Privacy Policy

Data controller

Yotuway is operated by NEXUSVIBE S.L., NIF B70966650, C/Casas de Miravete No. 22A, Floor 4, Office 4, 28031 Madrid, Spain.

For privacy requests, contact gestion@nexusvibe.net.

Data we process

We process the information needed to operate a marketplace for buyers and independent sellers.

• Account data such as name, email address, profile image, preferred language, and account identifiers.
• Marketplace data such as listings, orders, messages, delivery details, returns, reviews, and seller compliance information.
• Technical and security data such as device, browser, IP address, session, fraud-prevention signals, and service logs.
• Payment and billing information required to process transactions and meet accounting or tax obligations. Full card details are handled by the relevant payment provider, not stored by Yotuway.

Google and Apple sign-in data

If you choose Google or Apple sign-in, the provider sends Yotuway the data you authorize, normally your provider account identifier, name, email address, and profile image where available. Yotuway never receives your Google or Apple password.

We use this data only to create or match your Yotuway account, authenticate you, maintain account security, prevent fraud, and provide support. We do not use Google or Apple account data for advertising, and we do not sell it.

Yotuway's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Purposes and legal bases

We process data to provide your account and marketplace services, complete transactions, keep the platform secure, respond to support requests, enforce marketplace rules, and comply with legal obligations.

The legal bases are performance of a contract, compliance with legal obligations, legitimate interests in security and service improvement, and consent where the law requires it.

Service providers and international transfers

We share data only when necessary with infrastructure, authentication, communications, payment, delivery, analytics, and professional service providers, or with authorities when legally required. These providers act under contractual and confidentiality obligations.

Where data is transferred outside the European Economic Area, we use an adequacy decision, standard contractual clauses, or another safeguard recognized by applicable data-protection law.

Retention, deletion, and your rights

We keep account and transaction data while your account is active and afterward only for the period required for security, tax, accounting, dispute, or other legal purposes. Data that is no longer required is deleted or anonymized.

You may request access, correction, deletion, restriction, objection, or portability by contacting gestion@nexusvibe.net. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD). Account deletion requests remain subject to legally required retention of transaction or compliance records.

Security and policy updates

We apply access controls, encryption in transit, audit logging, backups, and risk-based technical and organizational safeguards. No online service can guarantee absolute security.

We may update this policy when the service or legal requirements change. The current version and its effective date will always be published on this page.