Privacy Policy

1.1The data controller is Nido, responsible for the platform at app.nido.global and the site at www.nido.global.

1.4Until the officer's channel is published, requests concerning personal data should be sent to nidocontact@proton.me.

2.1This policy covers:

• Creators — those who open an account to join campaigns, submit content, and get paid.
• Companies — those who commission campaigns, fund them, and track results.
• Partner applicants — those who apply at /partners without necessarily opening an account.
• Job applicants — those who apply at /careers.
• Sales contacts — those who fill in the contact form on the landing page.
• Newsletter subscribers and site visitors.

2.2When a company uses Nido to run a campaign, it also processes participating creators' data on its own account. In that relationship the company is the controller of what it collects directly, and Nido is not answerable for what it does with that data outside the platform.

3.1Account and identification. Username, email, password (stored only as a hash), account type, email verification status, and language.

3.2Third-party identities you connect. When you sign in with X (Twitter), Google, Discord, Instagram, or TikTok, the provider gives us the account identifier, username, display name, profile picture and, for X, whether the profile is verified and its follower count. Creator sign-in works this way, through Privy.

3.3Creator profile. Information you fill in yourself: description, primary language and fluency, audience region and size, average views, content categories and formats, example links, crypto and trading experience, blockchain networks you work with, preferred protocols, and investment participation style.

3.4Tax and address data. Brazilian tax ID (CPF or CNPJ), phone, postcode, street, number, unit, district, city, and state. These are required for payment and the tax obligations that come with it. City and state may appear on your public profile as a region; your tax ID and full address do not.

3.5Payment data. PIX key, key type, account holder name and tax ID, plus any wallet addresses you register or that the platform creates for you on EVM, Solana, Sui, and Stellar networks. We also keep the history of deposits, withdrawals, transfers, and campaign payouts.

3.6Identity verification (KYC). To use PIX, the payment provider requires verification that may include an identity document, a selfie, and a liveness check. That collection happens in the provider's own environment; Nido receives and stores only the session identifier and the outcome (approved, pending, rejected, expired), not the images.

3.7Content and deliverables. Post links, submitted text, files, clips, and proof of work you submit to campaigns, plus comments and any avatar you upload.

3.8Performance metrics. Public data about your posts — views, likes, comments, shares — collected from the originating platforms by measurement services, and clicks on the tracked links Nido generates to attribute conversions.

3.9Communications on the platform. Community messages, announcements, notifications, and direct messages between company and creator. Direct messages are stored and are accessible to the participants in the conversation and to Nido's administrators.

3.10Applications. At /partners: name, email, WhatsApp, location, entity type, niche, networks and follower counts, posting frequency, campaign history, screenshots of your private network analytics, portfolio, availability, and motivation. At /careers: name, email, WhatsApp, city, LinkedIn, X, experience, languages, case answer, availability, and your CV file.

3.11Sales contact. Company details, website, sector, the name and role of the person speaking, email, WhatsApp, conversion definition, customer value, attribution method, intended monthly spend, and timeline.

3.12Newsletter. Email address and, where applicable, the signup source and the confirmation and unsubscribe tokens.

3.13Technical and usage data. IP address, browser and device type, pages visited, time on screen, clicks, and navigation events. Part of this depends on your consent — see section 9.

3.14We do not intentionally collect sensitive data as defined in art. 5, II of the LGPD. If you write information of that nature into a free-text field — motivation, message, case answer — it will be handled as part of that content; please avoid including it.

4.1Authentication and wallets. Privy, which operates social sign-in and custodial wallets; WalletConnect, when you connect your own wallet.

4.2Payments and verification. 4pFinance and PagFinance, which process PIX and identity verification; Circle, for moving stablecoins between networks. They receive the data required for payment, including your tax ID and PIX key.

4.3Infrastructure. Vercel (site hosting), Neon (database), Upstash (cache), Amazon Web Services (storage for uploaded files), and Google Workspace, which delivers transactional email.

4.4Audience measurement. PostHog and Google Analytics, subject to your consent. Apify and API providers for X, Instagram, TikTok, and YouTube, used to collect public post metrics. Short.io, for link shortening and click statistics.

