Legal
Privacy Policy
Last updated: November 10, 2026
This Privacy Policy explains how NODEX ("we", "us") collects, uses and protects information when you use proxy & digital services marketplace available at this website (the "Service").
1. Who we are
NODEX is a resale aggregator for proxy and digital services. We do not require an email address or traditional password. Access is granted via a randomly generated account key.
2. Information we collect
- Account data: HMAC hash of your account key, key prefix (first 4 characters), selected country code, balance and timestamps.
- Technical data: IP address, user agent and session identifiers used for security, rate limiting and fraud prevention.
- Transaction data: orders, invoices, payment references from the crypto gateway, and delivered credentials (encrypted at rest).
- Admin audit logs: actions performed in the operator panel (not visible to end users).
3. Information we do not collect
We do not ask for email, phone number, government ID or banking details. Crypto payments are processed by the third-party payment gateway.
4. How we use information
- To authenticate sessions and protect accounts against abuse.
- To fulfil purchases with upstream providers and display credentials to you.
- To credit balances after confirmed crypto payments.
- To operate, secure and improve the Service, including rate limiting and incident response.
- To comply with applicable law and respond to lawful requests where required.
5. Legal bases
Where GDPR or similar frameworks apply, we process data based on contract performance (providing the Service you request), legitimate interests (security and abuse prevention) and legal obligations.
6. Sharing
We share the minimum necessary data with upstream proxy providers to allocate products, and with the crypto payment processor to create and confirm invoices. We do not sell personal data.
7. Retention
Account, order and payment records are retained while the account exists and for a reasonable period afterward for accounting, dispute resolution and security. You may request deletion by contacting support with proof of key ownership; some records may be retained where legally required.
8. Security
Account keys are hashed with HMAC-SHA256. Provider API keys and delivered credentials are encrypted with AES-256-GCM. Sessions use signed httpOnly cookies. Transport security (HTTPS) should be enabled in production deployments.
9. International transfers
Infrastructure and providers may be located in multiple jurisdictions. By using the Service you understand that processing may occur outside your country of residence with appropriate safeguards where required.
10. Your rights
Subject to applicable law, you may request access, correction, deletion or export of data associated with your account. Contact @nodex_manager. Do not send your full account key — use the key prefix and order IDs instead.
11. Children
The Service is not directed to individuals under 18. We do not knowingly collect data from children.
12. Changes
We may update this Policy from time to time. Continued use after changes constitutes acceptance of the revised Policy.
13. Contact
Questions about privacy: @nodex_manager