Skip to content

Privacy Policy

Last updated: October 12, 2026

Which version prevails This policy is available in several languages. If there are differences between versions, the Spanish version prevails.

1. Who is responsible for your data

The party responsible for the account database of nubigram.com is Nubigram SAS (CUIT 30-71691894-3). For any privacy matter you can write to marcos@nubigram.com.

2. What data we store

We only store what is needed for you to have an account and to protect it. The sign-up data (email and password, or your Google account) is required to create the account; your name is optional.

Your account

  • Your email, and a normalized version of it, to prevent repeated accounts with variants of the same email.
  • Your password, hashed with a one-way algorithm: we never store or see it in plain text. Also whether it is a password you chose yourself and when you chose it.
  • Your name, if you add it, and your language.
  • The date you accepted the Terms and this policy, and the IP address you signed up from.
  • The dates your account was confirmed, blocked or deleted, and the technical data to confirm it, reset your password and unlock it: single-use links and the number of failed sign-in attempts.

Your sessions

For each open session: the browser and operating system (the "user agent" your browser sends), the sign-in IP address, the date of last use and the expiration date. This lets you see your sessions and close them from your dashboard.

Your Google account

If you sign in with Google, we only ask for your email and basic profile (your name). We store your Google account identifier and the email it had when you linked it. We never receive your Google password.

Rejected sign-up attempts

When our anti-spam system rejects a sign-up, we store the reason, the date, the IP address and only the email domain (for example, "example.com"), never the full email.

Technical logs

Like any web server, ours logs each request it receives, with the IP address and the requested address, for security and error diagnosis. These logs never include passwords.

What we don't store

The data you work with in our software stays on your computer: Nubigram doesn't receive or store it. We don't store card or payment details either.

3. What we use it for

We use your data to create and maintain your account, to let you sign in, to protect your account and the platform (sessions, lockout after failed attempts, anti-spam) and to send you your account emails: confirmation, password reset, unlock, and notices of email or password changes. Also, to comply with legal obligations.

We don't sell your data, we don't use it for advertising and we don't build profiles with it.

4. Providers that process data

To provide the service we work with these providers, which process data on our behalf and only for the purpose stated:

  • Vultr: the servers that run the platform and its database, in the United States.
  • DigitalOcean: storage for backup copies, in the United States.
  • Resend: sending your account emails.
  • Cloudflare: DNS for nubigram.com and Turnstile, the check our forms use to stop bots. To verify that you are a person, Turnstile analyzes technical data from your browser and your connection.
  • Google: sign-in with Google, only if you choose to use it.

Some of these providers process data outside Argentina, for example in the United States. By using Nubigram you consent to that transfer, which is made only to provide the service.

5. Cookies

Nubigram uses a single first-party cookie, _nubigram_session, which is essential: it keeps you signed in, protects forms against forged submissions and stores the notices you see on screen. It lasts 30 days and is renewed every time you visit.

We don't use analytics or advertising cookies. Cloudflare may use its own when Turnstile checks a form, and Google may use its own, on its own site, when you sign in with Google.

6. How long we keep it

  • Account data: while the account is active.
  • Sessions: they expire after 30 days without use, and expired ones are deleted daily. When you close a session, it is deleted immediately.
  • Unconfirmed accounts: deleted after 7 days.
  • Email links: the confirmation link expires after 7 days, and the password reset link after 6 hours.
  • Rejected sign-up attempts: deleted after 90 days.
  • Account deletion: your data is anonymized immediately: your email is replaced, your Google account is unlinked and your sessions are closed. Backups that still contain it are deleted after 30 days.

7. Security

All communication with nubigram.com is encrypted (HTTPS). Passwords are stored hashed with a one-way algorithm, and session tokens only as a digest that cannot be used to rebuild them. We also limit sign-in attempts and stop automated sign-ups.

8. Your rights

Under Argentina's Personal Data Protection Law 25.326, you have the right to access your data and to ask us to rectify, update or delete it. You can change your name, email and language, and delete your account, from your dashboard. For anything else, write to marcos@nubigram.com.

We answer access requests within 10 calendar days, and rectification, update or deletion requests within 5 business days, as the law requires.

The data subject has the right to access their personal data free of charge at intervals of no less than six months, unless a legitimate interest is shown, as set out in article 14, section 3 of Law No. 25.326.

The ACCESS TO PUBLIC INFORMATION AGENCY (Agencia de Acceso a la Información Pública), as the Supervisory Authority of Law No. 25.326, has the power to handle complaints and claims filed by anyone whose rights are affected by a breach of the rules in force on personal data protection. Official text: “LA AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA, en su carácter de Órgano de Control de la Ley N° 25.326, tiene la atribución de atender las denuncias y reclamos que interpongan quienes resulten afectados en sus derechos por incumplimiento de las normas vigentes en materia de protección de datos personales.”

9. Minimum age

Nubigram is for people aged 18 and over. We don't knowingly collect data from minors; if we find an account belonging to a minor, we delete it.

10. Changes to this policy

We may update this policy. If the changes are significant, we will notify you by email at least 15 days in advance. The date of the last update appears at the top of this page.

11. Contact

For any question about your data, write to marcos@nubigram.com.