Nivo Acquatic Control
Privacy Policy
Last updated: May 20, 2026
This Privacy Policy describes how Nivo Sistemas Inteligentes Ltda (CNPJ to be added) — hereinafter “Nivo” or “we” — handles the personal data of people who use Nivo Acquatic Control, its pool automation product line (the controller, the app, the website and the other services of the platform, together the “Services”). It was drafted in accordance with the Brazilian General Data Protection Law (Law No. 13,709/2018 — LGPD).
1. Who we are
Nivo Sistemas Inteligentes Ltda develops in-house hardware and software for pool automation, sold under the Nivo Acquatic Control product line. For the purposes of the LGPD, we act as the controller of the personal data processed within the Services.
2. What data we collect
We collect only the data needed to operate the Services:
- Account data: email and password, used to create and authenticate your account.
- Session data: an authentication token that keeps you securely signed in.
- Device telemetry: technical data from the controller, such as uptime, Wi-Fi signal quality and temperature readings, used for operation, diagnostics and product improvement.
- Location data (future use): if device geolocation features are enabled, they will be processed under this Policy and on a specific legal basis.
We do not collect sensitive data and we do not sell personal data.
3. Why we collect it and legal basis
| Purpose | Legal basis (LGPD) |
|---|---|
| Create and authenticate your account | Performance of a contract |
| Operate pool control | Performance of a contract |
| Diagnostics, support and security | Legitimate interest |
| Product improvement | Legitimate interest |
| Communications you request | Consent |
4. How we store your data
Data is stored on Amazon Web Services (AWS) infrastructure, processed in a Brazil region. Access credentials are managed by Amazon Cognito. Communication between the controller, the cloud and the apps is encrypted in transit (TLS).
5. Sharing with third parties
We share data only with processors required to deliver the service:
- Amazon Web Services / Amazon Cognito — hosting and authentication.
- Amazon Alexa and Google Assistant — only when you link your voice account; in that case a linking token is shared, not your usage data.
We do not share data with third parties for advertising purposes.
6. How long we keep it
- Telemetry data: retained for up to 90 days (automatic expiry).
- Account data: kept while your account is active.
- After account closure, data is deleted or anonymised, unless a legal retention obligation applies.
7. Your rights (LGPD)
Under article 18 of the LGPD, you may at any time request:
- confirmation that processing exists;
- access to your data;
- correction of incomplete, inaccurate or outdated data;
- anonymisation, blocking or deletion of unnecessary or excessive data;
- portability of your data to another provider;
- deletion of data processed on the basis of consent;
- information about the entities with which we share data;
- information about the option not to give consent and its consequences;
- withdrawal of consent.
To exercise any of these rights, contact us through the channel in section 13.
8. Cookies
The institutional website uses essential cookies only. We do not use tracking, profiling or advertising cookies, nor third-party analytics tools on this website.
9. Information security
We adopt technical and organisational measures to protect your data, including encryption in transit, a unique identity per device and access control. No system is fully immune to incidents; in the event of a relevant security incident, we will act as required by the LGPD.
10. Children and adolescents
The Services are not directed at people under 18 and we do not knowingly collect data from children or adolescents.
11. International data transfers
If any processing involves an international data transfer, it will occur only to countries or processors that ensure an adequate level of protection, as required by the LGPD.
12. Changes to this policy
We may update this Policy to reflect legal or product changes. The date of the last update is shown at the top of the document. Relevant changes will be communicated through the Services.
13. Contacting our DPO
For questions, requests or to exercise your rights, contact our Data Protection Officer (DPO):