Privacy Policy

This policy explains how Nevazu handles personal data when you use the service. We collect only what we need to run it.

What we collect

• Account: your email address, sign-in and two-step verification records, passkeys you register (public keys only), and trusted-device markers.
• Usage and billing: browsers you create, their regions and settings, metered usage, balance transactions and payment references, and a record of each time you confirm the Terms of Service before paying (the version, the time, your IP address, approximate country and user agent), kept with your billing records. Card details are handled by our payment providers, Stripe and Creem, and never reach us.
• Session and security: IP address and approximate country of sign-ins and live-view sessions, user agent, and security events such as failed codes.
• Browser data: what you store in your cloud browsers (profile, cookies, downloads). It is encrypted at rest, and we do not inspect it.

Why we use it

• To provide the service: sign you in, run and meter your browsers, and take payments.
• To keep it secure: prevent abuse and fraud, rate-limit sign-in, and investigate incidents.
• To communicate: sign-in codes, low-balance and deletion notices, and important service changes. We do not send marketing email without your consent.

Our legal bases are performing our contract with you, our legitimate interest in a secure service, the legitimate interest in preventing and detecting crime and protecting others, and legal obligations such as tax records.

Who we share it with

We use service providers who process data for us under contract: Cloudflare (hosting, email delivery, database, and the Turnstile bot check on the sign-in and sign-up forms), Amazon Web Services (the virtual machines that run your browsers, in the region you choose), Stripe (card payments, fraud prevention, VAT and sales tax, receipts and invoices) and Creem (payments and tax, as merchant of record). Stripe and Creem also use payment data for their own legal and fraud-prevention duties, under their own privacy policies. We do not sell personal data.

We disclose personal data to law enforcement, courts or regulators when the law requires it, and where it is necessary to prevent or investigate illegal activity, fraud or abuse of the service, or to protect the rights and safety of others.

Where it is stored

Account and billing data is stored with Cloudflare. Your browsers and their storage run in the AWS region you choose. Data may be processed in other countries with appropriate safeguards.

How long we keep it

• Browser data: until you delete the browser, or seven days after your credit runs out. Encrypted profile archives are made unreadable before removal.
• Account data: while your account exists, and up to 30 days after you ask us to delete it.
• Billing records: as long as tax and accounting laws require.
• Security logs: up to 12 months.
• Records needed for an investigation, a legal claim or a request from the authorities: for as long as that requires.

Your rights

You can ask to access, correct, export or delete your personal data, or object to some uses, by writing to support@nevazu.com. You may also complain to your data protection authority.

Cookies

We use only the cookies needed to keep you signed in and secure, and local storage for preferences such as language and theme. We use no advertising or third-party tracking cookies.

Security

We encrypt data in transit and at rest, isolate every browser on its own machine, and limit staff access. Report vulnerabilities to security@nevazu.com.

Changes

We will post changes here and tell you about material ones by email.