NIVULAUTA PRIVACY POLICY
Effective Date: April 2026
Before You Read This
At Nivulauta, we believe transparency in data handling is essential. This Privacy Policy explains:
✓ What personal data we collect
✓ How we use and protect your data
✓ Your rights under GDPR and other privacy laws
✓ Who we share your information with
✓ How long we keep your data
✓ How to contact us with privacy questions
1. INFORMATION WE COLLECT
1.1 Information You Provide to Us
When you create a Nivulauta account or use our services, you provide:
Account Information:
Display name and username
Email address and phone number (optional)
Password and authentication details
Date of birth (to verify age compliance)
Profile information (bio, profile picture, location)
Payment information (for premium features) - credit/debit card details, billing address
User-Generated Content:
Posts, comments, messages, and multimedia uploads
Preferences and account settings
Communication with our support team
1.2 Information We Collect When You Use Nivulauta
Usage Information:
Activity on the platform (posts created, content you interact with)
Your interactions with other users (follows, likes, shares, comments)
Direct messages and encrypted communications
Links you click on our platform
Search queries and browsing history
Device Information:
IP address and browser type
Device type, operating system, and unique device identifiers
Mobile application version
Device settings and language preferences
Cookies and Similar Technologies:
We use cookies to remember your preferences
Analytics cookies to understand how you use Nivulauta
Advertising cookies to serve relevant content (with your consent)
Location Information:
1.3 Information We Receive from Third Parties
Information from social media platforms if you link your account
Data from advertising partners and analytics providers
Information from other Nivulauta users about you (mentions, tags)
Information from business partners and service providers
2. HOW WE USE YOUR INFORMATION
We use the information we collect for the following purposes:
2.1 Provide and Improve Our Services
Operate and maintain the Nivulauta platform
Personalize your experience and content recommendations
Develop new features and improvements
Conduct research and analytics
2.2 Maintain Safety and Security
Verify your identity and authenticate your account
Prevent fraud, unauthorized access, and illegal activity
Enforce our Terms of Service and policies
Monitor for abuse and harmful content
2.3 Communication with You
Send service announcements and updates
Respond to your inquiries
Send marketing communications (with your consent)
Notify you of changes to our policies
2.4 Advertising and Marketing
Serve targeted advertisements based on your interests (with consent)
Measure advertising effectiveness
Show you relevant content from partners
2.5 Compliance and Legal Obligations
Comply with laws, regulations, and legal requests
Protect our legal rights and interests
Investigate and resolve disputes
2.6 Machine Learning and AI
3. LEGAL BASIS FOR DATA PROCESSING (GDPR)
Under GDPR, we process your personal data based on:
Contractual Necessity: Information needed to provide our services
Legitimate Interest: Improving services, security, and platform functionality
Explicit Consent: For marketing communications, cookies, and AI training
Legal Obligation: To comply with laws and regulations
Public Task: Operating our platform in the public interest
Vital Interest: Protecting users' safety and security
4. HOW WE SHARE YOUR INFORMATION
4.1 Public Sharing
Your profile information and public posts are viewable by all Nivulauta users and can be indexed by search engines (unless you disable this in your privacy settings).
4.2 With Other Users
Followers can see your public posts and interactions
Users you communicate with via Direct Messages can see your messages
Other users can see who you follow and who follows you
4.3 With Service Providers
We may share your information with third-party service providers who:
Process payments and subscriptions
Host our platform infrastructure
Provide analytics and customer support
Conduct fraud detection and prevention
Help with content moderation and safety
All service providers are contractually required to protect your data and comply with GDPR.
4.4 With Business Partners
Advertising partners (with your consent)
Analytics and research partners
Content recommendation providers
Integration partners (if you authorize connections)
4.5 Legal Requirements and Public Interest
We may disclose your information if:
Required by law, court order, or government request
Necessary to protect the safety or security of our platform
Needed to investigate fraud or illegal activity
Required to protect our legal rights
4.6 Business Transfers
If Nivulauta is acquired, merged, or sold, your data may be transferred to the new entity under the same privacy protections.
4.7 With Your Consent
We only share data with third parties outside these categories with your explicit written consent.
We do not sell or rent your personal information to third parties.
5. DATA TRANSFERS AND INTERNATIONAL COMPLIANCE
5.1 EU-US Data Privacy Framework (DPF)
Nivulauta complies with the EU-US Data Privacy Framework, Swiss-US DPF, and UK Extension. If you have questions about DPF compliance, contact us at privacy@nivulauta.llc.
5.2 Standard Contractual Clauses (SCCs)
When transferring data outside the EU/EEA, we use Standard Contractual Clauses to ensure your data receives adequate protection.
5.3 Data Retention and Deletion
For EU users, you have the right to request that your data not be transferred outside the EU. Contact us to discuss your specific requirements.
