← Back to Home

Privacy Policy

Last updated: July 14, 2026

1. Controller

Nubri GmbH
Liebenowzeile 22
12167 Berlin, Germany
Email: info@nubri.co
VAT ID: DE332956472
Registration: HRB 217794 B, Amtsgericht Charlottenburg

2. Data We Collect

We collect and process the following personal data:

  • Account data (email address, name) when you register via Supabase Authentication
  • AWS Bedrock usage metrics and logs you connect to the platform
  • Technical data (IP address, browser type, device information)
  • Payment data (processed by Stripe; we do not store full card details)

3. Legal Basis (GDPR Art. 6)

  • Contract performance (Art. 6(1)(b)): Processing your monitoring data and managing your account
  • Legitimate interest (Art. 6(1)(f)): Improving our service, security measures
  • Consent (Art. 6(1)(a)): Optional analytics or marketing communications

4. Third-Party Services

  • Supabase (authentication and database) — data processed in the EU/US
  • Amazon Web Services (AWS) — hosting infrastructure
  • Stripe — payment processing (PCI DSS compliant)

Where data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

5. AWS Data Processing

BedrockOps connects to your AWS account to retrieve Bedrock usage metrics. We access only the metrics and logs you explicitly authorize. We do not access your AI model inputs/outputs or any other AWS resources beyond what is required for monitoring.

6. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking or advertising cookies. Essential cookies cannot be disabled as they are necessary for the service to function.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Monitoring data is retained according to your plan settings. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law.

8. Your Rights

Under GDPR, you have the right to:

  • Access your personal data (Art. 15)
  • Rectification of inaccurate data (Art. 16)
  • Erasure of your data (Art. 17)
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing (Art. 21)

To exercise your rights, contact us at info@nubri.co. You also have the right to lodge a complaint with the Berlin Commissioner for Data Protection (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

9. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews.