Data Policy

Effective Date: January 1, 2024 Last Updated: January 1, 2024

---

This Data Policy describes how Nebula Block handles, processes, and protects the data you store on or transmit through our platform.

Data Ownership

You retain all rights, title, and interest in and to the data you upload, transmit, or generate through Nebula Block's services ("Your Data"). Nebula Block does not claim ownership of Your Data.

License to Provide Services

By using our services, you grant Nebula Block a limited, non-exclusive license to access, process, and store Your Data solely as necessary to provide, maintain, and improve the services you have requested. We will not use Your Data for any other purpose without your explicit consent.

Data Processing

Nebula Block processes Your Data on GPU infrastructure located in our data centers and partner facilities. Processing activities include executing compute workloads, running inference tasks, and storing intermediate and final outputs as directed by you. We do not access the content of Your Data except as necessary to provide the services, troubleshoot issues at your request, or comply with applicable law.

Data Isolation

Each customer's data is logically isolated from other customers' data. We implement access controls, network segmentation, and encryption to prevent unauthorized cross-tenant access.

Data Deletion

Upon your request or upon termination of your account, we will delete Your Data from our active systems within thirty (30) days. Residual copies in backup systems will be purged within ninety (90) days. Data that has been anonymized and aggregated for analytics purposes is not subject to deletion requests.

Data Breach Notification

In the event of a data breach affecting Your Data, Nebula Block will notify affected users within seventy-two (72) hours of becoming aware of the breach, in accordance with applicable laws. Notification will include a description of the nature of the breach, the types of data affected, and the measures taken to address the incident.

Subprocessors

Nebula Block may engage third-party subprocessors to assist in delivering our services (e.g., cloud infrastructure providers, monitoring tools). A current list of subprocessors is available upon request. We require all subprocessors to maintain data protection standards consistent with this Data Policy.

Compliance

Nebula Block is committed to complying with applicable data protection regulations, including but not limited to Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25), the Personal Information Protection and Electronic Documents Act (PIPEDA), the General Data Protection Regulation (GDPR), and other relevant frameworks. We regularly review and update our practices to maintain compliance.