Skip to content

Privacy Policy

Last updated: November 03, 2026

Which version prevails This policy is available in several languages. If there are differences between versions, the Spanish version prevails.

1. Who is responsible for your data

The party responsible for the account database of nubigram.com is Nubigram SAS (CUIT 30-71691894-3). For any privacy matter you can write to info@nubigram.com.

2. What data we store

We only store what is needed for you to have an account and to protect it. The sign-up data (email and password, or your Google account) is required to create the account; your name is optional.

Your account

  • Your email, and a normalized version of it, to prevent repeated accounts with variants of the same email.
  • Your password, hashed with a one-way algorithm: we never store or see it in plain text. Also whether it is a password you chose yourself and when you chose it.
  • Your name, if you add it, and your language.
  • The date you accepted the Terms and this policy, and the IP address you signed up from.
  • The dates your account was confirmed, blocked or deleted, and the technical data to confirm it, reset your password and unlock it: single-use links and the number of failed sign-in attempts.

Your sessions

For each open session: the browser and operating system (the "user agent" your browser sends), the sign-in IP address, the date of last use and the expiration date. This lets you see your sessions and close them from your dashboard.

Your Google account

If you sign in with Google, we only ask for your email and basic profile (your name). We store your Google account identifier and the email it had when you linked it. We never receive your Google password.

Rejected sign-up attempts

When our anti-spam system rejects a sign-up, we store the reason, the date, the IP address and only the email domain (for example, "example.com"), never the full email.

Technical logs

Like any web server, ours logs each request it receives, with the IP address and the requested address, for security and error diagnosis. These logs never include passwords.

Your purchases

For each purchase we store the program and plan, the price, the date, its status (pending, paid, expired or refunded), and the date and version of the Terms you accepted when buying. For each payment, the provider that processed it, its identifier and its status. The provider also sends us the payment details, which may include your name, your email, your country and the last digits of your card: we keep them for 90 days, to solve payment issues, and then they are deleted.

Contact and Withdrawal button

What you write in those forms (name, email, reason, message, purchase number and comment) is not stored on the platform: it reaches our mailbox, on Google Workspace, by email, with the page language and the date, so we can reply. Your replies to our emails arrive there too.

Our desktop programs

When you sign in to one of our programs, for each computer we store the program, the computer's name, its operating system, the installed version, the date and IP address of the last connection, and a digest of the access token that cannot be used to rebuild it. For each license we store the program, the plan, its serial number if it is premium, its status, the end of support and the computers where it is active. This lets the program validate your license and tell you about new versions, and lets you see your computers and remove them from your dashboard.

What we don't store

The data you work with in our software stays on your computer: Nubigram doesn't receive or store it. We don't see or store your card details either: you enter them on the payment provider's page.

Backups in your Google Drive

Some programs let you save their backups to your Google Drive account, if you choose to connect it. The program only asks for the drive.file permission, which gives it access solely to the files it created: it cannot see the rest of your Drive. Backups go straight from your computer to your account, without passing through Nubigram. We don't see them, and we don't receive your Google access, which stays in your computer's credential store. You can disconnect Drive from the program or remove the permission from your Google account; the backups stay in your Drive until you delete them.

The use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Automatic exchange rate

If you use a program's automatic exchange rate, your computer asks public exchange-rate services (currency-api, through jsDelivr or Cloudflare, and DolarApi) for the value of the dollar directly, without passing through Nubigram. The program doesn't send them any data about your account or your work, but, as with any internet connection, those services see your computer's IP address.

3. What we use it for

We use your data to create and maintain your account, to let you sign in, to protect your account and the platform (sessions, lockout after failed attempts, anti-spam) and to send you your account emails: confirmation, password reset, unlock, and notices of email or password changes. If you buy, we use it to process the purchase, issue your premium license, send you the purchase email and handle refunds. Also to reply to what you send us through Contact or the Withdrawal button, and to comply with legal, accounting and tax obligations.

We don't sell your data, we don't use it for advertising and we don't build profiles with it.

