NEVO
DE|EN
LoginStart for free

Privacy Policy

NEVO · Last updated: 22 June 2026

1. Controller

The controller responsible for data processing in connection with this website and the NEVO app is:

Sigrid Aicher Photography
Sobieskigasse 37/6
1090 Vienna, Austria
Phone: +43 5604499552
Email: privacy@nevo-app.com

2. General Principles

We process your personal data only to the extent permitted by law or to which you have consented. Our website and the NEVO app transmit all data exclusively in encrypted form via SSL or TLS encryption.

3. Visiting Our Website

When you visit our website, our server automatically collects technical access data transmitted by your browser: the page accessed, date and time, amount of data transferred, referring URL, browser type, operating system, and IP address. This data is technically necessary to display the page and is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest in functional and secure operation). This data is not merged with other data sources.

4. Cookies

Our website uses only technically necessary cookies, in particular to maintain your login session in the NEVO app. These cookies are processed on the basis of Art. 6(1)(b) or (f) GDPR and are not used for tracking, marketing, or analytics purposes. You can delete cookies in your browser at any time; however, login itself will then no longer work.

5. Hosting

Application hosting: Railway Corporation, 548 Market St, San Francisco, CA 94104, USA — operates the server infrastructure on which NEVO runs. The servers used for NEVO are located within the EU.

Database, authentication & file storage: Supabase Inc. (headquartered in Singapore) — manages the database, user login, and storage for uploaded files. The data is processed on servers in the EU (Frankfurt region).

Since Railway is based in the USA and Supabase in Singapore, we ensure that appropriate safeguards are in place with both providers (data processing agreement including standard contractual clauses). The legal basis is Art. 6(1)(f) GDPR or, where applicable, Art. 6(1)(b) GDPR.

6. Contacting Us

If you contact us by email, we process the data provided exclusively to process and respond to your inquiry. The legal basis is Art. 6(1)(f) GDPR (and additionally Art. 6(1)(b) GDPR for contract-related inquiries). We delete this data once the matter has been conclusively resolved.

7. Sending System Emails

For automated emails (e.g., registration confirmation, password reset, invoices), we use Resend, operated by Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. In doing so, your email address and email content are transmitted to Resend for delivery on our behalf (Art. 6(1)(f) or (b) GDPR). A data processing agreement exists with Resend, which relies on the EU-US Data Privacy Framework certification.

8. Registration and User Account

When you create a NEVO account, we process the data required for this (e.g., email address, business data) to provide the contractually agreed software service (Art. 6(1)(b) GDPR). You can have your account deleted at any time by contacting us.

9. Data Processing Within the NEVO App

NEVO is a tool you use to organize your own business — in particular, data about your customers (pet owners), their animals, orders, and photos. For this data, you are the controller under data protection law within the meaning of the GDPR. We merely provide you with the technical infrastructure and are a processor under Art. 28 GDPR. The details are governed by our separate Data Processing Agreement (DPA).

10. Payment Processing

Payment for your NEVO subscription is processed via Paddle.com Market Ltd., Judd House, 18–29 Mora Street, London, EC1V 8BT, United Kingdom. Paddle acts as a "Merchant of Record" and is itself responsible for collecting your payment and billing data. After completion of the payment, Paddle transmits to us the order and transaction data necessary for performance of the contract (Art. 6(1)(b) GDPR).

11. Electronic Cancellation Option

If you, as a consumer, have concluded a paid subscription with us, you can cancel it via an electronic button on our website. We process the data you provide exclusively to process your cancellation and confirm receipt (Art. 6(1)(b) and (c) GDPR).

12. Your Rights

You have the following rights against us as controller:

  • Access to the data we process about you (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Notification of recipients of any rectification, erasure, or restriction (Art. 19 GDPR)
  • Data portability (Art. 20 GDPR)
  • Withdrawal of any consent given, with effect for the future (Art. 7(3) GDPR)
  • Lodging a complaint with a supervisory authority (Art. 77 GDPR) — in Austria: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at

Right to object (Art. 21 GDPR): If we process your data based on a balancing of interests under Art. 6(1)(f) GDPR, you have the right to object at any time, for reasons arising from your particular situation, to this processing with effect for the future. We currently do not carry out any direct marketing based on your data.

13. Retention Period

We store your data for as long as necessary for the respective processing purpose, but at least for as long as required by statutory retention periods. After termination of the contract and expiry of any retention periods, we delete your data.

14. Changes to This Privacy Policy

We will update this Privacy Policy if the legal framework, our service providers, or the functioning of NEVO changes. The current version can always be found on this page.