Nyvo

Legal

Privacy Policy

Last updated: 1 May 2026

Nyvo ("Nyvo", "we", "us", or "our") is a community platform for Brazilians settling in Australia. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your rights under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Who we are

The Nyvo service is operated by Nyvo Pty Ltd, a company registered in Australia. If you have questions, requests, or complaints, contact us at privacy@nyvo.com.au.

Information we collect

We collect the minimum data required to operate the Service:

  • Account information. Name, email address, profile photo, locale preference, and password (managed via Firebase Authentication).
  • Profile information. Bio, interests, and city — anything you choose to share on your profile.
  • User-generated content. Posts, comments, polls, votes, RSVPs, business reviews, listings, ratings, bookmarks, and reports.
  • Device information. Device type, operating system, app version, push-notification tokens, IP address, and approximate location.
  • Usage data. Page views, taps, errors, crash reports, and performance traces.
  • Communication data. Emails we send via Resend (transactional and product) and push notifications via Firebase Cloud Messaging.
  • Payment information. When you pay for events or premium features, payment is processed by Stripe — we never see your full card number.
  • Image moderation data. Images you upload are screened by Google Cloud Vision SafeSearch for adult, violent, or racy content before publication.

Why we collect it

  • To create and manage your account.
  • To deliver the core features (community feed, events, businesses, articles, jobs, housing).
  • To moderate user-generated content and keep the community safe.
  • To send transactional emails (e.g., RSVP confirmations) and product updates you have opted into.
  • To process payments for ticketed events and premium features.
  • To improve the app and diagnose bugs.
  • To comply with our legal obligations.

Third parties we share data with

We use a small set of trusted processors to operate Nyvo. Each processes data only on our instructions and under contracts that meet APP 8 cross-border requirements:

  • Firebase / Google (Authentication, Cloud Messaging, Crashlytics, Analytics). Authentication, push notifications, and crash reporting. Data is stored in the United States.
  • Stripe. Payment processing for tickets and premium features. PCI-DSS Level 1 certified. Data may be stored in the United States.
  • Resend. Transactional and notification emails. Data is stored in the United States.
  • Vercel. Application hosting (web, admin, API), edge caching, and Vercel Blob (image storage). Data is stored in Sydney (region syd1) by default.
  • Google Cloud Vision (SafeSearch). Automated image moderation. Images are processed in the United States and discarded after analysis.
  • Google Maps. Map tiles, geocoding, and place lookups for events and businesses.
  • Sentry. Error tracking. Personal information is scrubbed from event payloads before they leave our servers.
  • Upstash Redis. Rate-limit counters. No personal data — only request fingerprints.

We never sell your personal information. We disclose data to law enforcement only when required by valid legal process.

How long we keep data

  • Account data is kept while your account is active.
  • When you delete your account, your profile is anonymised within 24 hours and permanently erased after 30 days. Audit logs retain a record of the deletion event but not the personal data itself.
  • Posts, comments, and other content you created are removed or anonymised when your account is deleted.
  • Backups follow the same 30-day rolling retention.
  • Audit and security records are retained for 24 months.

Your rights

Under the Australian Privacy Act 1988 (Cth) you can:

  • Access the personal information we hold about you.
  • Correct inaccurate information from your profile screen.
  • Delete your account and all associated personal data (Settings → Delete account).
  • Export a copy of your data — contact privacy@nyvo.com.au.
  • Withdraw consent to marketing communications at any time.
  • Make a complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe we have mishandled your data.

Children

Nyvo is intended for users aged 16 and over. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has registered, contact privacy@nyvo.com.au and we will remove the account.

Cookies and similar technologies

The web landing site uses only the cookies needed to remember your locale preference. The mobile app uses local storage for session tokens and offline cache. We do not use third-party advertising cookies.

Cross-border transfers

Some of our processors store data outside Australia, primarily in the United States. We rely on standard contractual clauses and APP 8.2 vendor commitments to ensure your data is handled to Australian standards.

Changes to this policy

We may update this policy as the app evolves. We will notify you in-app and by email at least 14 days before any material change takes effect.

Contact

Questions, requests, or complaints: privacy@nyvo.com.au.

This Privacy Policy is governed by the laws of the State of Victoria, Australia.