Last updated: May 29, 2026
Nebula ("we", "our", or "us") operates the Nebula application and the website at getnebula.tech (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.
When you create a Nebula account, we collect your name, email address, and authentication credentials provided via third-party sign-in (such as Google OAuth).
When you connect your email or messaging accounts, Nebula accesses communication metadata to provide its core functionality. This includes:
Nebula is an email client: providing the inbox UI requires storing your email messages on our servers. When you connect a mailbox, Nebula syncs your messages — subject, body (text and HTML), sender, recipients, labels, threading, and any attachments — into our database. We do this so we can display them in the app, let you search and triage them, and power the AI features that are part of Nebula's core functionality: priority classification, message and thread summarization, and draft suggestions. These features run automatically on messages arriving in your connected mailbox.
One AI feature is opt-in and off by default: the daily briefing email. You can enable it in Settings.
Message content remains stored until you delete the messages, disconnect your mailbox, or delete your Nebula account (see Section 5 and Section 8). Triage actions you take in Nebula — archive, delete-to-Trash, mark as read, reply — are mirrored back to your mailbox via the Gmail API or IMAP, so your mailbox provider stays the system of record.
Sub-processors that receive message content for AI features are listed at getnebula.tech/sub-processors, together with what data is shared, the provider's region, and any no-train commitments.
We collect information about how you interact with the Service, including feature usage, preferences, session duration, and error logs. This data is used to improve the Service and diagnose issues.
We may collect device type, operating system, browser type, and IP address for security and analytics purposes.
Nebula's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, Nebula:
We use the information we collect to:
We do not sell, rent, or trade your personal information. We may share data only in the following circumstances:
We retain your account profile, email messages, and AI-derived data (summaries, classifications, draft suggestions) for as long as your account is active. Application logs and audit records are retained per our internal retention policy. You may export or request deletion of your data at any time (see Section 8).
When you request account deletion, your messages and other personal data are scheduled for permanent removal after a 30-day grace window, during which you can recover the account by contacting support. After the grace window closes, all personal data is removed except where retention is required by law (for example, security audit records may be retained for a defined period for compliance reasons).
We implement industry-standard security measures to protect your information, including:
No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
Nebula is operated from Germany. If you access the Service from outside the European Economic Area (EEA), your data may be transferred to and processed in Germany. We ensure that any data transfers comply with applicable data protection laws, including the General Data Protection Regulation (GDPR).
Depending on your jurisdiction, you may have the following rights regarding your personal data:
For any of the rights handled manually, or any question about the self-service flows above, write to privacy@getnebula.tech. We aim to respond within 30 days.
You can revoke Nebula's access to your Google account at any time by visiting your Google Account permissions page.
We use essential cookies and similar technologies to maintain your session, authentication tokens, and preferences. These are required for the Service to function and cannot be disabled while you remain signed in.
We use Google Analytics 4 (GA4) to measure how Nebula is used — which pages are viewed, which buttons are clicked, which onboarding steps stall. GA4 receives page views, custom product events, and after you sign in, your Nebula user ID, so a session's events are linkable to your account for internal analysis. GA4 does not receive any email content, message bodies, subjects, sender information, or contact data. GA4 is listed on our sub-processors page together with how to opt out site-wide. We do not use any third-party advertising cookies.
The Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 16, we will delete that data promptly.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or our data practices, please contact us:
Nebula
Alexander Grosse
Berlin, Germany
Email: privacy@getnebula.tech