4. Providers that process data

To provide the service we work with these providers, which process data on our behalf and only for the purpose stated:

  • Vultr: the servers that run the platform and its database, in the United States.
  • DigitalOcean: storage for backup copies, in the United States.
  • Resend: sending your account and purchase emails, and the messages from Contact and the Withdrawal button.
  • dLocal Go: processing the payments you make with the option to pay from Argentina, in pesos.
  • Paddle: processing the payments you make with the option to pay from another country, which is the only one when dLocal Go isn't available. Paddle sells as reseller and Merchant of Record, so it processes your payment data as a controller, under its own privacy policy.
  • Cloudflare: DNS for nubigram.com and Turnstile, the check our forms use to stop bots. To verify that you are a person, Turnstile analyzes technical data from your browser and your connection.
  • Google: sign-in with Google, only if you choose to use it; Google Workspace, the nubigram.com mailbox, where messages from Contact and the Withdrawal button and replies to our emails arrive; and Google Drive, only if you connect your account from a program. In that case, Google handles your backups as your provider, not ours.

Some of these providers process data outside Argentina, for example in the United States. By using Nubigram you consent to that transfer, which is made only to provide the service.

5. Cookies

Nubigram uses a single first-party cookie, _nubigram_session, which is essential: it keeps you signed in, protects forms against forged submissions and stores the notices you see on screen. It lasts 30 days and is renewed every time you visit.

We don't use analytics or advertising cookies. Cloudflare may use its own when Turnstile checks a form; Google, on its own site, when you sign in with Google; Paddle, in its checkout, which opens over our page; and dLocal Go, on its payment page.

6. How long we keep it

  • Account data: while the account is active.
  • Computers and licenses: while the account is active. A removed computer loses access, and stays on record to show which computers the account was used from.
  • Sessions: they expire after 30 days without use, and expired ones are deleted daily. When you close a session, it is deleted immediately.
  • Unconfirmed accounts: deleted after 7 days.
  • Email links: the confirmation link expires after 7 days, and the password reset link after 6 hours.
  • Rejected sign-up attempts: deleted after 90 days.
  • Purchases: kept even if you delete your account, without your personal data, because they are the record of what was sold and accounting and tax rules require it.
  • Payment details sent by the provider: deleted after 90 days, or earlier if you delete your account.
  • Account deletion: your data is anonymized immediately: your email is replaced, your Google account is unlinked and your sessions are closed. Backups that still contain it are deleted after 30 days. Your computers are removed, and their name, system version and IP address are deleted.

7. Security

All communication with nubigram.com is encrypted (HTTPS). Passwords are stored hashed with a one-way algorithm, and session tokens only as a digest that cannot be used to rebuild them. We also limit sign-in attempts and stop automated sign-ups.

8. Your rights

Under Argentina's Personal Data Protection Law 25,326, you have the right to access your data and to ask us to rectify, update or delete it. You can change your name, email and language, and delete your account, from your dashboard. For anything else, write to info@nubigram.com.

We answer access requests within 10 calendar days, and rectification, update or deletion requests within 5 business days, as the law requires.

The data subject has the right to access their personal data free of charge at intervals of no less than six months, unless a legitimate interest is shown, as set out in article 14, section 3 of Law No. 25.326.

The ACCESS TO PUBLIC INFORMATION AGENCY (Agencia de Acceso a la Información Pública), as the Supervisory Authority of Law No. 25.326, has the power to handle complaints and claims filed by anyone whose rights are affected by a breach of the rules in force on personal data protection. Official text: “LA AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA, en su carácter de Órgano de Control de la Ley N° 25.326, tiene la atribución de atender las denuncias y reclamos que interpongan quienes resulten afectados en sus derechos por incumplimiento de las normas vigentes en materia de protección de datos personales.”

9. Minimum age

Nubigram is for people aged 18 and over. We don't knowingly collect data from minors; if we find an account belonging to a minor, we delete it.

10. Changes to this policy

We may update this policy. If the changes are significant, we will notify you by email at least 15 days in advance. The date of the last update appears at the top of this page.

The changes about desktop programs and Google Drive apply from November 18, 2026.

11. Contact

For any question about your data, write to info@nubigram.com.