Privacy Policy

1. Data Controller

Nubri GmbH, Liebenowzeile 22, 12167 Berlin, Germany.
Email: info@nubri.co

2. Data We Collect

• Account data: email address, name, hashed password.
• Campaign data: product descriptions, generated content, scheduled posts.
• OAuth tokens: social media access tokens (encrypted at rest with AES-256-GCM).
• Payment data: processed by Stripe — we do not store card details.
• Usage data: IP addresses, browser fingerprints (for rate limiting), server logs.

3. Purpose & Legal Basis

We process data to provide the LaunchPad service (Art. 6(1)(b) GDPR — contract performance), for security and abuse prevention (Art. 6(1)(f) GDPR — legitimate interest), and with your consent where applicable (Art. 6(1)(a) GDPR).

4. Third-Party Processors

• Amazon Web Services (hosting, AI generation) — US, EU Standard Contractual Clauses
• Stripe (payment processing) — US, EU SCCs
• Neon (PostgreSQL database hosting) — US, EU SCCs
• Social media platforms (when you connect accounts) — per their respective policies

5. Data Retention

Account and campaign data is retained while your account is active. Upon deletion request, all personal data is removed within 30 days. Anonymized analytics may be retained for service improvement.

6. Your Rights (GDPR)

You have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. To exercise these rights, contact info@nubri.co.

7. Cookies & Local Storage

We use only essential storage: an authentication token in browser localStorage. No tracking or advertising cookies are used. Browser fingerprints are used solely for rate limiting the free trial and are not linked to your identity.

8. Security

We protect your data with TLS encryption in transit, AES-256-GCM encryption at rest for sensitive tokens, bcrypt-hashed passwords, and strict access controls.

9. Contact

For privacy inquiries: info@nubri.co