Last updated: May 17, 2026
This Privacy Policy ("Policy") explains how Nural ("Nural", "we", "us", or "our") collects, uses, discloses, and protects personal information. This Policy applies to:
By using our services or visiting a Client Website, you acknowledge that you have read and understood this Policy.
This Policy governs Nural's collection and use of personal information when individuals interact with the Nural website, contact us, or sign up as Clients.
Nural builds and hosts websites for its Clients. When you visit a Client Website, Nural acts as a service provider (processor) to the Client (controller). The Client is the primary party responsible for the personal data collected from visitors to their website. However, because Nural provides the hosting, analytics, and form-processing infrastructure, Nural also processes certain data about visitors to Client Websites, as described in Section 3.3.
This Policy does not cover the privacy practices of third-party websites, services, or applications, even if linked from a Client Website or referenced on our site.
When you submit a contact form, send us an email, or otherwise reach out to Nural, we may collect:
When you sign up for a Nural plan, we collect:
Payment information is collected and processed exclusively by Stripe. Nural does not store, view, or have access to credit card numbers, debit card numbers, or bank account information.
When you visit a website Nural hosts or manages on behalf of a Client, we may automatically collect:
This data is collected for the purpose of operating, securing, and improving the Client Website, as further described in Section 5.
We use cookies, log files, pixels, and similar technologies. See Section 11 for details.
Nural does not knowingly collect:
We collect information:
We do not:
If you are located in the European Economic Area, United Kingdom, or Switzerland, the legal bases on which we rely to process personal information are:
You may withdraw consent at any time where consent is the legal basis. Withdrawal does not affect the lawfulness of prior processing.
We share personal information only as follows:
We share information with third-party service providers that perform services on our behalf, under contractual confidentiality and data-protection obligations. See Section 9 for the current list.
Where data is collected from visitors to a Client Website, we share that data with the Client whose website it is. The Client is responsible for further handling of that data and for providing its own privacy notice to its visitors.
We may disclose information when required by law, subpoena, court order, or other legal process; to enforce our Terms; to protect the rights, property, or safety of Nural, our Clients, or others; or to investigate fraud or security incidents.
If Nural is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction. We will notify affected individuals (by email or notice on our website) before any such transfer becomes subject to a different privacy policy.
We may share information with your explicit consent for purposes you have authorized.
We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you for any purpose without restriction.
Nural does not sell personal information in exchange for money. Under California law, "sale" and "share" are defined more broadly. To the best of our knowledge, Nural does not sell or share personal information as those terms are used under the California Consumer Privacy Act and California Privacy Rights Act. See Section 14 for details and your rights.
We use the following third-party services. Each has its own privacy policy:
| Provider | Purpose | Privacy Policy |
|---|---|---|
| Stripe | Payment processing | stripe.com/privacy |
| Cloudflare | Hosting, DNS, security, CDN | cloudflare.com/privacypolicy |
| Google Analytics | Visitor analytics on Client Websites and the Nural site | policies.google.com/privacy |
| Formspree | Contact-form processing | formspree.io/legal/privacy-policy |
| Google Workspace | Email (hello@nural.studio) and document handling | policies.google.com/privacy |
| Domain Registrar(s) | Domain name registration | (varies by registrar) |
We may add or change service providers from time to time. Material changes will be reflected by updating this Section.
Nural operates from the United States. Personal information we collect may be transferred to, stored in, or processed in the United States or other countries where our service providers operate. These countries may have different data-protection laws than your home country.
When we transfer personal information from the European Economic Area, United Kingdom, or Switzerland to a country not recognized as providing adequate data protection, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, the UK International Data Transfer Agreement, or comparable mechanisms.
Cookies are small text files placed on your device when you visit a website. They are widely used to operate websites and to provide analytics.
You can control cookies through your browser settings. Most browsers allow you to:
Blocking strictly necessary cookies may break parts of the website.
Some browsers transmit a "Do Not Track" signal. There is no industry consensus on how to interpret this signal. Nural does not currently respond to Do Not Track signals. See Section 14 for California-specific rights and Section 15 for European rights.
For California residents, Nural treats a recognized Global Privacy Control (GPC) signal as a valid request to opt out of the sale or sharing of personal information for the browser or device transmitting the signal.
If you opt in or where otherwise permitted by law, we may send you occasional emails about new services, updates, or content. You may unsubscribe at any time by clicking the unsubscribe link in any marketing email or by emailing hello@nural.studio. Unsubscribing does not affect transactional communications (billing, account, and service messages).
