third parties. It may, however, share specific data with regulators, auditors, or legal counsel when compelled by law or when such disclosure is deemed reasonable to protect the rights, property, or safety of users or the protocol. From time to time, NXT may update this notice to reflect evolving legal landscapes or changes in operational practice. Users will be informed through official channels, and continued use of NXT services after modifications constitutes acceptance of the revised terms. For privacy inquiries or requests, designated contact information is available on the official support page.