Privacy Notice

1. Who we are

This service is operated by Adrián Valdés (Nuviocash) ("NUVIO", "we", "us"). We are the data controller for the personal data processed through the NUVIO service. You can reach us at privacy@nuviocash.com.

2. Personal data we collect

• Account data — name, email address, hashed password or OAuth identifier, language preference.
• Uploaded content — the invoices, contracts and financial documents you submit for analysis, and the results we derive from them.
• Usage and technical data — log data, device identifiers, IP address, browser type, pages visited, feature interactions.
• Support communications — messages you send us and our replies.
• Billing data — collected and processed by our Merchant of Record, Paddle. We receive the subscription status, plan, country and the last four digits of your card, but not the full card number.

3. Purposes and legal bases

• Providing the service — performance of a contract.
• Billing and subscription management — performance of a contract and legal obligation (tax and accounting).
• Security, fraud prevention and abuse detection — legitimate interest.
• Product improvement and aggregated analytics — legitimate interest.
• Customer support — performance of a contract.
• Marketing communications — consent, which you can withdraw at any time.

4. Who we share data with

• Merchant of Record — Paddle.com Market Ltd, for sale of the service, subscription management, payments, tax compliance and invoicing.
• Infrastructure and hosting providers for database, storage and serverless compute.
• AI processing providers used to analyse the content of your uploaded documents on our behalf, under a data processing agreement.
• Email and support tooling providers.
• Professional advisers (legal, accounting) and public authorities where required by law.

We never sell your personal data.

5. International transfers

Some of our providers are located outside the European Economic Area. Where personal data is transferred internationally, we rely on adequacy decisions or on Standard Contractual Clauses approved by the European Commission, together with additional safeguards where appropriate.

6. Retention

We keep account and document data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where we are required to retain it for legal, tax or accounting reasons (typically up to 6 years for invoicing records).

7. Your rights

Under the GDPR and equivalent laws, you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability and to withdraw consent at any time. You may also lodge a complaint with your local supervisory authority (in Spain, the AEPD — www.aepd.es). We respond to requests within one month. Contact us at privacy@nuviocash.com.

8. Security

We apply appropriate technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, access controls and audit logging. No system is 100% secure; if we become aware of a data breach affecting you, we will notify you and the relevant authorities as required by law.

9. Cookies

We use strictly necessary cookies to keep you signed in and to remember your preferences. We may use analytics cookies to understand how the service is used; these are set only with your consent. See our Cookie Policy for details.

10. Contact

Adrián Valdés (Nuviocash), Spain — privacy@nuviocash.com.