NebuList Privacy Policy

Updated on August 1st, 2021

NebuList's Privacy Policy describes how NebuList collects, uses, and shares your personal data.

What Does NebuList Consider Personal Data?

At NebuList, we believe that your privacy rights should not differ depending on where you live in the world. That's why we regard any data that relates to an identified or identifiable individual or that is linked or linkable to them by NebuList as "personal data", no matter where the individual lives. This means that data which directly identifies you - such as name or address - and data that indirectly identifies you, which can reasonably be used to identify you - such as a device identifier or phone number - is personal data. Anonymized or Aggregate Data will be considered non-personal for the purposes of this Privacy Policy.

If NebuList links you to a third party service this Privacy Policy will not apply. This Privacy Policy does not, and cannot, determine how third parties define or use Personal Data. Please read their privacy policies and know your rights before interacting with them.

Your Privacy Rights with NebuList

NebuList respects your rights to know, access, retrieve, modify, restrict use of, and delete your personal data. These rights apply regardless of your geographic location. NebuList does not sell your data, including as "sale" is defined in Nevada and California.

To exercise your privacy rights as defined above, please make an appropriate request by sending an email to data-request@nebulist.app. To protect the security of your personal data, you will be required to identify yourself and your identity will be verified.

It is possible there will be circumstances that will not allow you to exercise these rights. For example, some data such as transaction records must be kept for a period of time in order to comply with the law. We may also decline to grant a request where doing so would undermine our legitimate use of data for security purposes, such as when you request deletion of an account that is being investigated for security concerns. Other reasons your privacy request may be denied are if it jeopardizes the privacy of others, is frivolous or vexatious, or would be extremely impractical.

Personal Data NebuList Collects from You

We strive to collect only the personal data that we need. The personal data that will be collected depends on how you interact with NebuList. A variety of personal information might be collected, including:

User Content. Content that you enter directly when you are interacting with NebuList.
Account Information. Your account ID and related account details such as email address and devices registered.
Device Information. Details about your device and its current state may be requested, such as device identifier, or about your device, such as browser type.
Contact Information. Your contact details such as name, email address, phone number, or other related contact information may be requested.
Transaction Information. Details about purchases you make in NebuList, or transactions in NebuList facilitated by third party transaction managers, such as Apple, on behalf of NebuList.
Usage Data. Data about your interactions with NebuList including features of NebuList that you interact with and how you interact with them; crash data; performance and other diagnostic data; and other usage data.
Location Information. Coarse location data to support features such as location-based reminders, at your request.

You are not required to provide the personal data that NebuList may request. However, if you choose not to do so, it may not be possible in many cases for NebuList to provide you with the features and services that it offers.

Personal Data NebuList Collects from Other Sources

NebuList may receive personal data about you from other individuals or from our business partners who work with us to provide our products and services, and from other lawful sources.

Individuals. Other individuals may share content with you in which case they would need to specify to NebuList who you are.
NebuList Business Partners. NebuList may use third party services in order to provide the features and services of NebuList; for analytics or other usage data in order to improve NebuList.

NebuList's Use of Personal Data

NebuList uses personal data to enable our services, to communicate with you, and to comply with the law. With your consent, we may also use personal data for other purposes.

NebuList uses your personal data only when we have a valid legal basis to do so. Depending on the circumstance, NebuList may rely on your consent or the fact that the processing is necessary to fulfill a contract with you, protect your vital interests or those of other persons, or to comply with the law. We may also process your personal data where we believe it is in our or others' legitimate interests, taking into consideration your interests, rights, and expectations.

Enable Our Services. NebuList collects personal data to enable the features and services it offers, which may include personal data collected to personalize or improve our offerings, for internal purposes such as analytics, or for diagnostics. For example, NebuList may collect data on your usage in order to make intelligent suggestions to you.
Communicate With You. To respond to your communications, reach out to you about your transactions or account, market our features and services, provide other relevant information, or request information or feedback. From time to time, we may use your personal data to send important notices about purchases and changes to our terms, conditions, and policies. Because this information is important to your interaction with NebuList, you may not opt out of receiving these important notices.
Comply With the Law. To comply with applicable law, for example, to satisfy tax or reporting obligations, or to comply with a lawful governmental request.

NebuList retains personal data only for the period of time necessary to fulfill the purposes for which it was collected, including as described in this Privacy Policy or as required by law. When assessing retention periods, we first carefully examine whether it is necessary to retain the personal data collected and, if retention is required, work to retain the personal data for the shortest possible period permissible under law.

NebuList's Sharing of Personal Data

NebuList may share personal data with service providers who act on our behalf or others when deemed reasonably necessary.

Service Providers. NebuList may engage third parties to act as service providers and perform some tasks on its behalf, such as storage and processing of data, including personal data, in connection with your use of its features and services. NebuList service providers are obligated to handle personal data consistent with this Privacy Policy and according to our instructions. They cannot use the personal data NebuList shares for their own purposes and must delete or return the personal data once they've fulfilled our requests.
Others. NebuList may share personal data with others at your direction or with your consent, such as when you choose to share your content with other individuals. We may also disclose information about you if we determine that for purposes of national or international security, law enforcement, or other issues of public importance, disclosure is deemed reasonably necessary or appropriate. We may also disclose information about you where there is a lawful basis for doing so, if we determine that disclosure is reasonably necessary to enforce our terms and conditions or to protect our operations or users, or in the event of a reorganization, merger, or sale.

How NebuList Protects Personal Data

To protect you and serve you as best we can, NebuList will always strive to use best practices and industry standards in order to keep your personal data safe. We use administrative, technical, and physical safeguards to protect your personal data, taking into account the nature of the personal data and the processing, and the threats posed. We are and will constantly work to improve on these safeguards to help keep your personal data secure.

Children and Personal Data

NebuList understands the great importance of keeping the personal data of children safe. That is why NebuList is not currently available to children, until we are able to implement proper and lawful safeguards for children, which we consider to be individuals under the age of 13 or the equivalent age as specified by law in your jurisdiction.

If we learn that we have collected a child's personal data, it will be deleted as soon as possible.

International Data Transfers

NebuList is an internet connected software service, which allows you to access your content from almost anywhere. To make that possible, your personal data may be transferred to or accessed from data servers around the world. NebuList complies with laws on the transfer of personal data between countries to help ensure your data is protected, wherever it may be.

NebuList's Commitment to Your Privacy

We understand how important privacy is and how easily it can be lost. That is why NebuList and those who work on it strive to ensure your privacy safeguards are upheld to the fullest. All employees are required to read this Privacy Policy, including all updated versions, and adhere to its content.

Questions, Feedback, and Complaints

If you have questions about NebuList's Privacy Policy or privacy practices, would like to contact our Data Protection Officer, or would like to provide a privacy complaint, please send an email to privacy@nebulist.app. We will do our best to assist you.

We will take your privacy correspondence seriously and will answer as quickly as is reasonable to appropriately handle your specific situation. If you provide a complaint which indicates that an improvement in our handling of privacy matters is warranted, we will work to make corrections to improve the issue at the next reasonable opportunity, taking the severity of the issue into account. In the event that a privacy issue has resulted in a negative impact on you or another person, we will work to rectify it with you or that other person.

If you are not satisfied with NebuList's response, you may refer your complaint to the applicable regulator. If you ask us, we will do our best to provide you with relevant information for your situation.

Updates to This Privacy Policy

It may occasionally be necessary to update this Privacy Policy, such as when legal or other circumstances change, or when we add or remove features or services. When there is a material change to this Privacy Policy, we'll post a notice on this website at least a week in advance of doing so and contact you directly with an email about the change if we have your email address on file.