Nebula Commander Cloud

Privacy Policy

Effective date: 9-24-2026

This policy explains what personal information The Bearded Tek ("we", "us") collects when you use Nebula Commander Cloud (the "Service") and this website, how we use it, and what choices you have.

Two roles

  • Your account (we are the controller). We collect information about you as our customer so we can sell you the Service, bill you, and support you.
  • Data in your Instance (we are the processor). Your Nebula Commander instance holds data you and your users put into it: user accounts, node names, IP addresses, certificates and audit logs. We process that data only on your instructions, to run the Service. You are responsible for it, including giving any notices your own users need.

What we collect

Data Source Why we use it
Name, email, organization name, chosen subdomain You, at sign-up Create and run your Instance, contact you about it
Billing details (card, billing address, tax ID) You, entered directly into Stripe Take payment. We never see or store full card numbers.
Subscription and invoice status Stripe Provision, suspend or restore your Instance
Sign-in data for your Instance (email, password hash, sessions) You and your users Authentication, handled by our sign-in service (Keycloak)
Server logs (IP address, time, requested URL, user agent) Automatically Security, abuse prevention and troubleshooting
Support emails You Answer your questions

This website sets one essential cookie that keeps you signed in to your account page. We do not use advertising or tracking cookies on this website.

We process account and billing data to perform our contract with you. We keep invoices because tax law requires it. We process server logs and handle security under our legitimate interest in keeping the Service safe.

Who we share it with

We don't sell personal information. We share it only with service providers who help us run the Service, under contracts that limit what they can do with it:

Provider Purpose Location
Stripe Payments, invoices, tax United States / EU
[VPS provider] Hosting the Service and Instances [Location]
[Email provider] Transactional email [Location]
[Backup storage provider] Encrypted offsite backups [Location]

We may also disclose information if the law requires it, or to protect the rights, property or safety of our customers, the public, or us.

How long we keep it

  • Instance data: while your subscription is active, plus 30 days after it ends. Then it is deleted.
  • Backups: encrypted nightly backups are kept for up to 6 months on a rolling schedule. After an Instance is deleted, its last backups expire within that period.
  • Account and billing records: as long as tax and accounting law requires, usually 7 years.
  • Server logs: up to 90 days.

Security

Each Instance runs in its own containers, with its own database and its own sign-in realm. Sensitive database fields and certificate keys are encrypted at rest with a key unique to your Instance. Traffic to the Service uses HTTPS. Backups are encrypted before they leave our servers. Your Nebula overlay traffic goes directly between your devices and never passes through us.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, and to object to or restrict certain processing. To use these rights, email support@beardedtek.com. You can also complain to your local data protection authority.

To get a copy of the data in your Instance, or to have it deleted before the normal schedule, email us from the address on your account.

Children

The Service is not directed at children under 16. We do not knowingly collect their personal information.

International transfers

Our providers may process data outside your country. Where the law requires it, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Changes

If we make material changes to this policy, we will email customers before they take effect.

Contact

The Bearded Tek: support@beardedtek.com