This Policy describes how Nebular collects, uses, shares, and protects your personal data, in compliance with Brazil's General Data Protection Law (LGPD — Law 13.709/2018) and applicable regulations. Please read carefully; by using our services you acknowledge having read and understood this Policy.
1. Data we collect
We collect data you provide when creating an account, purchasing services, or contacting us (name, tax ID, e-mail, phone, billing address). We also log technical data generated by your use of the platform — IP address, device type, browser, pages visited, access times, and activity logs. Payment data is processed by specialized partners; we do not store full card numbers on our servers.
2. Legal basis
We process your data based on: (i) contract execution or pre-contractual steps; (ii) compliance with legal or regulatory obligations; (iii) Nebular's legitimate interest where it does not override your rights; (iv) your consent where applicable, which can be withdrawn at any time.
3. Purposes
We use your data to provide and bill contracted services, authenticate access, offer technical support, issue tax documents, prevent fraud and security breaches, comply with legal obligations, send operational notices, and — with your consent — share news and promotions.
4. Sharing with third parties
We share only strictly necessary data with infrastructure providers (datacenters, CDN, backup), payment processors, authorities and courts upon valid legal order, and support partners. All third parties are contractually bound to preserve confidentiality and process data only for authorized purposes.
5. International transfers
Part of our infrastructure may operate in countries whose laws differ from Brazilian legislation, such as the United States and the European Union. When that happens, we adopt appropriate contractual safeguards and verify the level of protection of the receiving country, per article 33 of the LGPD.
6. Cookies and similar technologies
We use essential cookies (required for operation), functional (preferences like language and currency), analytics (aggregate usage), and — with consent — marketing cookies. You can manage them via the consent banner, the footer link, or your browser settings. See our Cookie Policy for details.
7. Data subject rights
LGPD grants you the right to confirm processing, access your data, correct incomplete or outdated information, request anonymization, blocking, or deletion, request portability, withdraw consent, and be informed about data sharing. We respond to requests within 15 calendar days.
8. Information security
We apply risk-proportionate technical and organizational measures — TLS 1.3 encryption in transit and at rest, strong authentication, least-privilege access control, environment segregation, encrypted daily backups, 24/7 monitoring, and periodic vulnerability testing. Staff receive privacy training and sign confidentiality agreements.
9. Data retention
Account data is retained during the contract term and for up to five years after termination, to comply with tax obligations and audits. Technical logs are retained for six months. Marketing data until consent is withdrawn. After these periods, data is anonymized or deleted.
10. Minors
Our services are intended for users aged 18 and over. We do not knowingly collect data from children or teenagers. If we become aware of collection without specific parental consent, we delete the records immediately.
11. Changes to this Policy
We may update this Policy periodically. Material changes will be communicated with at least 15 days' notice by e-mail or panel notification. The current version is always available on this page, with the last-updated date at the top.
12. Contact and Data Protection Officer
To exercise your rights, clarify doubts, or report incidents, contact our Data Protection Officer at contato@nebularws.com or WhatsApp +55 11 96978-9917. For unresolved issues, you may contact Brazil's National Data Protection Authority (ANPD).