Privacy Policy

Last updated: May 2026

1. Who we are

Nebula Services ("we") operates affiliatenebula.com and provides advertising services on Telegram channels. For privacy enquiries: sales@nebulanet.shop.

2. What we collect

We collect only what is needed to deliver the service and improve it:

Email and (optional) Telegram handle and phone number — to confirm orders, deliver receipts, and contact you about your campaign.
Campaign data — creative copy, target URL, channel selection, scheduling info.
Payment metadata — transaction ID and amount from Stripe / NOWPayments. We do not store full card numbers or crypto private keys.
Basic usage data — IP address, browser/user-agent, pages visited (server logs, retained 30 days).

3. Legal basis (GDPR)

We process your data based on (a) performance of the contract when you buy a campaign, (b) consent when you opt in for marketing/discounts via our subscription form, and (c) legitimate interest in keeping the platform secure and improving the product.

4. Who we share data with

We share the minimum data required with these processors:

Stripe, Inc. — payment processing (card payments).
NOWPayments — payment processing (crypto).
Hetzner Online GmbH — hosting (servers located in Germany).
tgstat.com — channel statistics aggregation (only public channel handles, no customer data).

We never sell your data to third parties.

5. How long we keep it

Order records and payment metadata: 7 years (legal requirement for invoicing). Marketing opt-in records: until you unsubscribe, plus 12 months for audit. Server logs: 30 days.

6. Your rights

Under GDPR you have the right to access, correct, export, or delete your data, and to withdraw consent for marketing at any time. Send a request to sales@nebulanet.shop and we will respond within 30 days.

7. Cookies

We use a single cookie for the admin session and localStorage to remember if you have dismissed the subscription popup. No third-party analytics cookies are set on the public site.

8. Children

The Site is not intended for users under 16. We do not knowingly collect data from minors.

9. Changes

We will notify users of material changes to this policy at least 14 days before they take effect.