Privacy Policy

1. Who we are and what this policy covers

This website is operated by Nubisco, LDA, a company incorporated in Portugal (data controller). You can contact us at [email protected].

This policy covers nubisco.io and our other public marketing and documentation properties on the nubisco.io domain (including docs.nubisco.io). Our hosted product applications (for example, Verba Cloud, the OpenBridge Marketplace) are covered by this policy where they collect data on our behalf, and by their own in-product notices for any product-specific data.

2. What data we collect on this site

We collect data in two ways on this site and on our documentation site:

Contact form. When you submit the contact form on this site, your name, email address, and message are sent to our email inbox. We do not store this data in any database. It is handled entirely through email.

Website analytics. We use Nubisco Analytics, our own cookieless analytics service, to understand how visitors use nubisco.io and docs.nubisco.io. Analytics data includes your approximate location (derived from IP address), browser type, pages visited, and time spent on the site. Your IP address is anonymised. We respect the Do Not Track (DNT) browser signal and do not collect analytics from visitors who have enabled it. Nubisco Analytics does not set any cookies and does not require consent.

Product-specific analytics. Our hosted product applications may use additional analytics tooling that is appropriate for product usage measurement (for example, Verba Cloud currently uses PostHog). When this is the case, the in-product privacy notice for that application lists what is collected, by whom, and how to opt out. We do not use those tools on nubisco.io or docs.nubisco.io.

3. Legal basis for processing (GDPR)

We are subject to the EU General Data Protection Regulation (GDPR) as a company incorporated in Portugal. Our legal bases for processing are:

• Contact form: Legitimate interest in responding to your enquiry (Article 6(1)(f)).
• Analytics: Legitimate interest in understanding site usage and improving user experience. Since Nubisco Analytics is cookieless and respects DNT, no explicit consent is required (Article 6(1)(f)).

4. Cookies

This site does not use cookies for analytics. Nubisco Analytics operates without cookies and does not require consent. If you have enabled Do Not Track in your browser, we do not collect analytics data. No other cookies are used on this site.

5. Nubisco accounts (hosted products)

When you sign up for a hosted Nubisco product, such as Verba Cloud or the OpenBridge Marketplace (for posting plugins or reviews), Nubisco operates a single identity service that authenticates you across those products. The data we hold for an account is your email address, a hashed credential or one-time login code, the products you have access to, and a basic audit trail of sign-ins. Account data is hosted in the EU.

You can delete a Nubisco account at any time by writing to [email protected]. Deleting the account removes the account record and revokes access to any hosted product tied to it; data you created inside a hosted product is handled per that product's data-deletion policy. Browsing public pages (for example, reading the OpenBridge Marketplace) does not require an account.

6. Self-hosted and licensed products

Self-hosted installations of Nubisco products run entirely on your own infrastructure. Nubisco has no access to any data processed by self-hosted instances. The applicable terms are those of the license under which each product is distributed, which differs by product: the Verba Community Edition is distributed under the GNU Affero General Public License v3.0; Verba Enterprise Edition is proprietary; Nubisco libraries such as Nubisco UI and OpenBridge are distributed under the MIT license; the OpenBridge Marketplace is distributed under the Business Source License 1.1; Stagewright is proprietary, commercial software. For the open-source products, the LICENSE file in each project's public repository on GitHub is authoritative.

7. Data retention

Contact form emails are retained in our inbox and deleted when no longer relevant. Analytics data is retained according to our data retention policy and is periodically purged.

8. Your rights

Under the GDPR, you have the right to access, correct, or delete your personal data; to restrict or object to its processing; and to data portability.

To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD - Comissão Nacional de Proteção de Dados).

9. Changes to this policy

We may update this policy from time to time. We will update the date at the top of this page when we do. Continued use of the site after changes are posted constitutes acceptance of the revised policy.

10. Contact

Questions about this policy or about your data? [email protected]