Privacy

We are stewards of your information, not owners. You may leave at any time, take your data with you, and owe us nothing.

We only store what is necessary for Nimbus Novem to function as a meaningful space. Nothing more.

• Account information: Email address (for authentication), display name, handle, and avatar you choose to share.
• Content you create: Messages, artifacts, motion content, and anything you intentionally contribute.
• Preferences: Your quiet path settings, atmosphere preferences, and surfaces you choose to avoid.
• Presence patterns: Session rhythm and return cycles — used only to reduce noise, never to manipulate behavior.
• Technical logs: Minimal error logs and rate limiting data for abuse prevention. These are not used for profiling.

These are not aspirational. These are structural decisions we have made and will not change:

• No engagement metrics (time spent, scroll depth, click patterns)
• No social graphs (who you follow, who follows you)
• No emotional scoring or sentiment analysis
• No addiction or retention predictions
• No location tracking beyond what you explicitly share
• No third-party advertising trackers
• No selling or sharing of your data with advertisers

We use your information only to:

• Provide and operate Nimbus Novem services
• Authenticate your account
• Process purchases and payments
• Respond to support requests
• Maintain security and prevent abuse

You own your data. You own your history. You own your work. You own your signals.

You have the right to:

• Export everything you've created at any time
• Request deletion of your account and all associated data
• Leave without penalty, without friction, without guilt

Exports are provided in standard, portable formats. We do not lock you in. Leaving is allowed without explanation.

You have the right to:

• Access your data
• Correct inaccurate data
• Request deletion
• Export your data
• Withdraw consent at any time

To exercise these rights, contact contact@nimbusnovem.cloud.

Not everything here is public. Different surfaces have different visibility:

• Public pages: About, Privacy, Terms are visible to everyone.
• Member-only surfaces: Spot, Motion, Archive, and other spaces are only visible to signed-in members. There is no public feed.
• Witnessing: When you witness something, no public count is shown. Names are only visible when explicitly opened, if at all.
• Quiet Path: A preference signal that reduces motion and overload. It is not a marketing profile. It is not used for targeting.

Nimbus Novem has a feature called Quiet Path Memory. Here's exactly what it does and doesn't do:

What it stores:

• Your preferred session rhythm (short vs. long sessions)
• Surfaces you consistently avoid (so we stop showing them)
• Return patterns (so we welcome you back quietly)

What it never stores:

• Emotional scoring
• Addiction predictions
• Engagement risk assessments
• Public-facing totals

We use minimal third-party services to operate:

• Authentication: Handled through Supabase, which stores only what is needed for secure login.
• Hosting: Our infrastructure providers do not have access to your personal data.
• Payments: Payments are processed through trusted providers such as Stripe. Nimbus Novem does not store or have access to full payment details.

We do not use analytics platforms that track behavior. We do not embed social media trackers. We do not show ads.

We use only essential cookies required for authentication and basic functionality. We do not use:

• Marketing cookies
• Analytics cookies
• Third-party tracking cookies

Your data is encrypted in transit and at rest. We implement industry-standard security practices and regularly review our systems.

If a security incident occurs, we will notify affected users promptly and transparently. We do not hide breaches.

In the event of a confirmed data breach affecting your personal information, we will notify affected users without undue delay and within 72 hours of confirmation, in accordance with applicable law.

Nimbus Novem is available to users 16 years and older. Certain features — selling, adult content, and age-gated events — are restricted to users 18 and older. We do not knowingly collect personal information from anyone under 16. If you believe a user under 16 has registered, please contact us and we will remove the account.

We keep only what is needed to operate. When you delete your account, we remove your data. We do not retain shadows of you for later use.

Some technical logs may persist briefly for security and abuse prevention, but these are not tied to your identity after deletion.

If we change this privacy policy, we will notify you. Changes will never retroactively reduce your rights or protections.

We will not suddenly start tracking things we said we wouldn't track. If our principles change, we have failed.

If we make material changes to how we process your data, we will notify you and may ask you to re-consent before the changes take effect. You may withdraw consent and delete your account at any time.

Nimbus Novem operates in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) where required.

We process your data under the following legal bases: performance of contract (account creation, content storage), legitimate interests (security, abuse prevention), and consent (optional features you opt into). You may withdraw consent for optional features at any time.

Your data is stored on servers operated by Supabase (database) and Vercel (application hosting), both in the United States. If you access Nimbus Novem from outside the US, your data will be transferred to and processed in the US. We rely on standard contractual clauses and applicable adequacy frameworks for lawful cross-border transfers.

For privacy-specific requests — access, correction, deletion, export, or withdrawal of consent — contact:

contact@nimbusnovem.cloud