Effective date: 27 October 2026
This policy explains how NexonVault handles account, investment and technical information. It is designed to be transparent about both the precautions we aim to take and the limits of any internet-connected service.
1. Who operates NexonVault and how to contact us
NexonVault (the “Service”) is an Australian-operated web application for cryptocurrency investment recordkeeping and analysis. The legal name of the operator and a working privacy-contact address must be identified before this policy is relied upon as a final public policy.
Privacy, access, correction, deletion and complaint requests should be directed to the operator using the contact details published on the Contact Us page. Please do not send passwords, private keys, recovery phrases or other security secrets.
2. Information we collect
When you create or use an account, the Service may collect your account identifier, email address, login and authentication information, account preferences and information provided during support enquiries.
The Service stores financial and investment records you enter, including portfolios, assets, transaction dates, quantities, prices, fees, exchange rates, cost bases, acquisition lots, disposals and notes. These records may disclose information about your financial affairs.
The website and its infrastructure may also process technical information needed to operate and protect the Service, such as IP addresses, approximate location inferred from connections, browser and device information, access times, error information and security events.
3. How information is collected and used
Information is collected from you when you register, authenticate, complete forms or contact the operator; some technical information arises automatically when you access the Service.
We use this information to provide accounts and investment tools, calculate holdings and indicative results, authenticate users, troubleshoot problems, respond to enquiries, prevent abuse, maintain backups where implemented, and administer, improve and protect the Service. If you choose to enable optional cryptocurrency price alerts when that feature is available, we will use your email address and relevant alert settings to send the notifications you request.
We do not use the investment records you submit to provide personalised financial, tax or legal advice.
4. No sale of data; limited operational sharing
NexonVault does not sell personal information or individual investment records to advertisers or data brokers. We do not intentionally disclose your account-specific portfolio holdings or transaction history to other users, advertisers or unrelated businesses for their own marketing purposes.
However, some information may be processed or accessible to service providers needed to operate the website, such as network and security infrastructure, authentication providers, email-delivery providers and technical support services. Information may also be disclosed with your consent or when required or authorised by applicable law, a lawful order or a valid legal process.
General cryptocurrency pricing and foreign-exchange services may receive requests for asset identifiers or currency pairs. They do not need your complete transaction history to supply those reference prices or rates.
5. Third-party services and overseas processing
The Service currently uses Cloudflare for website connectivity and protection, and supports Google and Microsoft as optional external sign-in providers. It obtains market-price and reference exchange-rate data from external providers. When email delivery is enabled, an email-delivery provider will necessarily process outgoing account messages, replies to contact enquiries and any price alerts you have chosen to receive. These emails may identify the assets or alert thresholds you selected; we will aim to avoid including unnecessary portfolio details.
Third-party infrastructure or identity services may process information outside Australia. The countries and processing arrangements depend on the providers and settings actually in use and must be reviewed and, where practicable, identified before the policy is finalised. Those providers may also have separate privacy terms.
6. Cookies and authentication
The Service uses cookies or similar technologies necessary for authentication, security and operation. Third-party sign-in providers may use their own cookies or other authentication technologies. Disabling essential cookies may prevent parts of NexonVault from working. Users will be able to control optional price alerts through the settings provided for that feature; these notifications are separate from marketing emails.
This policy does not claim that analytics or tracking technologies are absent in every environment; any additional analytics, advertising or tracking tools must be disclosed if introduced.
7. Security and confidentiality
We aim to take reasonable technical and organisational precautions to safeguard account information and investment records, including access controls and security maintenance appropriate to the Service. No security control is infallible.
We cannot guarantee that information will always remain private, confidential, available or free from unauthorised access, hacking, malware, security incidents, accidental exposure or loss. We will address incidents and meet any notification or other obligations that apply under law. This statement does not exclude rights or duties that cannot lawfully be excluded.
You are responsible for protecting your sign-in credentials and for keeping independent copies of important records. Never enter wallet private keys or recovery phrases into NexonVault.
8. Accuracy and retention of records
You control the information you enter. NexonVault does not guarantee that imported or entered data, derived portfolio values, tax-lot allocations, foreign-exchange conversions, capital-gains figures or reports are accurate or complete.
Account and investment data may be retained while needed to provide the Service, address security or support matters, maintain operational backups or meet applicable obligations. Copies in backups may remain temporarily after an account record is removed. Retention practices and periods must be confirmed against the live deployment before this policy is finalised.
9. Access, correction and deletion requests
You may request access to personal information held about you, correction of inaccurate personal information, or deletion of information that no longer needs to be retained, subject to applicable law and technical limitations.
We will consider and respond to reasonable requests and explain any lawful basis for refusing or limiting a request. Deletion from active systems may not immediately remove copies from security logs or backups.
10. No guarantee of continuing service
NexonVault is an evolving service and may be modified, restricted, suspended or permanently discontinued. There is no promise that the website, any feature, access to your records or any associated service will continue indefinitely.
Where reasonably practicable, we will try to give notice of material changes or planned discontinuation; advance notice, continued access and recovery of data cannot be guaranteed. You should maintain your own independent financial and tax records rather than relying on NexonVault as their only copy.
11. Enquiries and complaints
If you have a privacy concern, please use the working contact details published on our Contact Us page. We aim to investigate genuine concerns and respond appropriately. If Australian privacy legislation applies, individuals may also have the right to complain to the Office of the Australian Information Commissioner after raising the matter with the operator.
12. Changes to this policy
This policy may be amended when the Service, its providers, legal requirements or data-handling practices change. The updated effective date will be shown on this page. Where appropriate and practicable, significant changes will be brought to users’ attention.
Nothing in this policy is intended to exclude, restrict or modify any privacy, consumer or other legal right or obligation that cannot lawfully be excluded, restricted or modified.
Before public reliance: The operator must publish a working contact channel, identify the responsible legal person or entity, and confirm that the described providers, retention practices and overseas processing reflect the live service. This is a working draft for review, not legal advice.