Privacy Policy

Who we are

Admock is an ad-creative generator run by Nubri GmbH, Liebenowzeile 22, 12167 Berlin, Germany (info@nubri.co), the controller for the data described here.

What we store

• Your account: email address, a hashed password, whether you confirmed your email, your workspace, plan, credit balance and history, and Stripe customer number. Stripe handles card details.
• What you upload or enter: brand kits (logos, colors, voice), products (descriptions and photos) and your generation settings.
• What we generate for you: images, ad variants and videos, stored with your workspace.
• Contact form: your name, email address and message, sent to us by email.

AI processing

To generate an image or ad, your product photo, product and brand details and the prompt are sent to OpenAI (United States). Videos are made with Amazon Nova Reel on Amazon Bedrock (AWS). Neither uses this API data to train its models.

Why, and on what basis

We process data to provide the service (Art. 6(1)(b) GDPR), and to keep it secure, limit abuse of free credits and see which pages bring visitors (Art. 6(1)(f) GDPR). Free credits are counted per email inbox and network address for that reason.

Who processes data for us

• Amazon Web Services (hosting, file storage, video model, email)
• OpenAI (image generation)
• Stripe (payments)

Transfers to the United States rely on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. We do not sell data.

Retention and deletion

We keep data while your account exists. To delete your account, its uploads and everything generated, email info@nubri.co from your account address; we do it within 30 days. A record that an inbox already received free credits is kept so they are not granted twice. Invoices are kept as tax law requires (up to 10 years).

Cookies and storage

We set no cookies. Your browser's local storage holds your sign-in tokens (if you sign in), a random visitor ID and where you first came from; we record the pages a visit starts on and the sign-up steps. No advertising or third-party tracking.

Server logs

Our web server logs each request: IP address, time, the address requested, the response, and your browser's user agent. We use the logs to keep the service running and secure (Art. 6(1)(f) GDPR); they are deleted automatically after at most 8 days.

Your rights

You can ask for access to, correction, deletion, restriction or export of your data, and object to processing based on legitimate interests: email info@nubri.co. You can also complain to a data protection authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.