Privacy Policy

1. Introduction

At Nimbus, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Nimbus is operated by Iron Cortex LTD (Reg. No: 16889774), registered at Academy House 11 Dunraven Place, Bridgend, Mid Glamorgan, CF31 1JF, United Kingdom. Questions about this Privacy Policy: support@nimbus.expert.

This is everything the product collects, where it is collected and why:

• Email address, name (optional) and password (stored only as a hash) (Sign-up): To create and secure your account.
• One-time sign-in codes sent to your email, with the IP address that asked for them (Email-code sign-in and sign-up): To sign you in and to limit abuse.
• IP address and the country it resolves to (Sign-up and checkout): To refuse sign-ups and payments from sanctioned countries and to detect fraud.
• Card number, expiry, security code, cardholder name and billing address (Checkout): Passed over an encrypted connection to our payment processor to take the payment; we do not store the card number or security code.
• Credit purchases, spending and returns (Whenever your balance changes): To keep your wallet and billing history.
• Project descriptions, generated code, tasks and the name of the code repository you connect (When you use the product): To build and deliver your code.
• Messages you send us through the contact form or by email (When you contact us): To answer you.
• Expert Developers: display name, bio, skills, quiz answers, test-task submission, and bank details with a supporting bank document (Expert Developer application and payout set-up): To review the application and to pay you.

We do not ask for a phone number, a date of birth or an identity document, and we do not use analytics or advertising trackers. The cookies we set are listed in our Cookie Policy.

Payment Card Data

We do not store your card number or security code. They pass over an encrypted (HTTPS) connection through our servers to our payment processor, which takes the payment. Only the last 4 digits of the card appear in our records.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and manage your account
• Send you technical notices and support messages
• Respond to your comments and questions
• Develop new features and services
• Detect and prevent fraud and abuse
• Comply with legal obligations

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Service providers: our hosting and database provider, our payment processor, our email delivery provider and our AI model provider, each only for the service it performs for us
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly consent to sharing

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption in transit (HTTPS)
• Access controls and authentication
• Secure infrastructure and monitoring

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your information only for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy, and no longer. Our retention periods by category are:

• Account, wallet, billing history, projects and tasks: for the life of your account. Deleting your account in Settings erases them immediately and permanently; ask us for any refund of unused credits before you delete it
• One-time sign-in codes: stored only as a hash, and unusable once used or expired
• Server logs: kept by our hosting provider for a short rolling period, then deleted
• Emails to support: in our support mailbox for up to 24 months

Our payment processor keeps its own record of each payment, as the law requires it to.

Where your data is stored: our primary database and application infrastructure are hosted in the United States. If you are located in the United Kingdom or the European Economic Area, using the Service means your personal data is transferred to and processed in the United States. Where required, we rely on appropriate safeguards for that transfer, such as the UK International Data Transfer Addendum or EU Standard Contractual Clauses, incorporated into our agreements with our infrastructure providers.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access and receive a copy of your data
• Correct inaccurate information
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Withdraw consent

To exercise these rights, please contact us at support@nimbus.expert

8. Cookies and Tracking

Every cookie we set is a Necessary cookie (to keep you signed in, protect the sign-in form and remember your currency). Each one is listed in our Cookie Policy.

9. Children's Privacy

Our Service is not intended for anyone under 18 years of age, matching the age requirement in our Terms of Service. We do not knowingly collect personal information from children.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Data Controller

The data controller is Iron Cortex LTD.

Iron Cortex LTD
Reg. No: 16889774
Academy House 11 Dunraven Place,
Bridgend, Mid Glamorgan, CF31 1JF, United Kingdom

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: support@nimbus.expert