NUIVI Privacy Policy
This Policy explains, in plain language, which personal data NUIVI collects, what it uses it for, who it shares it with, how long it keeps it and how you exercise your rights under Brazil’s General Data Protection Law (LGPD, Law No. 13,709/2018). It applies to the nuivi.com.br website, the Studio, the library, the My account page and the support channels, and it complements the Terms of Use.
Last updated:
1. Who is responsible for your data
The data controller is Roque Tráfego Pago, which operates NUIVI ("NUIVI", "we"). For any privacy matter — questions, access, correction or deletion requests — write to suporte@roquetrafegopago.com.br. We also answer on WhatsApp (+55 19 98268-1810).
Hotmart processes payments and is responsible for the data you enter at checkout, under its own privacy policy.
2. Which data we collect
We collect only what we need to provide the service. By category:
| When | Data | Source |
|---|---|---|
| Account and sign-in | E-mail, name (when provided), password protected by the authentication service, account identifier and sign-in sessions. If you sign in with a third-party account (for example, Google), the provider sends us your name, e-mail and profile picture. | You, through Clerk (authentication) |
| Purchase and subscription | Notifications sent by Hotmart for each subscription event: buyer’s name and e-mail, transaction code, offer and plan, status (approved, cancelled, refunded, disputed), billing dates and any other buyer fields Hotmart includes in the notification. We keep the full notification for auditing and to release the quota. | Hotmart (automatic notification) |
| Song creation | Descriptions (prompts), lyrics, titles, styles and chosen options (vocal or instrumental, model version, duration), audio uploaded in Cover, generated songs and cover art, the result or failure reason of each generation, albums and trash, credit statement. | You, in the Studio |
| Website browsing | Page visited, referring page (referrer), random session identifier, approximate country and city derived from the IP address; technical server access logs (IP, date and time, browser); Meta Pixel events on public pages. | Your browser; Vercel; Meta |
| Referral (affiliates) | Referral code received in the URL (?ref=), stored in your browser for 30 days and linked to your account when it is created. | Referral link |
| Support | Whatever you send us by e-mail or WhatsApp, including your account e-mail and the description of the problem. | You |
We do not collect card or other payment data: it is handled exclusively by Hotmart. The website does not ask for an ID number, address or phone number; if Hotmart includes those fields in the purchase notification, they are stored together with it.
3. What we use the data for and on which legal basis
| Purpose | Data | Legal basis (LGPD, art. 7) |
|---|---|---|
| Create and maintain your account, identify the purchase by e-mail and release the plan quota | Account, purchase | Performance of a contract |
| Generate songs, write lyrics, keep the library and show the statement | Creation | Performance of a contract |
| Send the access invitation after payment and messages about your account | Performance of a contract | |
| Provide support and answer requests | Support, account | Performance of a contract |
| Prevent fraud and abuse, enforce usage limits and protect the service | Account, creation, access logs | Legitimate interest |
| Keep records of purchases, refunds and disputes | Purchase | Compliance with a legal obligation and regular exercise of rights |
| Measure website visits and understand which pages are used most | Browsing | Legitimate interest |
| Measure advertising campaigns (Meta Pixel) | Browsing | Consent, where required, or legitimate interest; you can block it (section 4) |
| Pay affiliate program commissions | Referral, purchase | Performance of a contract |
We do not sell personal data, and we do not use your prompts, lyrics or songs for advertising or to train our own models.
4. Cookies and browser storage
We use few cookies and browser storage items:
| Name or type | Purpose | Duration |
|---|---|---|
| Clerk session cookies | Keep you signed in and protect the login | For the duration of the session |
| nuivi_lang (localStorage) | Remember the chosen language (PT, ES or EN) | Until you clear your browser |
| nuivi_referral (localStorage) | Store the affiliate referral code received in the URL | 30 days |
| nuivi_sid (sessionStorage) | Random identifier used to count visit sessions; it does not identify you | Until the tab is closed |
| Bulk mode queue (localStorage) | Keep your account’s list of pending requests if the page reloads | Until the queue finishes or you clear your browser |
| Meta Pixel (Meta cookies such as _fbp) | Measure visits and results of NUIVI ads on Facebook and Instagram, on the public pages of the site | As set by Meta’s policy |
To block the Meta Pixel, use the ad settings of your Meta account, a tracker blocker or your browser’s option to block third-party cookies. Blocking Clerk cookies prevents sign-in.
