Privacy Policy
Last updated: June 2026
Neo (neomefy.com) is operated by N R BARROS DA SILVA (trading as Twigo), CNPJ 48.045.202/0001-86, headquartered in Maceió, AL, Brazil. This policy explains what personal data we collect, why we collect it, and your rights under GDPR (EU Regulation 2016/679) and LGPD (Brazilian Law 13.709/2018).
What we collect
We collect only what is necessary to operate the service: your email address (account identifier), a one-way cryptographic hash of your password (never stored in plain text), and a profile photo if you choose to upload one. A session token is stored in a signed, HTTP-only browser cookie to keep you signed in. Your IP address and request metadata also appear in our server access logs.
Legal basis for processing
Email and password hash — contract performance (Art. 6(1)(b) GDPR / Art. 7(V) LGPD), as they are necessary to provide authentication. Session token and server logs — legitimate interest (Art. 6(1)(f) GDPR / Art. 7(IX) LGPD) for security and abuse prevention. Profile photo — your explicit consent (Art. 6(1)(a) GDPR / Art. 7(I) LGPD); uploading is voluntary and you may remove it at any time.
Cookie consent
When you first visit Neo, we display a consent notice. Clicking 'Accept & Continue' records your agreement: for signed-in users the timestamp is stored in our database alongside your account; for guests, a signed, HTTP-only browser cookie records it locally. Clicking 'Decline' stores only a decline flag in a browser cookie — no preference data is written to our database, and we do not track you beyond what is strictly necessary to provide the service (the authentication session cookie). You may revisit your choice at any time via 'Cookie settings' in the page footer. Consent and decline states expire after 12 months, after which we ask again.
Third-party processors
We use Brevo (formerly Sendinblue, France) to deliver transactional emails such as password-reset instructions. Your email address is shared with Brevo solely for this purpose, under a signed Data Processing Agreement. Market data is sourced from investing.com / streaming.forexpros.com; no personal data is transmitted to them.
Data retention
Your account data is kept for as long as your account is active. You may permanently delete your account at any time from your profile page, which erases your email, password hash, sessions, and profile photo from our systems. Server access logs are retained for up to 90 days and then purged automatically.
Your rights
You have the right to access, correct, erase, and receive a portable copy of your personal data, and to object to processing based on legitimate interest. Email privacy@neomefy.com to exercise any of these rights. We will respond within 15 days (LGPD) or one month (GDPR). If you are dissatisfied, you may contact the ANPD (Brazil) or the supervisory authority in your country (EU/EEA).
Contact
Data controller: N R BARROS DA SILVA (Twigo) · CNPJ 48.045.202/0001-86 · Maceió, AL, Brazil · privacy@neomefy.com