Privacy Policy - Nebula Timekeeping

1) Summary

• We keep the information you provide so the Service can work (timekeeping, accounts, approvals, auditability, support).
• We do not sell your personal information.
• We do not share or release your information to third parties for their own use or marketing.
• We only disclose information in limited cases, like service providers who help us operate, legal requirements, security/abuse prevention, or a business transfer.

2) What This Policy Covers

This policy describes how we collect, use, store, and protect information when you use the Service, including when you create an account, enroll a business, add employees, record punches, request time off, or contact support.

3) Information We Collect

A. Information you provide

• Account details (name, email, username/handle, password credentials in protected form)
• Business details (business name, business tag/identifier, timezone, plan/subscription selections)
• Subscription and account billing details needed to administer Nebula Timekeeping Core and Nebula Timekeeping Plus, such as plan status, subscription status, billing-cycle dates, invoices, credits, active employee counts, prorated seat calculations, payment status, cancellation records, and payment processor customer or subscription identifiers.
• Payment card details are processed by a third-party payment processor, currently Stripe where enabled in the Service. Nebula does not intentionally store full payment card numbers, CVV codes, or full bank account numbers.
• Employee information you enter (names, employee numbers, job assignments, role permissions)
• Timekeeping data (punches, shift records, approvals, exceptions/corrections, audit notes)
• Time-off requests and related notes
• Messages you send to support or feedback channels

B. Information collected automatically

• Basic device and usage data needed for reliability and security (IP address, browser type, timestamps, request logs, error logs)
• Cookies or similar storage used for login/session and preferences (where applicable)

C. What we do not collect

• We do not use GPS tracking and we do not collect continuous location history as part of the Service.

4) How We Use Information

• Provide and operate the Service (clock in/out, approvals, dashboards, reporting)
• Administer free Core accounts and paid Plus subscriptions, including active employee limits, monthly base charges, additional-employee charges, prorations, invoices, payment status, upgrades, downgrades, and cancellations
• Maintain accuracy, auditability, and integrity of time records
• Authenticate users and enforce role-based access
• Detect, prevent, and respond to fraud, abuse, or security incidents
• Provide customer support, respond to requests, and improve reliability
• Comply with legal obligations and enforce our Terms

5) How We Store and Protect Information

We store information on systems designed to support secure operation of the Service. Nebula uses administrative, technical, and organizational safeguards designed to protect the Service and user information. Examples may include role-based access controls, authentication and session protections, password protection in non-readable form, monitoring and logging, backups, and limiting access to people or vendors who need it to operate or support the Service.

No online system is 100% secure. Users and Customers are responsible for using strong passwords, keeping devices and networks secure, and assigning appropriate internal access permissions.

6) Sharing and Disclosure (Important)

We do not sell your information.
We do not share your information with third parties for their own marketing or advertising purposes.

We only disclose information in these limited situations:

1. Service Providers (Processors): We may use vendors to host, store, process, secure, monitor, or support the Service. These may include cloud hosting, database/storage providers, payment processors, email delivery providers, security, logging, monitoring, or error-reporting tools, and customer support or feedback tools. Service providers may access information only as needed to provide services to Nebula, and they are expected to handle information under confidentiality, security, or data-processing obligations.
2. Legal and Safety: If required by law, subpoena, court order, or other valid legal process; or if necessary to protect the rights, safety, and security of Nebula, our users, or the public.
3. Security & Abuse Prevention: To investigate and help prevent spam, fraud, abuse, or security incidents.
4. Business Transfer: If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction (subject to this policy or a successor policy with comparable protections).

7) Data Retention

We keep information for as long as needed to provide the Service and for legitimate business purposes such as auditability, dispute resolution, enforcing agreements, and legal compliance.

If you request account deletion, we will delete or de-identify information where feasible. Deletion requests may be limited when information is part of timekeeping, payroll-related, audit, security, tax, dispute, or legal records, or when retention is needed for auditability, legal compliance, security, dispute resolution, backups, or legitimate operational needs.

Backup copies may take additional time to expire or be overwritten through ordinary backup cycles.

8) Your Choices and Rights

Depending on your relationship to the Service (business owner/admin vs. employee user) and where you live, you may have rights to:

• Access or receive a copy of your information
• Correct inaccurate information
• Request deletion (subject to retention limits above)
• Request information about how your data is used

To make a request, contact us using the details in Section 12.

9) Children’s Privacy

The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will take appropriate steps.

10) International Use

If you access the Service from outside the United States, your information may be processed and stored in the United States or other locations where our service providers operate, subject to this policy and applicable law.

11) Changes to This Policy

We may update this policy from time to time. If we make material changes, we will update the “Effective Date” and may provide additional notice within the Service or by email.

12) Contact Us

Nebula Advantages LLC