Privacy Policy

1. Introduction and Overview

Welcome to Nebula Protocol ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cloud earning platform, mobile applications, and related services (collectively, the "Services").

Nebula Protocol operates as a cloud earning platform that enables users to earn NEB cryptocurrency tokens through mobile device participation. We understand that privacy is fundamental to building trust in the digital economy, which is why we have designed our systems with privacy protection as a core principle.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

2.1 Information You Provide Directly

When you register for an account, complete identity verification, or interact with our Services, you may provide us with the following types of information:

• Account Information: Email address, username, password, and referral codes used during registration
• Profile Information: Display name, profile picture, and language preferences
• Identity Verification (KYC): Full legal name, date of birth, nationality, phone number, government-issued identification documents (passport, driver's license, or national ID), and a selfie photograph for liveness verification
• Financial Information: External cryptocurrency wallet addresses for token withdrawals and payment information for presale purchases
• Communication Data: Messages sent through our in-app chat feature and correspondence with our support team

2.2 Information Collected Automatically

When you use our Services, we automatically collect certain information, including:

• Device Information: Device type, operating system, unique device identifiers, mobile network information, and app version
• Usage Data: Mining session start and end times, staking activities, transaction history, feature usage patterns, and interaction logs
• Location Data: General geographic location based on IP address (we do not collect precise GPS location unless explicitly required for specific features)
• Technical Data: IP address, browser type and version, time zone settings, and crash reports

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Identity verification service providers who help confirm your identity documents
• Fraud prevention and security service providers
• Analytics providers that help us understand app usage patterns
• Payment processors for presale transactions

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To create and manage your account, process mining rewards, execute staking operations, and facilitate peer-to-peer transactions
• Identity Verification: To verify your identity for KYC compliance, prevent fraud, and ensure the integrity of our platform
• Security: To protect against unauthorized access, detect and prevent fraudulent activity, and maintain the security of our platform
• Communication: To send you service notifications, mining session reminders, security alerts, and respond to your inquiries
• Improvement: To analyze usage patterns, troubleshoot issues, and improve our Services
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Personalization: To customize your experience, including language preferences and notification settings

4. Data Storage and Security

We take the security of your personal information seriously and implement industry-standard measures to protect it:

• Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption
• Secure Infrastructure: Our systems are hosted on enterprise-grade cloud infrastructure with regular security audits
• Access Controls: Strict role-based access controls limit who can access personal data within our organization
• Wallet Security: Your recovery phrase is encrypted client-side and never transmitted to our servers in plaintext
• Document Security: KYC documents are watermarked, encrypted, and automatically deleted after verification is complete (within 30 days)

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously monitor and update our security practices.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specific retention periods include:

• Account Data: Retained for the duration of your account and up to 3 years after account deletion for legal and regulatory purposes
• KYC Documents: Deleted within 30 days after successful verification; retained up to 5 years if required by anti-money laundering regulations
• Transaction Records: Retained for 7 years for tax and regulatory compliance
• Usage Logs: Retained for up to 12 months for security and troubleshooting purposes

6. Third-Party Services

We work with trusted third-party service providers who assist us in operating our platform. These providers are contractually obligated to protect your data and may only use it for the specific purposes we authorize:

• SMS Verification: Twilio for phone number verification and OTP delivery
• AI Document Verification: Google AI services for automated document analysis and liveness detection
• Cloud Hosting: Enterprise cloud providers for secure data storage and processing
• Payment Processing: Stripe for secure credit card processing during presale
• Push Notifications: Firebase Cloud Messaging for mobile notifications
• Analytics: Privacy-focused analytics to understand usage patterns without tracking individuals

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements
• Right to Portability: Request transfer of your data in a machine-readable format
• Right to Object: Object to processing of your personal data in certain circumstances
• Right to Withdraw Consent: Withdraw consent for data processing where consent was the legal basis
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise any of these rights, please contact us at nebulaprotocolcloud@gmail.com with your request. We will respond within 30 days.

8. Cookies and Tracking Technologies

Our web application and mobile apps may use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for authentication and basic functionality
• Preference Cookies: Remember your settings like language and theme preferences
• Analytics Cookies: Help us understand how users interact with our Services

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses approved by relevant data protection authorities and compliance with applicable data protection frameworks.

10. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will take steps to delete such information from our systems.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for the latest information on our privacy practices.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: