Skip to content
Nivlo

Privacy Policy

Last updated: April 2026

This is a convenience translation. The Romanian version prevails.

1. Introduction

Teachels Media SRL operates the Nivlo platform (nivlo.com). We are committed to protecting your personal data in full compliance with the General Data Protection Regulation (GDPR) and applicable Romanian data protection legislation.

This Privacy Policy explains what data we collect, how we use it, and your rights as a data subject.

2. Data We Collect

Account Data

When you create an account, we collect your email address, name, and company information (if provided).

Usage Data

We automatically collect technical data such as server logs, IP addresses, browser type and version, and general usage patterns to ensure platform stability and security.

Files

Files uploaded to Nivlo are stored on secure servers within the European Union (Germany and Finland).

Website Analytics

We may use analytics tools on our marketing website, subject to your explicit consent via our cookie banner. Analytics data is anonymized and never shared with third parties.

3. How We Use Data

  • Service delivery — to provide, maintain, and improve the Nivlo platform.
  • Account communications — to send transactional emails, security alerts, and service updates.
  • Platform improvement — to analyze usage patterns and improve features and performance.
  • Legal compliance — to fulfill legal obligations, respond to lawful requests, and protect our rights.

We do NOT sell or share your data for advertising purposes. There is no third-party ad tracking on Nivlo.

4. Data Processors

We work with a limited number of trusted data processors, all bound by data processing agreements:

  • Infrastructure provider (Germany/Finland) — server infrastructure and data storage.
  • Payment processor — for secure payment handling.

All personal data remains within the European Union. We do not transfer data outside the EU/EEA.

5. Storage and Backup

  • All data is stored on dedicated infrastructure in Germany and Finland.
  • Automatic backups are maintained on EU-based infrastructure.
  • Data is encrypted in transit using TLS and encrypted at rest.

6. Retention

  • Active account — your data is retained for as long as your account is active.
  • Account deletion — personal data is anonymized within 30 days.
  • Files — permanently deleted within 30 days of account deletion.
  • Backups — rotated and purged within a maximum of 90 days.

7. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access — obtain a copy of your personal data.
  • Right to rectification — correct inaccurate or incomplete data.
  • Right to erasure — request deletion of your personal data.
  • Right to data portability — receive your data in a structured, machine-readable format.
  • Right to restriction — restrict the processing of your data in certain circumstances.
  • Right to object — object to data processing based on legitimate interests.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption in transit and at rest.
  • Role-based access controls for internal systems.
  • Continuous monitoring and incident response procedures.
  • Automatic backups with secure storage.

9. Changes

We may update this Privacy Policy from time to time. For significant changes, we will provide at least 30 days' notice via email or in-app notification.

10. DPO Contact

For any privacy-related inquiries or to exercise your data rights, contact us at:

[email protected]
Teachels Media SRL
Romania

You also have the right to file a complaint with the Romanian Data Protection Authority (ANS