Privacy Policy

Who we are

CloudCodes is an AI coding agent run by Nubri GmbH, Liebenowzeile 22, 12167 Berlin, Germany (info@nubri.co), the controller for the data described here.

What we store

• Your account: name, email address, a hashed password, whether you confirmed your email, your API key (stored as a hash), plan, token usage and Stripe customer number. Stripe handles card details.
• Your projects: the files the agent writes and your conversations with it.

AI processing

Your messages, the conversation and the relevant project files are sent to Anthropic's Claude models on Amazon Bedrock (AWS). AWS does not use them to train models. Code the agent runs is executed in an isolated sandbox on our server.

Why, and on what basis

We process data to provide the service (Art. 6(1)(b) GDPR), and to keep it secure and limit abuse of the free plan (Art. 6(1)(f) GDPR). Free tokens are counted per email inbox for that reason.

Who processes data for us

• Amazon Web Services (hosting, Claude models, email)
• Stripe (payments)

Transfers to the United States rely on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. We do not sell data.

Retention and deletion

We keep data while your account exists. You can delete your account in Settings, which deletes your projects. A record that an inbox already used its free tokens is kept so they are not granted twice. Invoices are kept by Stripe as tax law requires (up to 10 years).

Cookies

We use essential cookies to keep you signed in. No advertising or third-party tracking.

Server logs

Our web server logs each request: IP address, time, the address requested, the response, and your browser's user agent. We use the logs to keep the service running and secure (Art. 6(1)(f) GDPR); they are deleted automatically after at most 8 days.

Your rights

You can ask for access to, correction, deletion, restriction or export of your data, and object to processing based on legitimate interests: email info@nubri.co. You can also complain to a data protection authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.