Núvols

1. Who We Are

Núvols is a sole entrepreneurship based in the Valencia Province, Spain. We operate the website nuvols.app and provide tools and services related to Agentic Commerce protocol integrations for e-commerce platforms.

For any privacy-related inquiries, you can contact us through the contact form available on our website.

2. What Data We Collect

We collect the minimum data necessary to provide our services:

• • Email address — collected during the contact form email verification process. Used to verify your identity, respond to your inquiry, and — with your consent — send occasional updates about our products and services.
• • Contact form messages — the subject and message content you submit through our contact forms. Used to respond to your inquiry.
• • Analytics data — we use Google Analytics 4 to collect anonymized usage data such as pages visited, session duration, device type, and approximate geographic location. This data is used to improve our website and services. Google Analytics uses cookies to distinguish users.
• • Feed URLs — Google Shopping feed URLs you enter in the UCP test tool. These are processed in real-time and not stored.

3. How We Use Your Data

• • Email verification — we send a one-time verification code to your email address to confirm your identity before accepting contact form submissions. Verification codes are stored temporarily (up to 60 minutes) in Cloudflare KV and automatically deleted after use or expiration.
• • Contact form processing — your message is forwarded to our team via email. We use Brevo (formerly Sendinblue) as our transactional email provider to send verification codes.
• • UCP testing — feed URLs and store URLs are processed in real-time to perform protocol validation tests. This data is not stored or logged beyond the duration of the request.

4. Data Storage and Security

Our website runs on Cloudflare Workers, a serverless platform that processes requests at the edge. We use Cloudflare KV for temporary storage of email verification codes with automatic expiration (TTL-based deletion).

We use Cloudflare Turnstile as a privacy-preserving CAPTCHA alternative to protect our contact forms from abuse. Turnstile does not use cookies or track users across websites.

We use Google Analytics 4 to understand how visitors use our website. Google Analytics uses cookies to collect anonymized usage data. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

5. Third-Party Services

We use the following third-party services:

• • Cloudflare (USA) — hosting, edge computing, KV storage, email routing, and Turnstile security. Privacy Policy
• • Brevo (France) — transactional email delivery for verification codes. Privacy Policy
• • Google Analytics (USA) — website analytics and usage tracking. Privacy Policy
• • Google Fonts (USA) — web font delivery. Privacy Policy

6. Data Retention

• • Verification codes — automatically deleted after 60 minutes or upon successful verification.
• • Rate limit data — automatically deleted after 1 hour.
• • Contact messages and email addresses — retained indefinitely for the purpose of responding to your inquiry and, if you have opted in, sending occasional product development updates. You may request deletion at any time (see Your Rights below).
• • Analytics data — retained by Google Analytics for up to 14 months, after which it is automatically deleted.
• • Feed and test data — not stored. Processed in real-time only.

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), as a data subject in the European Union, you have the following rights:

• • Right of access — request a copy of your personal data.
• • Right to rectification — request correction of inaccurate data.
• • Right to erasure — request deletion of your personal data.
• • Right to restrict processing — request limitation of processing.
• • Right to data portability — receive your data in a structured format.
• • Right to object — object to the processing of your data.
• • Right to withdraw consent — withdraw your consent at any time.

To exercise any of these rights, please contact us through the contact form on our About page.

8. Marketing Communications

When submitting the contact form, you may opt in to receive occasional emails about our product development and service updates. These communications are infrequent and relevant to Agentic Commerce integrations.

You can unsubscribe from marketing communications at any time by contacting us through the contact form on our About page or by replying to any marketing email with an unsubscribe request.

9. Cookies

Our website uses cookies set by Google Analytics to collect anonymized usage statistics. These cookies help us understand how visitors interact with our website so we can improve it.

No other cookies are used. Cloudflare Turnstile, our security challenge provider, does not use cookies. You can manage or block cookies through your browser settings or by using the Google Analytics Opt-out Add-on.

10. Legal Basis for Processing

We process your personal data based on your explicit consent (Article 6(1)(a) GDPR), which you provide by accepting this Privacy Policy when submitting the contact form. You may withdraw your consent at any time by contacting us. Processing based on consent before withdrawal remains lawful.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.