We retain personal information only for as long as necessary for the purposes for which it was collected:
| Data Category | Retention |
|---|---|
| Inquiry / contact-form data (no engagement) | Up to 24 months from last contact |
| Active Client account data | Duration of relationship plus applicable legal/tax periods |
| Closed Client account data | Up to 7 years (for tax and legal compliance) |
| Billing and payment records | 7 years (tax law) |
| Client Website analytics | Up to 26 months (Google Analytics default) |
| Server logs | Up to 12 months |
| Backup data | Up to 90 days after deletion from production |
| Marketing data | Until consent is withdrawn or 24 months of inactivity |
| Legal hold data | Duration of legal need |
We may retain information for longer where required by law, where necessary for legitimate business purposes (such as fraud prevention or defending legal claims), or in anonymized form.
If you are a California resident, you have the following rights under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"):
You have the right to request information about the categories of personal information we have collected, the sources from which we collected it, the business or commercial purposes for collecting it, and the categories of third parties with whom we have shared it.
You have the right to request a copy of the specific pieces of personal information we hold about you.
You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (such as to complete a transaction, detect fraud, comply with law, or exercise free speech).
You have the right to request that we correct inaccurate personal information.
You have the right to opt out of the sale or sharing of your personal information. As stated in Section 8, Nural does not sell or share personal information as those terms are defined under California law. You may submit an opt-out request anyway, and we will honor it.
You have the right to limit our use of sensitive personal information. Nural does not collect sensitive personal information except as expressly described in this Policy.
We will not discriminate against you for exercising any of your CCPA/CPRA rights.
Submit a request by email to hello@nural.studio with the subject line "CCPA Request." We will verify your identity before fulfilling certain requests. We will respond within 45 days (extendable by an additional 45 days where reasonably necessary, with notice).
You may designate an authorized agent to make a request on your behalf. We will require written proof of authorization.
In the last 12 months, Nural has collected the following categories of personal information:
Sources, purposes, and disclosures for each category are described in Sections 3, 4, 5, and 7 of this Policy.
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights:
The right to obtain confirmation that we are processing your data and to receive a copy of it.
The right to have inaccurate or incomplete data corrected.
The right to have your data deleted in certain circumstances.
The right to limit how we use your data in certain circumstances.
The right to receive your data in a structured, commonly used, machine-readable format and to have it transmitted to another controller where technically feasible.
The right to object to processing based on legitimate interests, and to object at any time to processing for direct marketing.
Where processing is based on consent, the right to withdraw that consent at any time.
The right to lodge a complaint with a supervisory authority, particularly in the EU member state of your residence, place of work, or the place of the alleged infringement.
Submit a request by email to hello@nural.studio with the subject line "GDPR Request." We will respond within 30 days (extendable by an additional 60 days for complex requests, with notice).
Nural does not currently maintain a designated EU or UK representative. EU and UK residents may contact us directly at the email above.
We take reasonable technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include:
No method of transmission over the internet or storage is 100% secure. While we work to protect your information, we cannot guarantee absolute security. You are responsible for protecting your own account credentials.
Nural's services are intended for businesses and adults. We do not knowingly collect personal information from children under the age of thirteen (13) (or under sixteen (16) where applicable under GDPR). If you believe we have collected information from a child, please contact us at hello@nural.studio and we will take prompt steps to delete it.
Client Websites may be operated by Clients whose audiences include or are primarily minors. Each Client is responsible for compliance with applicable children's privacy laws (such as COPPA) for their own Website. Nural does not knowingly enable Client Websites to collect data from children under 13 without verifiable parental consent.
In the event of a data breach affecting your personal information, Nural will:
The Nural website and Client Websites may contain links to third-party websites or services. Nural is not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party site you visit.
We may update this Policy from time to time. The "Last Updated" date at the top of this Policy indicates when it was last revised. Material changes will be communicated by email to Clients with active accounts and/or by a notice on the Nural website at least thirty (30) days before taking effect, where reasonably possible.
Continued use of our services after the effective date of a revised Policy constitutes acceptance of the changes.
For privacy-related questions, requests, complaints, or to exercise your rights, contact:
Nural
Email: hello@nural.studio
Subject lines for requests:
We will respond within the timeframes required by applicable law.
By using our services or visiting a Client Website, you acknowledge that you have read and understood this Privacy Policy.