Privacy policy

Last updated: 12 October 2026

Controller

Nube De Ideas Consulting (Tax ID B86209434), Calle Ramon Lujan, 38 Madrid. Privacy contact: nuby@nubedeideas.com.

What data we process

• Account: your email (or the basic data of your Google account if you sign in with Google: name, email and picture), language and where you came from (page and UTM parameters).
• Brands and campaigns: name, logo, colours, tone and audience of your brands; the web pages you give us and what we read from them; the photos you upload; and the generated content (texts, images, voice, carousels and videos).
• Connected social accounts: account id, name and avatar, its access tokens (encrypted), the posts you publish with Nuby and their statistics. We never see or store your Instagram, Facebook, TikTok or Google password.
• Payments: plan, subscription status and receipts. Your card details are processed directly by Stripe; we never see or store them.
• Support: the messages you send us.
• Technical data: security and error logs (IP address, browser, date) and cookies (see below).

Purposes and legal bases

• Providing the service you buy or try (generating, storing and publishing your content, billing and support): performance of the contract.
• Security, preventing abuse of the free trial and technical improvement of the service: legitimate interest.
• Optimisation cookies and marketing communications: your consent, which you can withdraw at any time.
• Legal obligations (tax and accounting): legal obligation.

Social networks: what we do with their data

We only publish the content that you approve or schedule, on the accounts you connect, and we show you the statistics (views, reach, likes, comments, shares, saves) of those posts. We never publish anything without your action, we do not read private messages or other users' data, and we do not use or share this data for advertising.

• Instagram and Facebook (Meta): you can request deletion from your Meta account settings; we receive the request automatically and delete that account's data.
• TikTok: we publish with the privacy level, interaction settings and commercial content disclosure you choose for each post, and the content is labelled as AI-generated.
• YouTube: Nuby uses the YouTube API Services to upload your reels as Shorts and read their statistics. By connecting your channel you agree to the YouTube Terms of Service, and Google processes your data under the Google Privacy Policy. You can revoke access at myaccount.google.com/permissions.

Limited Use of Google data: Nuby's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Processors acting on our behalf

They only receive the data they need for their task and are contractually bound to protect it:

• Google (Gemini): analysing the page and writing the copy and the script.
• fal.ai: image generation and enhancement.
• ElevenLabs: voice-over, if you choose it.
• Apify: reading public Instagram posts you give us as a reference.
• Chartmetric: public data of music artists, in artist campaigns.
• Amazon Web Services (European Union): video rendering.
• Stripe: payments and subscriptions.
• Mailgun (European Union): sending emails.
• Our hosting provider: the server that runs Nuby.

Some of these providers are based in the United States. Those transfers rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.

How long we keep it

• Your account, brand and campaign data, for as long as you keep your account.
• The intermediate images of each campaign are deleted 30 days after it finishes; the final carousel and video are kept while the campaign exists.
• Social network tokens are deleted when you disconnect the account, delete the brand or close your account.
• Receipts and billing data, for as long as the law requires (up to 6 years).
• To prevent abuse of the free trial we keep a fingerprint (hash) of the email that used it, even if you delete your account.

Your rights

You can request access, rectification, erasure, restriction or portability of your data, or object to its processing, by writing to the contact above, and close your account at any time. You can disconnect any network from Brands → Connected accounts. If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (AEPD) or your local authority.

Security

We use encrypted connections (HTTPS), keep social network tokens encrypted, restrict access to the data and make backups.

Cookies

Necessary (always on): keeping you signed in, protecting forms (CSRF), remembering your language and storing your cookie choice (nubi_consent, 13 months). The platform does not work without them.

Optimisation (only if you accept them): measuring in aggregate how Nuby is used (pages visited, steps completed, errors) to improve it. We do not use advertising cookies or sell your data.

You can change your choice at any time: cookie settings.

Minors

Nuby is a service for professionals and businesses. It is not intended for people under 18.

Changes

If we change this policy in a significant way, we will tell you by email or in the app before it applies.

Legal notice · Privacy · Terms