Privacy Policy

This Privacy Policy describes how Niverly ("we", "our" or "Service"), operated by ProElement.TI, collects, uses, stores, protects and shares your personal information when you use our birthday and event management platform.

We value your privacy and are committed to protecting your personal data in compliance with the General Data Protection Law (LGPD) - Law No. 13,709/2018 and other applicable data protection laws.

By accessing or using Niverly, you agree to the collection and use of your information in accordance with this policy. If you do not agree with any part of this Privacy Policy, please do not use our Service.

We collect different types of information to provide and improve our Service:

Registration and Profile Information

• Full name
• Email address
• Password (stored in encrypted form)
• Profile picture (optional)
• Date of birth (optional)
• Contact information

Birthday and Event Data

• Birthday and celebration dates
• Names and contact information of birthday celebrants
• Types of relationships
• Preferences and interests
• Gift and celebration history
• Invitation and confirmation data

Usage Information

• Platform interaction patterns
• Features used
• Time spent on the app
• Frequency of use
• Notification interactions

Technical Information

• IP address
• Device type
• Operating system
• Browser type
• Device identifiers
• Location data (with your permission)

Payment Information: When you subscribe to our paid plans, we collect payment information necessary to process your subscription. Complete credit card data is processed directly by our secure payment processors and is not stored on our servers.

We use your information for the following purposes:

Provide and Maintain the Service

• Create and manage your account
• Enable use of platform functionalities
• Process transactions and manage subscriptions
• Provide customer support
• Respond to requests and questions

Personalization and Improvements

• Personalize your platform experience
• Recommend relevant features for you
• Develop new products and features
• Improve our existing services
• Analyze usage trends and effectiveness

Communications

• Send reminders and notifications about birthdays and events
• Provide updates about our services
• Send administrative communications
• Inform about changes to terms or policies
• Send promotional content (with your consent)

Security and Protection

• Detect, prevent and resolve technical issues
• Monitor and prevent fraudulent activities
• Protect against unauthorized use
• Ensure platform security
• Comply with legal obligations

We process your personal data based on the following legal bases, in accordance with the General Data Protection Law (LGPD):

• Consent: When you provide us with explicit consent to collect and process your data for specific purposes.
• Contract Performance: When processing is necessary to fulfill a contract we have with you (such as providing the services you requested).
• Legitimate Interests: When processing is necessary for our legitimate interests, provided that these interests are not overridden by your fundamental rights and freedoms.
• Compliance with Legal Obligation: When processing is necessary to comply with a legal obligation to which we are subject.
• Protection of Life: When processing is necessary to protect the life or physical integrity of the data subject or third parties.

For each type of data processing, we rely on the most appropriate legal basis and ensure that our processing complies with applicable data protection principles.

We do not sell, rent or trade your personal information to third parties. We share your information only in the following circumstances:

Service Providers

We share data with third-party service providers who help us operate, provide and improve our Service, such as:

• Cloud hosting and storage providers
• Payment processors
• Analytics and monitoring services
• Email and communication providers
• Customer service providers

These providers are bound by contractual confidentiality obligations and can only process data for the specific purposes we contract them for.

Sharing with Consent

We may share your information when you explicitly authorize such sharing, such as when using features to share event data with other users or guests.

Legal Requirements

We may disclose your information if we believe, in good faith, that such action is necessary to:

• Comply with a legal or regulatory obligation
• Protect and defend our rights or property
• Prevent or investigate possible irregularities related to the Service
• Protect the personal safety of Service users or the public
• Protect against legal liability

Corporate Transactions

If we are involved in a merger, acquisition or asset sale, your personal information may be transferred as part of that process. We will notify you before your personal information is transferred and becomes subject to a different privacy policy.

The security of your information is important to us. We have implemented technical and organizational measures designed to protect your information against unauthorized access, accidental loss, alteration or disclosure.

Security Measures

• Data encryption in transit and at rest
• Firewalls and intrusion detection systems
• Secure authentication and role-based access controls
• Regular security monitoring and audits
• Continuous security updates and patches
• Security awareness training for our team

Limitations

No method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Breach Notification

In the event of a data breach that compromises your privacy or security, we commit to notify you in accordance with applicable legal requirements and to take immediate steps to mitigate potential harm.

In accordance with the General Data Protection Law (LGPD) and other applicable data protection laws, you have certain rights regarding your personal data:

To exercise any of these rights, please contact us via email hi@niverly.com.br. We will respond to your request within the timeframe provided by applicable legislation.

We use cookies, web beacons and similar technologies to improve your experience, understand how you use our services and personalize our content.

Types of Cookies We Use

• Essential Cookies: Necessary for the basic functioning of the site and its features.
• Preference Cookies: Allow the site to remember your choices and preferences.
• Analytics Cookies: Help us understand how visitors interact with the site.
• Marketing Cookies: Used to track visitors across websites and display relevant ads.

Cookie Control

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or accept cookies, delete cookies or browse the web anonymously.

Note that if you disable or refuse cookies, some parts of our Service may become inaccessible or not function properly.

Third-Party Technologies

Our Service may use third-party services that collect information for analysis, marketing or other purposes. These third-party companies may use cookies, web beacons or other technologies to collect information about your use of the Service.

These third-party companies have their own privacy policies and we have no control over how they use your information. We recommend that you review the privacy policies of these companies.

We retain your personal information only for as long as necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods

• Account Data: Retained while your account is active or as long as necessary to provide services.
• Transaction Data: Retained as required by tax and accounting laws (generally 5-10 years).
• Usage Data: Retained for a limited period for service analysis and improvement.
• Marketing Data: Retained until you withdraw your consent or request deletion.

After Account Closure

When you delete your account, some personal data may be retained for additional periods to:

• Comply with legal, tax or accounting obligations
• Prevent fraud or abuse
• Enforce our terms and agreements
• Protect our legitimate interests

This retained data will be accessed only when necessary for the specified purposes and will be deleted when no longer needed.

Niverly is a service operated in Brazil, but we may transfer, process and store information about our users on servers located in various countries, including outside Brazil.

By using our Service, you acknowledge that your personal information may be transferred to countries that may have different data protection rules than your country of residence.

Transfer Safeguards

When we transfer personal data outside Brazil, we ensure that such transfers are carried out in compliance with applicable data protection laws. We implement appropriate safeguards, such as:

• Approved standard contractual clauses
• Data transfer agreements
• Data protection certifications
• Binding corporate policies, where applicable

For more information about international data transfers or to obtain a copy of the implemented safeguards, please contact us through the channels indicated in this policy.

We may update our Privacy Policy periodically. We recommend that you review this page regularly to be aware of any changes.

When we make significant changes to this policy:

• We will notify you by email (using the email address associated with your account)
• We will post a prominent notice on our Service
• We will update the "last update" date at the top of this Privacy Policy

Your continued use of the Service after the publication of changes to this Privacy Policy means that you accept and agree to the changes. If you do not agree with the new terms, please stop using the Service.

If you have questions, concerns or requests related to your privacy or this policy, please contact our Data Protection Officer (DPO):

Data Protection Authorities

If you believe we have not adequately addressed your concerns, you have the right to file a complaint with the National Data Protection Authority (ANPD) or other competent data protection authority.