Impressum

1. Data Controller

Nubri GmbH, Liebenowzeile 22, 12167 Berlin, Germany. Contact: info@nubri.co

2. Data We Collect

• Account data: email address, hashed password, OAuth profile info
• Project data: prompts, generated code, workflow configurations
• Usage data: token consumption, server logs, IP addresses
• Payment data: processed by Stripe (we do not store card details)

3. Purpose & Legal Basis

We process your data to provide the GrokBuild service (Art. 6(1)(b) GDPR — contract performance) and for legitimate interests such as security, fraud prevention, and service improvement (Art. 6(1)(f) GDPR).

4. Third-Party Processors

• Amazon Web Services (hosting, AI via Bedrock) — US, EU Standard Contractual Clauses
• xAI (AI model provider) — US
• Stripe (payment processing) — US, EU SCCs
• Neon (database hosting) — US, EU SCCs

5. Data Retention

Account and project data is retained while your account is active. Upon deletion request, all personal data is removed within 30 days. Some records may be retained as required for legal or accounting purposes.

6. Your Rights

Under GDPR you have the right to access, rectify, erase, restrict processing, data portability, and object to processing. Contact info@nubri.co to exercise these rights.

7. Cookies

We use only essential cookies (httpOnly authentication cookie). No tracking or advertising cookies are used.

8. Contact

For privacy inquiries: info@nubri.co