Privacy policy.

Account email and organization details, when you sign up.

API keys, stored only as a digest. A key is shown once when it is created and cannot be read back afterwards.

Run data: the tasks you send, the steps the agent took, its answers, the citations behind them, and the artifacts a run produced.

Usage and billing records: what was run, what it cost, and what was paid.

Audit log entries: changes to access and money, such as keys created and revoked, secrets stored and deleted, and balance adjustments.

Secrets you store, such as a login for a website the agent needs to use, are encrypted at rest with AES-256-GCM and bound to your organization, the secret's name and the origins you declare.

A secret is readable only by the run worker, only at the moment of typing it into its declared origin. A secret is never returned by an API endpoint and never included in a model prompt: the model sees only the secret's name.

Stripe processes card payments. Card numbers never reach us.

PostHog receives the marketing site's page views and clicks, with the page address and any campaign tags in it. Nothing is stored in your browser to do it.

Google Cloud hosts the API, the console and the browser pool.

An S3-compatible object store holds run artifacts.

Resend sends transactional email, such as account messages.

Model providers, reached through OpenRouter, Vercel AI Gateway and TypeSafe, receive the task text and the page content needed to carry out a run.

Run data is kept for the history window of your plan: 7 days on Free, 30 days on Starter, 90 days on Pro, 180 days on Scale. Enterprise retention is agreed in the contract for that plan.

Billing records are kept for accounting, as long as accounting rules require.

The audit log is kept for the life of the account, and after closure only as long as a legal, accounting or reporting obligation requires.

Where data is no longer needed for the purpose it was collected for, it is deleted or made anonymous by removing the details that identify you.

You can ask for access to your data, for its deletion, or for an export, by writing to support@nebula.gg.

The marketing site stores a theme preference locally in your browser and sets no tracking cookies. The console sets a session cookie, which is HttpOnly, SameSite=Lax and Secure, so you stay signed in.

The service is built for organizations and is not directed at children. Don't use it to collect information about anyone under 16.

If you believe a child's information has reached the service, write to us and we will delete it.

We may change this policy as the service changes. Material changes are announced before they take effect, through the console or by email, and this page carries the day it last changed.