Privacy Policy
How NARAXIA handles personal data across contracting structures, deployment models, and jurisdictions.
1. Who is responsible for your data
The party responsible for personal data depends on the relevant contracting structure, deployment model, jurisdiction and actual processing activities. Where NARAXIA EOOD or a NARAXIA regional entity contracts directly with a customer and determines the purposes and means of processing, that entity will generally act as Controller. Where an Authorized Country Partner is involved in contracting, hosting, onboarding, support or local compliance coordination, the applicable role allocation may vary and may include independent controller, joint controller, processor or sub-processor arrangements. The applicable structure for each customer must be identified in the relevant customer agreement, Data Processing Agreement, Partner Terms or other contractual documentation.
2. What we collect
NARAXIA may process account and contact data, user and administrator credentials, billing and subscription information, usage and operational data, security logs, audit trails, support communications, cookie and analytics data, and Customer Data processed through the Platform. The precise categories depend on the applicable agreement, configuration, deployment model and customer instructions.
3. Purposes and legal bases
NARAXIA processes personal data to provide, administer and secure the Platform; create and manage business accounts; provide support; monitor usage, performance, security events and audit trails; comply with legal, regulatory, tax and accounting obligations; manage contracts, billing and customer relationships; and improve the Platform where permitted. The legal basis may include performance of a contract, compliance with legal obligations, legitimate interests, consent where required, or documented customer instructions where NARAXIA acts as Processor.
4. Your rights
Subject to applicable law and the role in which NARAXIA processes the data, data subjects may exercise rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent where processing is based on consent, and the right to lodge a complaint with a competent supervisory authority. Where NARAXIA acts as Processor, it will refer the request to the relevant Controller and provide reasonable assistance under the applicable Data Processing Agreement.
5. International transfers
Where personal data is transferred across borders, including between the European Union and GCC jurisdictions or through partner-hosted environments, NARAXIA will ensure the transfer is supported by an applicable lawful transfer mechanism. NARAXIA must not transfer personal data through any route that has not been legally and operationally validated.
6. Retention
Personal data is retained only for as long as necessary for the purposes described, as required by law, or as agreed in the relevant customer agreement. On expiry of the retention period or termination of the agreement, data will be deleted, returned or anonymized in accordance with the customer agreement and Data Processing Agreement.