5. Who we share data with
We share data only with the service providers below (processors), to the extent needed for each function, and with authorities when the law requires it:
| Provider | Function | Data involved |
|---|---|---|
| Hotmart | Payments, subscription, refunds and affiliate program | Checkout data; sends NUIVI the subscription notifications |
| Clerk | Authentication and account management | E-mail, name, protected password, sessions |
| Supabase | NUIVI database | Account, purchases, generations, lyrics, statement, visit statistics |
| Cloudflare (R2) | File storage | Generated songs and cover art; audio uploaded in Cover (private storage) |
| Vercel | Hosting of the website and server functions | Technical access logs (IP, date and time, browser, country and city) |
| OpenAI | Writing lyrics and titles and improving style | Descriptions, lyrics and styles sent for writing |
| Artificial intelligence infrastructure providers for audio generation | Produce the audio of the songs | Description, lyrics, style, title and options of the creation; in Cover, the uploaded audio, through a temporary link. Generated files remain with these providers for a limited time. |
| Meta (Facebook and Instagram) | Ad measurement (Pixel) | Visit events on public pages and Meta cookies |
Each provider handles data under its own terms and privacy policies. We do not sell, rent or transfer personal data to third parties for their own purposes. Links to external sites (such as the Hotmart checkout, Ditto and Instagram) follow those sites’ policies.
6. International data transfers
Some of these providers keep servers outside Brazil, mainly in the United States. This means your data may be transferred to and stored abroad, under article 33 of the LGPD, relying on the contractual safeguards and data protection policies of those providers. By using NUIVI, you are aware of this transfer.
7. How long we keep data
| Data | Period |
|---|---|
| Account and profile | For as long as the account exists. After a deletion request, removed, except what the law requires us to keep. |
| Purchase notifications, credit statement and commissions | For as long as the account exists and, afterwards, for the period needed for tax and legal obligations and for defense in disputes. |
| Descriptions, lyrics, titles and creation metadata | For as long as the account exists, listed in the library. |
| Generated audio files and cover art | Available to you for 14 days after generation; after that, they may be removed from our servers without notice. |
| Tracks in the trash | 7 days after deletion; then permanently removed. |
| Audio uploaded in Cover | Up to 1 day after upload. |
| Referral code in the browser | 30 days. |
| Visit statistics and access logs | Access logs for the period required by Brazil’s Internet Civil Framework; visit statistics, without direct identification, for as long as they are useful to the site. |
8. How we protect data
- Encrypted connection (HTTPS) across the whole site and in calls to the server.
- Passwords are kept by the authentication service; NUIVI never sees or stores your password.
- Provider keys and credentials stay only on the server, never in the browser.
- Notifications from Hotmart and from the generation providers are verified by token or signature before any change to your account.
- Access to your creation data only with a valid sign-in; audio uploaded in Cover is kept in private storage, with no public access.
- No system is completely secure. If an incident may pose a relevant risk to you, we will notify you and Brazil’s National Data Protection Authority (ANPD), as the LGPD requires.
9. Your rights
The LGPD guarantees you, among others, the right to:
- Confirm whether we process your data and access it.
- Correct incomplete, inaccurate or outdated data.
- Request anonymization, blocking or deletion of unnecessary data or data processed in breach of the law.
- Request portability of your data to another provider, subject to trade and industrial secrets.
- Request deletion of data processed with your consent and withdraw consent.
- Know who we share your data with and what happens if you do not give consent.
- Object to processing based on legitimate interest.
- File a complaint with Brazil’s National Data Protection Authority (ANPD).
To exercise any right, write to suporte@roquetrafegopago.com.br from the e-mail registered on your account (that is how we confirm the request is yours). We reply within the LGPD deadlines. Deleting your account erases the profile, the creations and the library; purchase records and the statement may be kept for the legal period, as described in section 7. You can also change your e-mail and password directly in the account settings.
10. Children and teenagers
NUIVI is intended for people aged 18 or over and does not knowingly collect data from children or teenagers. Minors may only use it with the authorization and supervision of a legal guardian. If you know that a minor created an account without such authorization, tell support so the data can be removed.
11. Changes to this Policy
We may update this Policy to reflect changes in the service, in the providers or in the law. The date of the last update appears at the top of the page. Relevant changes will be announced on the website or by e-mail.
12. Governing law
This Policy is governed by the laws of Brazil, in particular the LGPD (Law No. 13,709/2018) and the Internet Civil Framework (Law No. 12,965/2014). For consumers, the courts of your place of residence apply; data protection and consumer rules of your country that cannot be waived also apply.