4.5Anti-fraud. Google reCAPTCHA, on sensitive forms.

4.6Artificial intelligence. The platform assistant is run by a Nido service that uses OpenAI models. What you type into the conversation is sent to that service. Do not use the assistant to process other people's personal data.

4.7Discord. When a campaign or community requires server membership, we ask Discord whether your account is a member. Nido's internal notifications may also be sent to the team's private channels.

4.8Publication of the on-chain ledger. Nido publishes blockchain transaction data as a dataset to Dune Analytics, used in public dashboards evidencing volume. That data is transactional and already public on the network itself, but publishing makes it easier to query.

4.9Authorities. Where there is a legal obligation, court order, or request from a competent authority.

5.1Some of the services above are outside Brazil — there are providers in the United States and the European Union. This means your data may be processed in those countries.

5.2The transfer takes place because it is necessary to perform the service you engaged and to protect credit in payment operations, under art. 33 of the LGPD.

6.1Payments settled on public blockchain networks create a permanent, public, irreversible record containing wallet addresses, amounts, and timestamps.

6.2Nido cannot alter or erase that record. The right to erasure under the LGPD does not reach what is written to a public network, and no request made to Nido changes that.

6.3A wallet address does not carry your name, but it is a persistent identifier: anyone who links that address to other information about you can associate it with you. Bear that in mind when choosing the wallet you get paid to.

7.1We decide automatically:

• The scoring and ranking of content submissions, based on performance metrics;
• Eligibility for a reward and the amount owed on a campaign;
• Detection of fraudulent or automated activity, which may lead to account suspension and funds being held for investigation;
• Initial qualification of sales contacts, from the form answers;
• Access to features in testing, by allowlist.

7.2To request human review of any of these, write to nidocontact@proton.me describing the case.

8.1We use cookies and local storage that are necessary to operate — session, language, preferences — which do not require consent because the service does not work without them.

8.2Audience measurement and usage analysis only begin after you allow them, through the notice shown on your first visit. You can change that choice at any time in the same notice.

8.3Declining measurement does not limit any platform feature.

9.1Account and profile data is kept for as long as the account exists.

9.2Email verification and password reset codes are deleted 30 days after they expire. Notifications already read are deleted after 90 days.

9.3Records of payments, deposits, withdrawals, and the corresponding financial logs are kept as an audit trail for the period required by tax and company law, even after an account is closed.

9.4Job and partnership applications are kept while there is interest in the ongoing selection process, and can be deleted on request.

9.5Once the purpose is exhausted and legal retention periods have passed, data is deleted or anonymised. Blockchain records follow section 6.

10.1You may request:

• Confirmation that we process your data, and access to it;
• Correction of incomplete, inaccurate, or out-of-date data;
• Anonymisation, blocking, or deletion of data that is unnecessary, excessive, or processed unlawfully;
• Portability to another provider;
• Deletion of data processed on the basis of your consent;
• Information about who we share your data with;
• Information about your option to withhold consent and what follows from that;
• Withdrawal of consent;
• Review of an automated decision, under section 7.

10.2To exercise any of these, write to nidocontact@proton.me. We will reply within 15 days and may ask for further information to confirm the request is yours.

10.3Deletion requests are currently handled through that channel, manually. Some data cannot be deleted on request: what Nido must keep by law (section 9.3) and what is already written to a blockchain (section 6).

10.4You may also complain to Brazil's National Data Protection Authority (ANPD).

11.1Passwords are stored only as hashes, never in clear text. Traffic is encrypted in transit, and uploaded files are held in private storage and served through temporary links.

11.2Administrative access is limited to those who need it to operate the platform.

11.3No measure removes risk entirely. If a security incident occurs with relevant risk to data subjects, we will notify those affected and the authority, as art. 48 of the LGPD requires.

12.1The platform is intended for people aged 18 and over and is not intended for children or adolescents. We do not intentionally collect minors' data.

12.2If you learn of a minor's data having been submitted to the platform, tell us at nidocontact@proton.me so it can be deleted.

13.1This policy may be updated when the service changes or the law requires it. The version and date of the last update are at the top of this page.

13.2A change that materially alters how we process your data will be communicated through the platform or by email before it takes effect.