6. YOUR RIGHTS AND CHOICES
6.1 GDPR User Rights
Under GDPR, you have the right to:
Access (Right to Know):
Rectification (Right to Correct):
Erasure (Right to Be Forgotten):
Request deletion of your personal data, subject to legal obligations
Deactivate your account, which will queue your data for deletion
After 30 days, your account will be permanently deleted (accounts can be restored within 30 days)
Portability (Right to Data Portability):
Request a copy of your data in a machine-readable format
Download your posts, messages, and profile information
Restrict Processing:
Withdraw Consent:
Withdraw consent for marketing communications at any time
Opt out of cookies and tracking technologies
Disable AI model training for your data
Disable advertising personalization
Object to Processing:
6.2 How to Exercise Your Rights
To exercise any of these rights, contact us at:
Email: privacy@nivulauta.llc
Web Form: https://nivulauta.llc/privacy-request
Mail: Nivulauta Data Protection Office, 63 Federal St #756 Portland, ME 04101
We will respond to your request within 30 days (extendable to 60 days for complex requests) as required by GDPR.
6.3 Identity Verification
We may require you to verify your identity before granting access to your personal information or processing your request.
6.4 Authorized Representatives
If you are submitting a request on behalf of another person, we may require written authorization and proof of your legal authority.
7. DATA RETENTION
We retain different types of information for different periods:
| Data Type | Retention Period |
| Account Profile Information | Duration of active account |
| Posts and Content | Duration of active account or until deleted |
| Payment Information | Duration of subscription + legally required periods |
| Communications with Support | Up to 18 months |
| Cookies and Analytics Data | Up to 13 months |
| Advertising Interactions | Up to 12 months |
| Log Files | Up to 12 months |
| Suspended Account Identifiers | Indefinitely (to prevent repeat violations) |
Longer Retention:
We may retain data longer to comply with legal obligations
To defend against legal claims
To maintain platform safety and security
To investigate and prevent abuse
8. SECURITY AND DATA PROTECTION
8.1 Technical Measures
SSL/TLS encryption for data in transit
Encryption for sensitive data at rest
Secure authentication and password hashing
Regular security audits and penetration testing
Firewalls and intrusion detection systems
8.2 Organizational Measures
Limited access to personal data (need-to-know basis)
Employee privacy and security training
Data processing agreements with all service providers
Regular privacy impact assessments
8.3 Data Breach Notification
In the event of a data breach, we will:
Notify affected users within 72 hours (as required by GDPR)
Inform relevant data protection authorities
Provide details about the breach and protective measures
9. SPECIAL CATEGORIES OF DATA
9.1 Sensitive Data
We do not intentionally collect sensitive personal data (race, religion, health, biometric, genetic data, etc.) unless:
You explicitly provide it
It is necessary for legal compliance
You have given explicit consent
9.2 Children's Privacy
Nivulauta is not intended for users under 16 (or the age of digital consent in your country). We do not knowingly collect data from children under 16. If you believe we have collected data from a child, please contact us immediately at privacy@nivulauta.llc.
10. NEWSLETTER AND MAILING LIST
This section describes how we handle data for our email newsletter. It applies in addition to the sections above.
10.1 What We Collect
When you subscribe to the newsletter, we collect:
We do not require a name, and we do not collect any other information through the subscription form.
10.2 Legal Basis
We send the newsletter on the basis of your consent. Consent is captured through double opt-in: after you submit your address, we email you a confirmation link, and no newsletter is sent until you click it. An unconfirmed address never receives the newsletter.
10.3 Where Your Address Is Stored
Subscriber addresses are stored in an Amazon Simple Email Service (SES) contact list inside our own AWS account, and are used only to send the newsletter you subscribed to.
We do not sell, rent, or share newsletter subscriber addresses with third parties.
10.4 Withdrawing Consent (Unsubscribing)
You can withdraw your consent at any time:
Unsubscribing requires no account and no login. It takes effect immediately — there is no waiting period, and no further newsletters are sent once your address is opted out.
10.5 Retention After Unsubscribing
When you unsubscribe, we keep your address as an opt-out record. This is what allows us to honour your request and make sure you are not added back or emailed again.
If you would prefer your address be deleted entirely rather than retained as an opt-out record, contact us at privacy@nivulauta.llc and we will remove it.
11. THIRD-PARTY LINKS AND SERVICES
Nivulauta may contain links to third-party websites and services. This Privacy Policy applies only to Nivulauta. We are not responsible for the privacy practices of third-party sites. Please review their privacy policies separately.
12. PRIVACY BY DESIGN
We have implemented privacy by design throughout our platform:
Minimal data collection (only what's necessary)
Privacy-first default settings
User-friendly privacy controls
Regular privacy impact assessments
Data minimization principles
Pseudonymization where possible
13. CONTACT INFORMATION
Data Protection Officer
Name: Nivulauta Privacy Team
Email: privacy@nivulauta.llc
Address: Nivulauta, Data Protection Office, 63 Federal St #756 Portland, ME 04101
EU/EEA Users
For EU, EEA, and UK users, our lead supervisory authority is the [Your Country's] Data Protection Authority. You have the right to file a complaint with your local data protection authority.
California Residents
Information about our handling of California Consumer Privacy Act (CCPA) requests: [Link to CCPA-specific section]
Other Jurisdictions
We comply with privacy laws in all jurisdictions where we operate, including but not limited to GDPR, CCPA, UK PDPA, and others.
14. POLICY UPDATES
We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of material changes via email or a prominent notice on our platform at least 30 days before the changes take effect.
Last Updated: April 2026
Next Review: April 2027
15. ACKNOWLEDGEMENT
By using Nivulauta, you acknowledge that you have read and understood this Privacy Policy and consent to our data processing practices as described above.
