nuvorio.Create account →

NUVORIO / LEGAL

Privacy Policy

How information moves through Nuvorio.

Effective October 26, 2026 · Version 2026-10-26.1 · English

1. Who is responsible2. Information we process3. WhatsApp, messages and your AI4. Purposes and legal bases5. Who receives information6. International processing7. Retention and deletion8. Security and your choices9. Children and updates

1. Who is responsible

Nexo Venture operates Nuvorio and is responsible for the account, billing, website and service administration described here. For conversations processed on behalf of a business customer, that customer may be the controller and we may act as its processor, depending on applicable law and the actual processing. Contact us before using the service if you need a data-processing agreement or regulated-data commitments.

Nexo Venture
Wyoming, United States
Email: info@nuvorio.com

2. Information we process

We process account information such as your name, email, authentication identifiers, selected language and confirmation status; subscription information such as plan, customer and subscription IDs, trial and payment status; connection information such as phone number, account ID, pairing status and technical events; and support communications. Our infrastructure and providers may process IP addresses, browser/device information, access and security logs. We record policy versions, authenticated account identity and acceptance timestamps to document your agreement. Payment details are collected by Stripe on its checkout pages; our website backend uses payment identifiers and status rather than receiving your full card number.

3. WhatsApp, messages and your AI

When you link WhatsApp, the connection service can access information needed for the functions you authorize, which may include conversations, message content, contacts, timestamps, attachments and associated metadata. Connecting an AI application allows that application to request and receive information through your connection URL, within your plan’s permissions. Depending on enabled functions, processing may involve transmission, synchronization, storage or indexing needed to operate those functions. Read-only limits sending; it does not mean no access to private messages. Do not connect an account or share a URL unless you understand and authorize that access. Your AI provider’s retention, training and other uses are controlled by its own policies and settings; we cannot promise that it will not retain or use received data. Other participants’ information may be included, so obtain any required permissions and notices.

4. Purposes and legal bases

We use information to create and authenticate accounts, provide requested connections and features, manage payment and access, deliver service emails, respond to requests, prevent abuse and investigate security issues. We also use necessary records for legal compliance, accounting and establishing or defending claims. Where a legal basis is required, we rely on performance of our agreement for requested services; legitimate interests for proportionate security, service administration and defense of claims; legal obligations where applicable; and consent when legally required for a specific optional use. You may withdraw consent for consent-based processing without affecting prior lawful processing. Acceptance of our Terms is not blanket consent to unrelated marketing or tracking.

5. Who receives information

Information is disclosed to providers involved in the service, including Supabase for authentication, Stripe for billing, Resend for transactional email, hosting and infrastructure providers including Cloudflare and the Sites hosting platform, and the WhatsApp connection/MCP infrastructure. Your selected AI application and WhatsApp/Meta process information under their own applicable roles and policies. Website fonts may be requested from Google Fonts, which receives ordinary request information such as IP address. We may disclose information when legally required, to protect rights and security, to professional advisers where necessary, or in a business transaction subject to appropriate legal protections. We do not grant recipients ownership of your conversations through this policy. The current website does not include advertising pixels or an advertising-cookie consent system; adding optional tracking requires an updated disclosure and any required consent.

6. International processing

We operate from the United States and providers may process data in other countries with different laws. Where applicable law requires transfer safeguards, we must use an appropriate transfer mechanism, such as approved contractual safeguards, or another lawful basis. Contact us for information about applicable locations and safeguards. This policy does not waive cross-border transfer protections or itself substitute for a required transfer agreement.

7. Retention and deletion

We retain account and connection records for as long as reasonably needed to provide the service, manage an active relationship and resolve outstanding issues. Billing, acceptance, fraud-prevention and legal records may need to be retained after account closure for accounting, compliance or claims. Retention depends on the type of record, purpose and applicable legal requirements; it is not an unlimited right to keep data. Request account deletion or specific retention information by email. We may verify your identity. Disconnecting a device or cancelling a plan does not automatically delete all records. Data already sent to your AI provider, WhatsApp or another recipient is subject to that recipient’s retention controls. Backup deletion may follow backup rotation rather than occur immediately; legally required records may be retained with access limited to their remaining purpose.

8. Security and your choices

We use access controls and authenticated service calls designed to protect information, but no internet service is entirely secure. Protect your password and connection URL; rotate an exposed URL and remove unwanted linked devices. Depending on location and applicable law, you may request access, correction, deletion, portability or restriction, object to certain processing, withdraw consent or appeal a decision. Contact info@nuvorio.com. We will respond within the applicable legal timeframe and explain lawful limitations. You can complain to your local privacy regulator. We do not require you to surrender mandatory privacy rights to receive service.

9. Children and updates

Nuvorio is for adults aged 18 or older and is not directed to children. Notify us if you believe a child created an account. Conversations may contain third-party information; customers remain responsible for the authority to process it. We will post revisions here with a version and effective date and provide additional notice of material changes where required.

Advertising measurement

With your separate permission, Nuvorio uses TikTok Pixel to measure page visits and advertising performance. TikTok may receive your IP address, browser and device information, page URL, advertising click identifiers and cookies. You can reject optional advertising tracking or withdraw your choice using Cookie settings. This choice is separate from accepting account terms and does not affect service access. See our Cookie Policy and TikTok’s privacy policy for more information.