Privacy Policy

Effective Date: 5/22/25

Thank you for visiting the website(s) (the “Sites”) owned and operated by Nebulock, Inc. (“Nebulock”). At Nebulock, we take your privacy seriously. Please read this Privacy Policy to learn how we treat your personal data.

By using or accessing our Sites in any manner, you acknowledge that you accept the practices and policies outlined below, and you hereby consent that we will collect, use and disclose your information as described in this Privacy Policy.

Remember that your use of Nebulock’s Sites is at all times subject to our Terms of Use, which incorporate this Privacy Policy. Any terms we use in this Policy without defining them have the definitions given to them in the Terms of Use.

As we continually work to improve our Sites, we may change this Privacy Policy from time to time. We will alert you of material changes by placing a notice on the Nebulock website, by sending you an email, and/or by some other means. Please note that if you’ve opted not to receive legal notice emails from us (or haven’t provided us with your email address), those legal notices will still govern your use of the Sites, and you are responsible for reading and understanding them. If you use the Sites after any changes to the Privacy Policy have been posted, you agree to all of the changes.

Privacy Policy Table of Contents

  • What this Privacy Policy Covers
  • Personal Data
    • Categories of Personal Data We Collect
    • Our Commercial or Business Purposes for Collecting Personal Data
    • Other Permitted Purposes for Processing Personal Data
    • Categories of Sources of Personal Data
  • How We Disclose Your Personal Data
  • Tracking Tools, Advertising and Opt-Out
  • Data Security
  • Personal Data of Children
  • State Law Privacy Rights
  • European Union, United Kingdom, and Swiss Data Subject Rights
  • Contact Information

What this Privacy Policy Covers

This Privacy Policy covers how we treat Personal Data that we gather when you access or use our Sites. “Personal Data” means any information that identifies or relates to a particular individual and also includes information referred to as “personally identifiable information,” “personal information,” or “sensitive personal information” under applicable data privacy laws, rules, or regulations. This Privacy Policy does not cover the practices of companies we don’t own or control or people we don’t manage.

Personal Data

Categories of Personal Data We Collect

This chart details the categories of Personal Data that we collect and have collected over the past 12 months:

Category of Personal Data (and Examples) Business or Commercial Purpose(s) for Collection Categories of Third Parties With Whom We Disclose this Personal Data
Profile or Contact Data such as first and last name, email, phone number, and unique identifiers.
  • Providing, customizing, and improving the Sites and our services
  • Marketing the Sites and our services
  • Corresponding with you
  • Service Providers
  • Advertising Partners
Device/IP Data such as IP address, device ID, domain server, and type of device/operating system/browser used to access the Sites.
  • Providing, customizing, and improving the Sites and our services
  • Marketing the Sites and our services
  • Corresponding with you
  • Service Providers
  • Advertising Partners
Web Analytics such as web page interactions, referring webpage/source through which you accessed the Sites, non-identifiable request IDs, and statistics associated with the interaction between device or browser and the Sites.
  • Providing, customizing, and improving the Sites and our services
  • Marketing the Sites and our services
  • Corresponding with you
  • Service Providers
  • Advertising Partners
Other Identifying Information You Voluntarily Provide such as emails, letters, texts, or other communications you send us.
  • Providing, customizing, and improving the Sites and our services
  • Marketing the Sites and our services
  • Corresponding with you
  • Service Providers
  • Advertising Partners

Our Commercial or Business Purposes for Collecting Personal Data

  • Providing, Customizing and Improving the Sites
    • Providing you with the products, services or information you request
    • Meeting or fulfilling the reason you provided the information to us
    • Providing support and assistance for the Sites
    • Improving the Sites, including testing, research, internal analytics and product development
    • Personalizing the Sites, website content and communications based on your preferences
    • Fraud protection, security and debugging
  • Marketing
    • Marketing and selling the Sites and our products and services
    • Showing you advertisements, including interest-based, online behavioral or targeted advertising
  • Corresponding with You
    • Responding to correspondence that we receive from you, contacting you when necessary or requested, and sending you information about the Company or the Sites
    • Sending emails and other communications according to your preferences

Other Permitted Purposes for Processing Personal Data

Each of the above-referenced categories of Personal Data may be collected, used, and disclosed to government authorities, including law enforcement, or other parties to meet legal requirements and enforce legal terms, including: fulfilling our legal obligations under applicable law, regulation, court order or other legal process; preventing, detecting and investigating security incidents and illegal activities; protecting the rights, property or safety of you, Nebulock or another party; enforcing agreements with you; responding to claims that any content violates third-party rights; and resolving disputes.

We will not collect additional categories of Personal Data or use the Personal Data we collect for materially different, unrelated or incompatible purposes without providing you notice or obtaining your consent.

