Privacy policy

1. Data controller

The controller responsible for processing your personal data is Nexxo. Email: soporte@nexxoapp.com.

This Policy describes how we process personal information when you use the Nexxo mobile application, nexxoapp.com and associated services (together, the “Platform”).

2. Scope

Nexxo is mainly intended for users in Venezuela, although it can be used from other countries. We process data in accordance with articles 28 and 60 of the Constitution of the Bolivarian Republic of Venezuela and, where applicable based on the user’s location, other data protection rules such as the European Union’s General Data Protection Regulation (GDPR).

Nexxo is a tool for recording, calculating and organizing expenses. It is not a bank, currency exchange or financial institution and does not hold users’ funds.

3. Data we process

In the app: account data (name, email and preferences such as language and base currency); content you enter (expenses, groups, amounts, currencies, dates, notes and custom exchange rates); technical data (device type, operating system, app version and identifiers needed for operation).

On the website: contact form name, email, subject and message are delivered by email and are not stored in our database. An IP address is used temporarily to limit abuse and is not stored. Messages entered in the Nexxito AI chat are sent to Google (Gemini) to generate responses; we do not store conversation history in our databases. Do not enter sensitive data in the chat.

Only essential cookies operate without consent. Analytics and marketing technologies require acceptance; see the Cookie Policy. If you arrive through a campaign link and consent to marketing cookies, we store campaign parameters (UTM) during the session and pass them to App Store or Google Play on download to measure which campaign generated the installation.

Email communications: email address, subscription preferences by topic and delivery events (sent, opened or bounced).

We do not request identity documents, bank details or card details. If payments are introduced in the future, we will update this Policy.

4. Purposes and legal bases

• Providing the service (accounts, records, calculations and synchronization): necessary to perform our relationship with you as a user.
• Answering contact form or email enquiries: your request.
• Security and abuse prevention (request limits and error detection): legitimate interest in keeping the Platform safe and operational.
• Usage analytics (PostHog and Sentry session recording): your consent through the cookie panel.
• Campaign measurement (Meta Pixel and UTM parameters): your consent through the cookie panel.
• App guidance emails (getting started): legitimate interest in helping you use the service. You can unsubscribe at any time.
• Promotional emails (news, tips, announcements and re-engagement): only with express, revocable opt-in consent.
• Legal obligations: where the law requires us to retain or disclose data.

5. Exchange rates and user responsibility

Nexxo may allow official rates, market reference rates and custom rates defined by the user. Selecting the exchange rate is the user’s sole responsibility. Nexxo does not guarantee that a rate is official, lawful or applicable in the user’s jurisdiction. In countries with exchange controls, such as Venezuela, users must align the rate with the one required by the authorities where the law so requires. Nexxo does not promote or require unofficial rates.

6. Providers and recipients

We use the following providers to operate the Platform, processing data on our behalf only to deliver their services:

• Vercel (United States): website hosting and aggregated performance metrics without cookies.
• Supabase: database.
• Upstash: request limits and temporary caching.
• Resend (United States): email delivery and subscription management.
• Google Gemini API (United States): Nexxito assistant responses.
• Sentry (United States): technical error logging and, with consent, session recording.
• PostHog (United States): usage analytics, only with consent.
• Meta Platforms: advertising campaign measurement through Meta Pixel, only with consent.
• Apple App Store and Google Play: campaign parameters on app download, only with marketing consent.

We may also disclose data to authorities when legally required. We never sell personal data.

7. International transfers

Several providers process data outside Venezuela, mainly in the United States. We choose providers offering contractual data protection safeguards, such as standard contractual clauses, and limit the data sent to what is necessary.

8. Data retention

• Account and app content: while the account is active. After deletion, data is deleted or anonymized unless retention is legally required.
• Contact messages: for as long as needed to answer and follow up on your enquiry. You can request deletion at any time.
• Email preferences: while subscribed; after unsubscribing, we retain your email on a suppression list so we do not contact you again.
• Cookies: for the periods in the Cookie Policy.
• Technical and error logs: according to each provider’s retention period, no longer than needed for security and diagnosis.

9. Marketing communications

We send promotional emails only if you have expressly agreed. You can change your preferences or unsubscribe at any time through the link in each email or by writing to soporte@nexxoapp.com.

10. Information security

We apply reasonable technical and organizational measures, including HTTPS communications, database access controls with minimum permissions for each service, and request limits against abuse. No system is completely secure, so we cannot guarantee absolute security.

11. Your rights

You may request access, rectification of inaccurate data, deletion, objection to or restriction of processing, portability where applicable, and withdrawal of consent without affecting the lawfulness of earlier processing.

Write to soporte@nexxoapp.com. We may ask you to verify your identity. We will respond within a maximum of 30 days.

In Venezuela you may also exercise habeas data rights under article 28 of the Constitution. If you live in the European Union, you may lodge a complaint with your country’s data protection authority.

12. Data deletion

Request account and data deletion by following the data deletion instructions or writing to soporte@nexxoapp.com. We will delete the data unless there is a legal obligation to retain certain information.

13. Minors

Nexxo is intended for people over 18. We do not knowingly collect minors’ data. If we identify a minor’s data, we will delete it.

14. Changes to this Policy

We may update this Policy to reflect legal, technical or operational changes. We will publish the new version at this URL with its update date and communicate significant changes through an appropriate channel.

15. Contact

For privacy or data protection enquiries, email soporte@nexxoapp.com. Website: nexxoapp.com.