NUA

Privacy Policy

Last updated: July 4, 2026

1. Introduction

NUA Platform ("NUA", "we", "us", or "our") is committed to protecting the privacy of our users and their customers. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our service at nua.cool (the "Service").

By using NUA, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Who This Policy Applies To

This Privacy Policy applies to two distinct groups:

  • NUA users: businesses and individuals who create an account with NUA to manage their WhatsApp customer communications.
  • End customers (leads): individuals who send messages to WhatsApp Business numbers operated by NUA users. NUA processes these messages on behalf of our users, who remain the data controllers of that content.

3. Information We Collect

3.1 Information you provide directly

  • Account information: name, email address, business name, password (hashed)
  • Google account information (when using "Continue with Google"): email, name, profile picture
  • WhatsApp Business Account credentials via Meta's Embedded Signup (phone numbers, access tokens)
  • Payment information (processed by Stripe, we do not store card data)

3.2 Information from end customers

  • WhatsApp messages sent by leads to our users' business numbers
  • Phone numbers of leads
  • Names or profile information leads share with our users

3.3 Information collected automatically

  • Usage data (login times, features used, IP address)
  • Device information (browser type, operating system)
  • Cookies necessary for authentication and session management

4. How We Use Your Information

We use collected information for the following purposes:

  • Provide, operate, and maintain the Service
  • Process WhatsApp conversations using AI to generate responses on behalf of our users
  • Send transactional emails (account confirmation, password reset, notifications about your account status)
  • Process payments and manage subscriptions
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations

We do not sell, rent, or trade your personal data to third parties. We do not use conversation content for advertising or share it with parties other than the essential service providers described in Section 5.

5. Third-Party Service Providers

NUA relies on the following processors, each bound by contractual privacy obligations:

  • Meta Platforms Inc. — WhatsApp Business Cloud API for message delivery. Governed by Meta's Privacy Policy.
  • OpenAI, Anthropic, and similar AI providers — for generating AI responses. Conversation data is processed for immediate response generation and is not used to train foundational models per our provider agreements.
  • Supabase Inc. — database and authentication infrastructure hosted in secure cloud regions.
  • Vercel Inc. — application hosting.
  • Stripe Inc. — payment processing. Card data is handled directly by Stripe (PCI-DSS certified).
  • Resend — transactional email delivery.
  • Google LLC — for users who authenticate via Google OAuth.

6. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), UK, and Switzerland, we process personal data under the following legal bases:

  • Contract: processing necessary to provide the Service you signed up for
  • Legitimate interest: improving the Service, security, and fraud prevention
  • Consent: for optional communications or features requiring explicit consent
  • Legal obligation: tax, accounting, or regulatory compliance

7. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

  • Access: request a copy of the data we hold about you
  • Rectification: correct inaccurate or incomplete data
  • Erasure ("right to be forgotten"): request deletion of your data
  • Restriction: limit how we process your data
  • Portability: receive your data in a machine-readable format
  • Objection: object to processing based on legitimate interest
  • Withdraw consent at any time, without affecting past lawful processing

To exercise these rights, contact us at info@nua.cool. We respond within 30 days.

California residents (CCPA): you have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. NUA does not sell personal information.

Residents of Mexico (LFPDPPP): you may exercise your ARCO rights (Access, Rectification, Cancellation, Opposition) by contacting info@nua.cool.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Account data: retained while your account is active, deleted within 90 days of account termination
  • Conversation data: retained for as long as your account is active or as needed to provide the Service
  • Billing records: retained for the period required by applicable tax and accounting law (typically 5-10 years)
  • Aggregated anonymous analytics: retained indefinitely

9. Security

We implement industry-standard technical and organizational measures to protect your data:

  • Encryption in transit (TLS 1.2+) and at rest
  • Access controls and authentication requirements for our team
  • Regular security reviews and dependency updates
  • Isolated database environments with row-level security policies

However, no security measure is 100% effective. If you become aware of a security concern, contact info@nua.cool immediately.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. When we transfer data outside the EEA/UK, we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

11. Children's Privacy

NUA is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, contact us for immediate deletion.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email to registered users at least 30 days before taking effect. The "Last updated" date above reflects the most recent version.

13. Contact

For questions, requests, or complaints regarding this Privacy Policy or your data, contact us at:

info@nua.cool

NUA Platform · Operated by [BRANDO SAAS]
[SM 46 MZ 1 CANCUN QUINTANA ROO]
RFC: [BBE1708159D2]