Categories of Sources of Personal Data

We collect Personal Data about you from the following sources:

  • You
    • When you provide such information directly to us:
      • Voluntarily providing information in free-form text boxes through the Sites or through surveys or questionnaires
      • Sending us an email or otherwise contacting us
    • When you use the Sites and information is collected automatically:
      • Through Cookies (defined in the “Tracking Tools, Advertising and Opt-Out” section below)
      • If you use a location-enabled browser, we may receive information about your location and mobile device, as applicable
  • Third Parties
    • Vendors
      • Analytics providers to analyze how you interact and engage with the Sites or to provide customer support
      • Vendors to obtain information to generate leads and create user profiles
    • Advertising Partners
      • We receive information from vendors who assist us with marketing or promotional services related to how you interact with our websites, applications, products, Sites, advertisements or communications

How We Disclose Your Personal Data

We disclose your Personal Data to the categories of service providers and other parties listed below. Depending on state laws that may be applicable to you, some of these disclosures may constitute a “sale” of your Personal Data. For more information, please refer to the state-specific sections below.

  • Service Providers: parties that help us provide the Sites or perform business functions on our behalf, including:
    • Hosting, technology and communication providers
    • Security and fraud prevention consultants
    • Support and customer service vendors
    • Analytics providers regarding web traffic or usage
  • Advertising Partners: parties that help us market our services and provide offers that may be of interest to you, including:
    • Ad networks
    • Marketing providers

Legal Obligations

We may disclose any Personal Data that we collect with third parties in conjunction with any activities set forth under the “Other Permitted Purposes for Processing Personal Data” section above.

Business Transfers

All of your Personal Data that we collect may be transferred to a third party if we undergo a merger, acquisition, bankruptcy, or other transaction in which that third party assumes control of our business (in whole or in part).

Data that is Not Personal Data

We may create aggregated, de-identified or anonymized data from the Personal Data we collect by removing information that makes the data personally identifiable to a particular user. We may use and disclose such data for lawful business purposes, including analyzing, building and improving the Sites and promoting our business, provided we do not disclose it in a manner that could identify you.

Tracking Tools, Advertising, and Opt-Out

The Sites use cookies and similar technologies such as pixel tags, web beacons, clear GIFs and JavaScript (collectively, “Cookies”) to enable our servers to recognize your web browser, track how and when you visit and use our Sites, analyze trends, learn about our user base and operate and improve our Sites. Cookies are small text files placed on your device when you access our Sites. We may also supplement information we collect from you with data from third parties, including those that place their own Cookies on your devices.

Please note that because of our use of Cookies, the Sites do not support “Do Not Track” requests sent from browsers at this time.

We use the following types of Cookies:

  • Essential Cookies: required for providing requested features or services. Disabling these may make certain features unavailable.
  • Functional Cookies: record your choices and settings to maintain preferences and personalize content when you return to our Sites.
  • Performance/Analytical Cookies: understand how visitors use our Sites by collecting data on page interactions and measure advertising performance.
  • Retargeting/Advertising Cookies: collect data about your online activity and interests to provide relevant advertisements. See the “Information about Interest-Based Advertisements” section below.

You can decide whether to accept Cookies through your browser’s settings. Most browsers allow you to turn off Cookies, prevent acceptance of new Cookies, or delete existing Cookies. If you disable or delete Cookies, you may have to adjust preferences each time you visit, and some functionalities may not work.

To explore Cookie settings or modify your preferences, use the Cookie management settings on the Sites. For more information about Cookies and how to manage them, visit All About Cookies or ICO Cookies Guidance if you are located in the European Union.

Information about Interest-Based Advertisements

We may serve advertisements and allow third-party ad networks, ad servers, ad agencies, ad technology vendors and research firms to serve advertisements through the Sites. These may be targeted to users who fit certain profile categories or behaviors (“Interest-Based Ads”). Information for Interest-Based Ads may be provided by you or derived from usage patterns across the Sites and third-party services when you leave the Sites. To accomplish this, we or our service providers may deliver Cookies, including web beacons, from ad networks. Web beacons enable ad networks to provide anonymized, aggregated auditing, research and reporting and to serve targeted advertisements when you visit other websites. They also allow ad networks to view, edit or set their own Cookies on your browser as if you had requested a page from their site.

Data Security

We seek to protect your Personal Data from unauthorized access, use and disclosure using appropriate physical, technical, organizational and administrative security measures based on the type of Personal Data and processing. You should also protect your data by using strong passwords, limiting access to your devices and signing off after accessing your account. Although we work to protect your account and data, no method of transmitting or storing data is completely secure.

Data Retention

We retain Personal Data about you for as long as necessary to provide our Sites or to fulfill the business or commercial purposes for which we collected it. When establishing retention periods, we consider who provided the data, our need for it, why we collected it, and its sensitivity. In some cases, we retain Personal Data longer to comply with legal obligations, resolve disputes or collect fees owed. We may further retain data in anonymous or aggregated form when it no longer identifies you personally.

