Introduction

Nuclom ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our video collaboration platform ("Service"). By using the Service, you consent to the data practices described in this policy.

1. Information We Collect

Information You Provide

• Account Information: Name, email address, password, and profile picture
• Organization Data: Organization name, team member information
• User Content: Videos, comments, and any other content you upload
• Payment Information: Billing address, payment method details (processed by Stripe)
• Communications: Messages you send to us for support or feedback

Information Collected Automatically

• Usage Data: Pages viewed, features used, timestamps, and interaction patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Video Analytics: Watch time, playback position, video engagement metrics
• Cookies and Similar Technologies: See our Cookie Policy

Information from Third Parties

• OAuth Providers: When you sign in with GitHub or Google, we receive your public profile information
• Integration Services: When you connect Zoom or Google Meet, we access meeting recordings you authorize

2. How We Use Your Information

We process your data based on the following legal bases under GDPR:

Contract Performance

• Providing and maintaining the Service
• Processing video uploads, transcriptions, and AI analysis
• Managing your account and organization
• Processing payments and subscriptions

Legitimate Interests

• Improving and optimizing the Service
• Preventing fraud and ensuring security
• Analyzing usage patterns and trends
• Sending service-related communications

With Your Consent

• Marketing communications (you can opt out anytime)
• Analytics cookies (see Cookie Policy)
• Third-party integrations you authorize

Legal Obligations

• Compliance with applicable laws and regulations
• Responding to legal requests and court orders
• Protecting our rights and preventing abuse

3. Information Sharing and Disclosure

We do not sell your personal information. We may share your data with:

Service Providers

• Cloudflare R2: Video and file storage
• Stripe: Payment processing
• AI Providers (OpenAI/Anthropic): Video transcription and analysis
• Resend: Email delivery
• Analytics providers: Usage analysis (with consent)

Organization Members

Content you create may be visible to other members of your organization based on your organization's settings and your role.

Legal Requirements

We may disclose information if required by law, legal process, or government request, or to protect our rights, property, or safety.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before this occurs.

4. Data Retention

We retain your data for as long as necessary to provide the Service and fulfill the purposes described in this policy:

• Account Data: Retained while your account is active, deleted 30 days after account deletion request
• Video Content: Retained while your account is active, moved to trash for 30 days before permanent deletion
• Usage Logs: Retained for up to 12 months for analytics and security purposes
• Payment Records: Retained for 7 years to comply with tax and accounting requirements
• Consent Records: Retained for the duration of your account plus 3 years for compliance
• Support Communications: Retained for 3 years after resolution

5. Your Rights (GDPR & CCPA)

Depending on your location, you have the following rights regarding your personal data:

Right to Access

You can request a copy of all personal data we hold about you. Use the "Download my data" feature in your account settings, or contact us directly.

Right to Rectification

You can update your account information at any time through your profile settings. For other corrections, contact us.

Right to Erasure (Right to be Forgotten)

You can request deletion of your account and associated data. Use the "Delete my account" feature in settings. Deletion takes effect after a 30-day grace period.

Right to Data Portability

You can export your data in a machine-readable format (JSON/ZIP) using our data export feature. Exports include your profile, videos, comments, and settings.

Right to Object / Withdraw Consent

You can opt out of marketing communications and analytics cookies at any time. Essential cookies required for the Service to function cannot be disabled.

Right to Restrict Processing

In certain circumstances, you can request that we limit how we process your data. Contact us to make such a request.

To exercise any of these rights, go to Settings > Privacy & Data or contact us at privacy@nuclom.com.

6. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS 1.3) and at rest
• Secure password hashing (bcrypt)
• Regular security audits and penetration testing
• Access controls and authentication for employees
• Incident response procedures for data breaches

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. International Data Transfers

Your data may be transferred to and processed in countries outside your residence, including the United States. When we transfer data from the EU/EEA, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

8. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service at least 30 days before they take effect. Your continued use of the Service after the changes become effective constitutes acceptance.

10. Contact Us

For privacy-related questions or to exercise your data rights:

• Email: privacy@nuclom.com
• Support: nuclom.com/support

If you are in the EU/EEA and have concerns about how we process your data, you have the right to lodge a complaint with your local Data Protection Authority.