Version 2026-08-09 · Effective 9 August 2026
This Privacy Policy explains how Nuvio (the “Platform”, “we”, “us”) handles personal data. It applies to our customers and to visitors of our sign-in and marketing pages. For personal data our customers upload or process through the Platform to run their own communications, the customer is the data controller and we act as a processor on their behalf and instructions.
We use account and usage data to provide, secure, support, bill and improve the Platform, to communicate service and account information, and to comply with law. We process customer contact data only to provide the Platform to that customer and on their instructions — we do not sell personal data, and we do not use customer contact data for our own marketing.
Marketing and promotional messages sent through the Platform require a lawful basis or recorded opt-in obtained by the customer. Opt-outs are honoured permanently and across every channel. Recipients can opt out through the mechanism offered on each channel (for example one-click unsubscribe on email, STOP on SMS).
We share data with service providers who help us run the Platform — including channel providers (such as Meta/WhatsApp, Google RCS Business Messaging, and telephony/email providers) and hosting/infrastructure providers — strictly to deliver the service. We may disclose data where required by law or to protect rights and safety. We do not sell personal data.
Delivering messages across channels and regions may involve transferring data internationally, including to channel providers in other countries. Where required, we use appropriate safeguards for such transfers.
We retain personal data for as long as needed to provide the Platform and for legitimate legal, security and accounting purposes, after which it is deleted or anonymised. Customers control the retention of their own contact data and may delete or export it, subject to the account’s status.
We use reasonable technical and organisational measures to protect personal data, including access controls, tenant isolation and encryption of secrets in transit and at rest. No system is perfectly secure, and you are responsible for safeguarding your own credentials.
Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal data, and to object or withdraw consent. For account data, contact us using the details below. For contact data a customer uploaded, please contact that customer (the controller); we will assist them as their processor.
The Platform is intended for use by businesses and is not directed to children. Where a customer collects data relating to minors (for example a parent’s enquiry about a child’s education), that customer is responsible for the lawful basis and for handling such data appropriately.
Our sign-in and marketing pages use only the cookies necessary to operate and secure the session. We do not use them for third-party advertising.
We may update this Policy; material changes take effect on the updated version’s effective date. Please review it periodically.
Privacy questions or requests: connect@winquestonline.com. (Operator’s legal entity and, where applicable, grievance/data-protection officer details to be confirmed by the operator.)