Privacy Policy

1. Information We Collect

We collect information you provide directly, including: name, email address, date of birth, profile information, payment details (processed by Stripe), and content you upload. We also collect information automatically, such as IP address, device type, browser information, pages visited, and usage patterns through cookies and similar technologies.

2. How We Use Your Information

We use your information to: provide and maintain the Platform; process payments and payouts; verify your identity and age; improve our services; send you important notifications about your account; detect and prevent fraud, abuse, and security incidents; comply with legal obligations including EU GDPR, DSA, and applicable tax laws.

3. Data Sharing

We do not sell your personal data. We may share information with: payment processors (Stripe) to process transactions; cloud service providers to host our Platform; law enforcement when required by law or to protect safety; analytics providers in an anonymized form. Any third-party service providers are contractually bound to protect your data.

4. Data Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest, secure access controls, and regular security audits. While we strive to protect your data, no method of internet transmission is 100% secure.

5. Your Rights (GDPR)

Under the EU General Data Protection Regulation (GDPR), you have the right to: access your personal data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict processing; data portability; object to processing; withdraw consent at any time. To exercise these rights, contact us at gestion@nexusvibe.net. We will respond within 30 days.

6. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy, or as required by law. Account data is deleted within 90 days of account closure, except where retention is required for legal, tax, or audit purposes.

7. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). Where such transfers occur, we ensure adequate protection through Standard Contractual Clauses (SCCs) or other approved transfer mechanisms under GDPR.