Data Rights Request

GDPR (EU) · LGPD (Brazil) · CCPA (California) · LOPD-GDD (Spain) · DSGVO (Germany)

Your data, your rights. Under applicable data protection laws, you can request access to, correction of, deletion of, or portability of your personal data at any time.

Your Rights

  • Access: Obtain confirmation of whether we process your data and request a copy.
  • Rectification: Correct inaccurate or incomplete personal data.
  • Erasure: Request deletion of your personal data when it is no longer necessary.
  • Portability: Receive your data in a structured, machine-readable format (JSON).
  • Objection: Object to processing based on legitimate interests.
  • Restriction: Request that we limit how we use your data.
  • Withdraw Consent: At any time, without affecting prior processing.

How to Submit a Request

Send an email to:

privacy@nexo.wiki.br

Please include:

  • Your full name (as registered in the app)
  • The email address associated with your NEXO account
  • Which right(s) you wish to exercise
  • Any additional details to help us locate your data

Response Times

  • GDPR (EU/EEA): Within 30 days (extendable by 60 days for complex requests)
  • LGPD (Brazil): Within 15 business days
  • CCPA (California): Within 45 days (extendable by 45 days)

Account Deletion

You can delete your account directly within the NEXO app at Settings > Delete Account. After deletion, your data is retained for 90 days for backup and legal compliance purposes, then permanently removed.

Data Retention

  • Account and gameplay data: Retained while account is active; 90 days after deletion
  • Notification tokens: Deleted immediately on account deletion
  • Technical logs: 30 days
  • Administrative audit logs: 12 months

Supervisory Authorities

If you are not satisfied with our response, you may lodge a complaint with:

Data Controller