For example:

  • We retain device/IP data for as long as needed to ensure our systems operate effectively and efficiently.

Personal Data of Children

As noted in the Terms of Use, we do not knowingly collect or solicit Personal Data from children under 16 years of age. If you are under 16, please do not attempt to register for or use the Sites or send us any Personal Data. If we learn we have collected data from a child under 16, we will delete it as quickly as possible. If you believe a child under 16 may have provided Personal Data, please contact us at info@nebulock.io.

State Law Privacy Rights

California Resident Rights

Under California Civil Code Sections 1798.83–1798.84, California residents can contact us to prevent disclosure of Personal Data to third parties for direct marketing purposes. To submit such a request, contact us at info@nebulock.io.

Your browser may offer a “Do Not Track” option to signal you do not wish to be tracked online. Our Sites do not support Do Not Track requests at this time. To learn more about “Do Not Track,” visit All About DNT.

Nevada Resident Rights

We do not currently sell your Personal Data as defined by Nevada Revised Statutes Chapter 603A.

European Union, United Kingdom, and Swiss Data Subject Rights

EU and UK Residents

If you are a resident of the European Union (EU), United Kingdom (UK), Liechtenstein, Norway, or Iceland, you may have additional rights under the EU or UK General Data Protection Regulation (GDPR). For this section, “Personal Data” and “processing” have the meanings defined in the GDPR.

Nebulock is the controller of your Personal Data processed in connection with the Sites. If there are conflicts between this section and any other provision of this Privacy Policy, the provision that is more protective of Personal Data controls. If you have questions or believe any provision applies to you, contact us at info@nebulock.io. Note that we may process Personal Data of our customers’ end users or employees on behalf of our customers, in which case we act as a processor. If we are the processor, please contact the controller to address your rights.

Personal Data We Collect

See the “Categories of Personal Data We Collect” section above for details about the Personal Data we collect.

Personal Data Use and Processing Grounds

See the “Our Commercial or Business Purposes for Collecting Personal Data” section above for how we use your Personal Data. We will only process Personal Data if we have a lawful basis, such as contract, consent or legitimate interest.

  • Contractual Necessity: We process certain Personal Data to perform under our Terms of Use with you, enabling us to provide the Sites. Failure to provide this data may prevent you from using portions of the Sites that require it.
  • Legitimate Interest: We process certain Personal Data when it furthers the legitimate interest of us or third parties:
    • We may de-identify or anonymize Personal Data to further our legitimate interests.
  • Examples of Legitimate Interests:
    • Providing, customizing, and improving the Sites
    • Marketing the Sites
    • Corresponding with you
    • Meeting legal requirements and enforcing legal terms
    • Completing corporate transactions
  • Consent: We process Personal Data based on your consent when expressly granted at the time of collection. When based on consent, it will be clearly indicated to you.
  • Other Processing Grounds: We may process Personal Data to comply with legal obligations, protect vital interests of data subjects, or perform tasks in the public interest.

Disclosing Personal Data

See the “How We Disclose Your Personal Data” section above for details on disclosures.

Your EU, UK and Swiss Rights

You have the following rights with respect to your Personal Data. To exercise rights, email us at info@nebulock.io. We may not comply if requests are frivolous or impractical or jeopardize others’ rights, but we will notify you of our decision. We may need additional information to verify your identity and request.

  • Access: Request more information about Personal Data we hold and receive a copy. You can also access certain data by logging into your account.
  • Rectification: Request correction or supplementation of incorrect or incomplete data. You can correct some information directly by logging into your account.
  • Erasure: Request deletion of some or all of your Personal Data from our systems.
  • Withdrawal of Consent: If processing is based on consent, you can withdraw it. If you do, you may need to provide consent again to use certain parts of the Sites.
  • Portability: Ask for a copy of your Personal Data in a machine-readable format and request transmission to another controller where technically feasible.
  • Objection: Object to further use or disclosure of your Personal Data for certain purposes, such as direct marketing.
  • Restriction of Processing: Request restriction on further processing of your Personal Data.
  • Right to File a Complaint: Lodge a complaint with the supervisory authority of your country or EU Member State. List of Supervisory Authorities: Supervisory Authorities.

Transfers of Personal Data

The Sites are hosted and operated in the United States by Nebulock and its service providers. If you do not reside in the U.S., laws in the U.S. may differ from those where you reside. By using the Sites, you acknowledge that any Personal Data about you is transferred to and processed in the U.S. and possibly other countries. In some cases, transfers to the U.S. occur under a data processing agreement with standard data protection clauses.

Contact Information

If you have any questions or comments about this Privacy Policy, the ways we collect and use your Personal Data, or your choices and rights regarding such collection and use, please contact us at:

  • Phone: +1 (650) 233-8271
  • Email: info@nebulock.io
  • Address: 131 Dartmouth Street, Floor 3, Office 83, Boston, MA 02116