Privacy Notice
Last updated: September 20, 2026
1. Who this notice covers
Nyxelus is the brand under which this public website and the products it offers — starting with Aprovou Extra — are operated. Nyxelus is responsible for the data handling described in this notice.
2. This public website (nyxelus.com)
Browsing this site does not require an account. Before you make a choice in the cookie banner, this site does not load Google Tag Manager, Google Analytics, or any advertising or social-media tool. Our delivery and security provider, Cloudflare, processes technical data about each request (such as your IP address) to deliver and protect the site, and may also collect aggregate performance and traffic statistics for its network; none of that depends on your cookie choice. The site also uses your browser's session storage — not a cookie — to remember, only for your current browsing session, which marketing link (if any) referred you here. When you click a purchase button, the site adds that link's campaign labels (for example, the ad campaign name) to the checkout address on our payment provider, Hotmart, so the sale can be attributed to the campaign; it sends nothing else from that record.
2.1 Your cookie choice: Analytics and Advertising
The first time you visit, a banner lets you allow or decline two optional categories. Your choice is saved only in your own browser's local storage (never a cookie, never sent to Nyxelus or anyone else), so the banner isn't shown again. Each category does nothing unless you allow it.
- Analytics — helps us understand how this site is used. If you allow it, this site loads Google Tag Manager and Google Analytics 4 from Google. They measure page views (including the page address and any campaign or ad-click parameters it contains) and clicks on the purchase button that takes you to the checkout page of our payment provider. Google also receives technical data your browser sends automatically, such as your IP address and browser and device information, and sets its own analytics cookies on this site (for example, _ga and _ga_*). We do not send your name, email, or payment details to Google from this site.
- Advertising — used to measure the results of our ads and to show relevant ads. If you allow it, this site loads Google Tag Manager from Google (which reveals your IP address to Google) and may run the advertising or social-media measurement tools we have configured in it for this purpose. Those providers receive technical data your browser sends automatically and information about your visit to this site, and may set their own cookies or identifiers. We name each advertising tool we use in this notice and update it when that changes.
- Necessary — the local record of your own choice; always on.
Payment is handled on our payment provider's own site (Hotmart), which has its own privacy notice and its own measurement settings; this site does not collect your payment details. We use the tools above only with your consent and only to understand and improve the site and to measure our advertising. The providers supply them to us and may process this data outside Brazil. Analytics data is kept for the retention period configured in our Google Analytics property.
2.2 Changing or withdrawing your consent
You can change your choice at any time: open "Cookie preferences" in the footer of any page, turn Analytics and/or Advertising off, and select "Save preferences" (or "Reject optional" to turn both off). Withdrawing consent is as easy as giving it. When you withdraw, the page reloads so the tools stop immediately, other tabs of this site open in the same browser follow your new choice, and this site sends no further data to the analytics or advertising providers. Cookies those providers already set on your device are not removed automatically; you can delete them in your browser settings. Withdrawing consent does not affect data collected while you had given it.
3. Nyxelus products and accounts
If you create an account for a Nyxelus product — such as Aprovou Extra — Nyxelus collects your email and password (stored as a secure hash, never in plain text) to operate that account. What each product collects and does beyond that basic account is described in that product's own section below.
4. Aprovou Extra
This section describes Aprovou Extra specifically — Nyxelus' first product.
4.1 What Nyxelus collects
Once you or your customer actually use Aprovou Extra, Nyxelus collects:
- Customers, properties, and jobs: the name, email, and phone number of the professional's own customers, and the property/job details the professional enters.
- Extras and decisions: the description, price, and currency of each Extra, and the customer's decision (approved or rejected). When a customer approves or rejects, they type their own name to confirm the decision, and that name is kept as part of the permanent decision record; if they report a problem with a decision, any note they type is kept as well.
- Evidence photos (optional): photos a professional attaches to an Extra. Each photo is re-encoded on Nyxelus' servers before storage, which strips its original EXIF/location metadata and discards the original file name.
- Purchase and billing: from Hotmart's purchase/subscription notifications, Nyxelus extracts and keeps only the buyer's email and the transaction, subscription, and product/offer identifiers — Nyxelus never receives or extracts card details; those stay with Hotmart.
- Technical and security data: a signed-in user's IP address is used only through a one-way cryptographic hash, to limit abuse (e.g. login attempts) — Nyxelus does not store the real IP address. A short, coarse label describing the browser/device is kept with each signed-in session, so a professional can review their own active sessions.
Aprovou Extra does not collect or store government ID numbers, date of birth, or banking details. Hotmart, the platform that processes subscription payment, separately handles payment-related information under its own systems and privacy policy.
4.2 Who Nyxelus shares this data with
- Payment/subscription platform (Hotmart) — processes subscription payment; Nyxelus extracts and keeps only the buyer's email and transaction/ subscription references from what it sends.
- Transactional communication provider — sends transactional emails (account verification, decision notifications) on Nyxelus' behalf.
- Private storage provider — stores evidence photos privately, when a professional attaches one.
- Nyxelus' application and database hosting provider.
Nyxelus does not add analytics, tracking, or advertising tools of its own inside the Aprovou Extra application (after you sign in, and on public approval links). The optional tools described in section 2 apply only to the public nyxelus.com website; Cloudflare, described in section 2, also delivers the application. Some of these providers are international companies, so data may be processed outside Brazil.
4.3 Cookies inside Aprovou Extra
Once signed in, Aprovou Extra uses two cookies only: a session cookie required for login, and one that remembers an interface-language preference. Neither is used for tracking or advertising.
4.4 Photo review
Evidence photos go through an automated privacy check on Nyxelus' own servers before being accepted, to reduce the risk of sensitive content. This check runs entirely on Nyxelus' own infrastructure; no photo is sent to any external image-recognition provider.
4.5 How long Nyxelus keeps this data
The table below describes what is kept and why.
| What | Why |
|---|---|
| Draft photos and draft Extras not yet sent | Kept only while the professional is preparing them, to finish and send the Extra. |
| A photo removed before sending | Deleted right away whenever technically possible. |
| A photo tied to a decision already made | Kept as the professional's own evidentiary record of what was approved or rejected, for evidentiary, legal, or dispute-resolution purposes. |
| Account data after cancellation | Retained for as long as the account exists, including after cancellation, for continuity of records and for evidentiary, legal, and dispute-resolution purposes. |
| A buyer email not yet linked to an account | An unclaimed purchase link expires 14 days after purchase. The underlying purchase record is kept afterward for account-linking, support, and financial-reconciliation purposes. |
| Billing records | Kept permanently as financial records — a deliberate, permanent choice, applying to every subscriber. Hotmart separately retains payment records under its own policies. |
5. Your rights
If you have an Aprovou Extra account, you can view, export, or request deletion of your own personal data directly in Settings > Privacy inside the product, without contacting Nyxelus first. Requesting deletion automatically revokes your account access, active sessions, and any of your still-open public approval links. Some records — such as an Extra and its evidence once a decision has been made, billing records, and anything needed for security, fraud prevention, legal obligations, or dispute resolution — are retained for those purposes.
If you don't have an account — for example, a customer who only approved or rejected an Extra through a public link — or you have any other question about your data, contact Nyxelus using the details on this site.
6. Security
Login uses a secure session cookie; passwords are never stored in plain text; evidence photos are stored privately, not publicly; every request is checked against the signed-in user's own account and organization.
8. Changes to this notice
If Nyxelus materially changes how it handles your data, this notice will be updated and the date below will change.