PRIVACY POLICY

Last Updated: June 17, 2025

Welcome to Nivue. We are [Your Full Legal Name], doing business as Nivue ("Company," "we," "us," "our").
This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website nivue.today
and our related services (collectively, the "Services").

1. INFORMATION WE COLLECT

We may collect the following types of information:

Personal Information: When you register, subscribe, or contact us,
we collect information such as your name, email address, and payment information
(which is processed securely by our payment partner, Paddle). During onboarding,
we may also ask for optional information like your age, location, gender, occupation,
and service goals to personalize your experience.

Service Content Data (Your Contributions): We collect the content you submit in response to our prompts,
including your emotional expressions,
journal entries, and other text you provide ("Contributions").
This data is the core of your Nivue experience.

Usage Data: We automatically collect technical data when you interact with our Services,
such as your IP address, browser type, and pages visited, using analytics tools.

2. HOW WE USE YOUR INFORMATION

We use your information to:

Provide, maintain, and personalize the Services.

Process your subscriptions and payments through Paddle.

Generate personalized AI responses and reports by sharing your Contributions with our AI service provider, Anthropic (Claude).

Provide music recommendations by sharing non-personal emotional keywords with the Spotify API.

Communicate with you about your account and service updates.

Comply with legal obligations.

3. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. We only share it with the following trusted service providers to make Nivue work:

Payment Processor (Paddle): To handle your subscriptions securely.

AI Service Provider (Anthropic): To provide the core AI conversational and analysis features.

Music Service Provider (Spotify): To provide music recommendations.

Email & Other Service Providers (Amazon SES, Mailgun, etc.): To deliver our services to you.

Legal Authorities: If required by law or to protect our rights.

4. Data Security

We implement reasonable security measures (e.g., encryption, secure servers) to protect your data,

hosted in South Korea. However, no method is 100% secure, and we cannot guarantee absolute protection.

5. International Data Transfers

Your data is processed in South Korea. For EU users,
we comply with the General Data Protection Regulation (GDPR)
by ensuring data transfers are safeguarded (e.g., Standard Contractual Clauses).

For California users, we adhere to the California Consumer Privacy Act (CCPA)
by providing opt-out rights. By using the Services, you consent to this transfer.

6. Your Rights and Choices

Access and Correction: You can request access to or correction of your data by emailing nivue.global@gmail.com.

Deletion: You may request data deletion, subject to legal retention periods.

Opt-Out: You can unsubscribe from marketing emails via the unsubscribe link.

Minors: Users under 19 in South Korea require parental consent, and we do not knowingly collect data from minors without it.

7. Retention

We retain your data for as long as necessary to provide the Services, comply with legal obligations (e.g., tax records for 5 years in South Korea),

or resolve disputes. Inactive accounts may be deleted after 2 years.

8. Changes to This Policy

We may update this Privacy Policy with 30 days’ notice via email. Continued use after changes constitutes acceptance.

9. Governing Law

This Policy is governed by South Korean law, with disputes resolved in Seoul courts, subject to international compliance (e.g., GDPR).