Privacy Policy

Privacy Policy — Nexvo One Effective date: 2026-08-17 Controller: Nexvo One / Nexvo Code (“we”, “us”, “Platform”) Website: https://one.nexvocode.com Contact: privacy@nexvocode.com 1. Scope This Privacy Policy explains how we collect, use, store, share, and protect personal data when you use Nexvo One (the SaaS business operating system at https://one.nexvocode.com), including when you connect third-party platforms such as Shopify, Google (GA4 / Ads / Search Console), Meta (Facebook / Instagram), TikTok (organic Login Kit / Display API and Ads where enabled), and payment processors. 2. Data we collect Account data: name, email address, password (hashed), company / workspace details, role/membership information. Usage & security data: login timestamps, IP address, device/browser metadata, session identifiers, audit logs, error diagnostics. Billing data: subscription plan, invoices, and payment status processed by PayTR. We do not store full card numbers on our servers. Integration data (only after you authorize a connection via official OAuth / Login flows): account identifiers (for example TikTok open_id / display name), store or ad account IDs, and business metrics / content metadata that the provider’s API exposes for the scopes you approve (for TikTok organic: basic profile fields and video list metrics such as view, like, comment, and share counts; cover URLs and captions as returned by TikTok). Support data: messages you send to support@nexvocode.com or in-product support tickets. 3. How we use data Provide and secure the Service (authentication, multi-tenant isolation, sync jobs, dashboards). Show analytics, social organic summaries, and read-only AI insights based on data you connected. Process subscriptions and prevent fraud/abuse. Comply with law and respond to lawful requests. Improve reliability (aggregated / de-identified diagnostics where feasible). We do not sell personal data. We do not use TikTok or other connected-platform data to build advertising profiles for unrelated third parties. 4. Legal bases (where GDPR / similar rules apply) Contract performance (providing the Service you signed up for). Legitimate interests (security, product improvement, abuse prevention) balanced against your rights. Consent (where required for optional features or cookies beyond strictly necessary). Legal obligation (tax, accounting, regulatory requests). 5. Sharing We share data only with: Infrastructure processors (hosting, database, Redis, email delivery) under contractual safeguards. PayTR for payments (Turkish payment institution). The third-party platforms you choose to connect, solely to obtain tokens and sync the data you authorized. Professional advisors or authorities when legally required. We do not grant Nexvo One write access to post, delete, or modify content on TikTok or other social platforms through AI tools in the current product scope. 6. International transfers Data may be processed in regions where our processors operate. We use appropriate safeguards (for example contractual clauses) when transferring personal data across borders as required by applicable law. 7. Retention Account and workspace data: retained while your account is active and for a limited period afterward for backups, dispute resolution, and legal retention. Integration tokens and synced metrics: retained while the connection is active; deleted or anonymized after disconnect according to our operational purge jobs and legal needs. Logs: kept for security and debugging for a limited rolling window. 8. Security Passwords are hashed. Integration secrets/tokens are encrypted at rest. Access is tenant-scoped (company isolation). We apply HTTPS in production, least-privilege admin access, and audit logging for sensitive admin actions. No method of transmission or storage is 100% secure; please protect your credentials and enable available security controls. 9. Your rights Depending on your location you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. Contact privacy@nexvocode.com. You may also disconnect integrations in-product and delete your account subject to plan and legal holds. EU/EEA users may lodge a complaint with a supervisory authority. 10. Children The Service is intended for business users and is not directed to children under 16 (or higher age required by local law). We do not knowingly collect children’s data. 11. Cookies We use strictly necessary cookies/storage for authentication, CSRF/security, and session continuity. We do not run third-party advertising cookies on the core app for selling ads against your account. 12. Third-party services Your use of TikTok, Meta, Google, Shopify, and similar services is also governed by those providers’ terms and privacy policies. When you connect TikTok, TikTok may share profile and video metrics with us under the permissions you grant in TikTok’s authorization screen. 13. Changes We may update this Policy. Material changes will be posted on this page with an updated effective date. Continued use after the effective date constitutes acceptance where permitted by law. 14. Contact Privacy: privacy@nexvocode.com Support: support@nexvocode.com Website: https://one.nexvocode.com