Privacy Policy

Your privacy is important to us. This policy explains how we handle your data.

📅 Last updated: February 1, 2026

1. Introduction

Welcome to NebulaOps ("Company", "we", "our", "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our server management platform and related services.

By using NebulaOps, you agree to the collection and use of information in accordance with this policy.

Key Point: We only collect information that is necessary to provide and improve our services. We never sell your personal data to third parties.

2. Information We Collect

Information You Provide Directly

  • Account Information: Name, email address, password, and billing information
  • Profile Information: Company name, job title, and profile picture
  • Server Connection Details: SSH credentials, API keys, and server addresses
  • Communication Data: Messages through our AI chat interface and support channels

Information Collected Automatically

  • Usage Data: How you interact with our platform and features you use
  • Device Information: Browser type, operating system, and IP address
  • Server Metrics: Performance data and logs from connected servers

3. How We Use Your Information

  • Provide Services: To operate and maintain the NebulaOps platform
  • Improve Our AI: To train and improve our AI models (using anonymized data)
  • Security: To detect and prevent security incidents
  • Communication: To send important updates and respond to support requests
  • Analytics: To understand usage and improve user experience

4. Data Security

We implement industry-standard security measures:

  • Encryption: All data encrypted in transit (TLS 1.3) and at rest (AES-256)
  • Access Controls: Strict role-based access and multi-factor authentication
  • Infrastructure: SOC 2 Type II certified data centers
  • Credential Storage: SSH keys encrypted using hardware security modules

5. Your Rights

You may have the following rights:

  • Access: Request a copy of your personal information
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your personal information
  • Portability: Request your data in a machine-readable format

Contact us at privacy@nebulaops.io to exercise these rights.

6. Cookies

  • Essential Cookies: Required for the platform to function
  • Analytics Cookies: Help us understand platform usage
  • Preference Cookies: Remember your settings

7. Third-Party Services

  • Cloud Infrastructure: AWS, Google Cloud Platform
  • Payment Processing: Stripe
  • Analytics: Mixpanel, Sentry
  • AI Services: OpenAI, Anthropic

8. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this policy:

  • Account Data: Retained for the duration of your account, plus 30 days after deletion request
  • Server Logs & Activity Data: Retained for 90 days, then automatically purged
  • Backup Data: Retained according to your configured backup schedule, up to 1 year maximum
  • Payment Records: Retained for 7 years as required by tax and accounting regulations
  • Support Communications: Retained for 2 years after resolution

You may request deletion of your data at any time by contacting privacy@nebulaops.io.

9. European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

  • Legal Basis for Processing: We process your data based on: (a) your consent, (b) performance of our contract with you, (c) compliance with legal obligations, and (d) our legitimate interests in operating and improving the Service
  • Data Transfers: Your data may be transferred to and processed in the United States. We use Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection
  • Your Rights: In addition to the rights listed in Section 5, you have the right to: restrict processing, object to processing based on legitimate interests, and lodge a complaint with your local supervisory authority
  • Data Protection Contact: For GDPR-related inquiries, contact privacy@nebulaops.io

10. California Users (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you
  • Right to Delete: You may request deletion of your personal information, subject to certain exceptions
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
  • Sale of Personal Information: We do not sell your personal information to third parties

To exercise your CCPA rights, contact us at privacy@nebulaops.io or write to us at our physical address.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

  • Email: privacy@nebulaops.io
  • Address: NebulaOps, Inc., 548 Market St, Suite 35000, San Francisco, CA 94104