Privacy policy
1. Who we are
nvois ("we", "us") operates the nvois.me platform and is the data controller for the personal data described in this policy. Our registered address is Toom-Kooli 1, 10130 Tallinn, Estonia. You can reach us at privacy@nvois.me.
2. Information we collect
Account data: your name, email address and profile picture provided by Google when you sign in. Business data: company name, address, registration and VAT numbers you enter. Content: documents, invoices, contracts and signatures you create or upload. Technical data: IP address, browser type, device information and timestamps collected for security. Communications: messages you send through our contact form.
3. How we use your information
To provide and maintain our platform; to manage your account and authenticate you; to fulfil our contractual obligations to you; to notify you about changes to our platform; to analyse usage so we can improve our platform (only with your consent); to respond to support requests; and to comply with legal, tax and accounting obligations.
4. Legal basis for processing
We process your data to perform our contract with you (Art. 6(1)(b) GDPR), to comply with legal obligations (Art. 6(1)(c)), on the basis of our legitimate interests in securing and improving the service (Art. 6(1)(f)), and with your consent for optional analytics cookies (Art. 6(1)(a)). You can withdraw consent at any time.
5. Cookies
We use strictly necessary cookies and local storage to keep you signed in and remember your cookie choice. Analytics cookies are only set if you choose "Accept all" in our cookie banner. You can change your choice by clearing your browser storage for nvois.me.
6. Sharing your information
We do not sell your data. We share it only with service providers that host our infrastructure, authenticate sign-ins (Google) and store files, each bound by data-processing agreements; with authorities where required by law; and with the recipients you choose to send documents to.
7. International transfers
Where data is processed outside the European Economic Area, we rely on European Commission adequacy decisions or Standard Contractual Clauses to protect it.
8. Data security
We encrypt data in transit, restrict storage so only you can open your documents, fingerprint signed files with SHA-256, perform regular security reviews, and limit staff access to people who need it.
9. Data retention
We keep your account data while your account is active. Invoices may be retained for up to 7 years where accounting law requires. Contact messages are deleted after 24 months. Deleted documents are removed from storage immediately.
10. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict and port your data, to object to processing, and to withdraw consent. You can export your data from Settings at any time. To exercise any right, write to privacy@nvois.me. You may also complain to the Estonian Data Protection Inspectorate (aki.ee).
11. Children
nvois is not intended for anyone under 16 and we do not knowingly collect their data.
12. Changes to this policy
We may update this policy. We will notify you of material changes by email or in the app before they take effect.
Last updated: October 13, 2026