NebulaGraph Cloud Privacy Policy
Last Updated: [May 28th, 2026]
1.Introduction
This Privacy Policy describes how VESOFT Company Limited (“NebulaGraph,” “we,” “us,” or “our”) collects, uses, discloses, and protects Personal Information in connection with:
• The NebulaGraph Cloud platform and related services;
• Our websites, customer portals, APIs, SDKs, and documentation; and
• Sales, marketing, customer support, and related business operations.
This Privacy Policy applies to Personal Information collected from website visitors, prospective customers, trial users, customers, authorized users, business partners, and event attendees.This Privacy Policy does not apply to Customer Content processed byNebulaGraph solely on behalf of customers pursuant to customer agreements. In such circumstances, NebulaGraph acts as a service provider or processor.
This Privacy Policy applies to users and residents of the United States of America. Individuals residing in the European Economic Area (EEA), the United Kingdom, or the People’s Republic of China shall not rely on this Policy and are subject to the separate privacy policy applicable to their respective jurisdiction.
2.Information We Collect
We may collect the following categories of Personal Information:
Contact and Account Information
• Name;
• Business email address;
• Phone number;
• Employer or organization name;
• Account credentials; and
• Billing information.
Usage and Device Information
• IP address;
• Browser type;
• Operating system;
• Device identifiers;
• Log files;
• Usage activity; and
• Diagnostic information.
Communications and Marketing Information
• Support requests and communications;
• Event registrations;
• Newsletter subscriptions; and
• Marketing preferences.
Customer Content Metadata
We may collect limited operational metadata related to customer use of NebulaGraph Cloud, such as:
• Cluster configuration;
• Usage statistics;
• System telemetry; and
• Performance diagnostics.
We do not intentionally collect sensitive Personal Information. We will process sensitive Personal Information only where required by applicable law or where reasonably necessary to provide our services, and will handle such information in accordance with applicable data protection laws.
3.How We Use Information
We use Personal Information to:
• Provide, operate, and maintain NebulaGraph Cloud;
• Authenticate users and manage accounts;
• Process subscriptions and payments;
• Deliver customer support and technical assistance;
• Monitor service performance, reliability, and security;
• Detect fraud, abuse, and unauthorized activity;
• Improve products and services;
• Communicate with users regarding services, updates, and marketing;
• Comply with legal obligations; and
• Protect the rights, systems, and business operations of NebulaGraph.
We may use operational, diagnostic, telemetry, and usage information to maintain, improve, optimize, and develop NebulaGraph Cloud and related services.
Where required by law, we process Personal Information based on contractual necessity, legal obligations, legitimate interests, and consent.
4.Cookies and Tracking Technologies
NebulaGraph may use cookies, analytics technologies, web beacons, and similar technologies to:
• Maintain user sessions;
• Authenticate users;
• Analyze service performance and usage trends;
• Improve functionality and user experience;
• Protect service security; and
• Deliver and measure marketing communications.
Users may manage cookies through browser settings or applicable cookie preference tools.
5.Sharing of Information
We may disclose Personal Information to:
• Cloud infrastructure and hosting providers;
• Payment processors;
• Authentication and identity management providers;
• Customer support, analytics, and communication providers;
• Professional advisers and auditors;
• Government authorities where required by law; and
• Successors or counterparties in mergers, acquisitions, or corporate transactions.
NebulaGraph may engage third-party service providers and subprocessors to support the operation of NebulaGraph Cloud.
Such providers are authorized to process Personal Information only as necessary to provide services to NebulaGraph and are subject to contractual confidentiality and data protection obligations.
NebulaGraph does not sell Personal Information for monetary consideration.
6.Customer Content
Customers are responsible for determining what Personal Information is included in Customer Content. NebulaGraph may collect and process operational, telemetry, and diagnostic information that does not identify Customer Content for service administration, security, support, analytics, and product improvement purposes.
NebulaGraph processes Customer Content solely in accordance with customer instructions, contractual commitments, and applicable law.
Customers are responsible for:
• Providing required notices and obtaining necessary consents;
• Configuring appropriate access controls;
• Managing retention settings; and
• Determining the lawful basis for processing Customer Content.
7.International Transfers
Personal Information may be transferred to and processed in the United States and other jurisdictions where NebulaGraph or its service providers operate, as necessary to deliver, maintain and enhance the service.
Where required under applicable law (including CCPA/CPRA, CDPA, CPA), NebulaGraph implements appropriate safeguards for cross-border transfers of Personal Information, including contractual protections and other lawful transfer mechanisms. All overseas recipients are bound by strict confidentiality and data protection obligations, and all cross-border transfers are limited to the purposes disclosed in this Policy.
Anonymized, de-identified, and aggregated data that does not identify an individual may be transferred and used globally without restriction.
8.Data Retention
We retain Personal Information for as long as reasonably necessary to:
• Provide services;
• Comply with legal obligations;
• Resolve disputes;
• Enforce agreements; and
• Protect legal rights and security interests.
Retention periods may vary depending on the nature of the information, legal requirements, contractual commitments, and operational needs.
Following termination of services, Customer Content may be deleted in accordance with applicable agreements and service retention policies.
9.Security
NebulaGraph implements administrative, technical, and organizational safeguards designed to protect Personal Information, including:
• Encryption in transit and at rest;
• Access controls and least-privilege restrictions;
• Multi-factor authentication;
• Logging and monitoring;
• Vulnerability management;
• Security incident response procedures; and
• Employee confidentiality and security training.
NebulaGraph Cloud may support additional security features such as role-based access controls, audit logging, and customer-configurable network access controls.
No security measure is completely infallible, and NebulaGraph cannot guarantee absolute security.
10.Your Privacy Rights
Depending on your jurisdiction, you may have rights to:
• Access your Personal Information;
• Correct inaccurate information;
• Delete Personal Information;
• Obtain a portable copy of Personal Information;
• Withdraw consent where applicable; and
• Exercise additional rights available under applicable privacy laws.
California residents may have additional rights under the CCPA/CPRA.
To exercise privacy rights, contact us at [legal@vesoft.com].
11.Children’s Privacy
NebulaGraph Cloud is intended for business and enterprise use and is not directed to children.
We do not knowingly collect Personal Information from individuals under the age required by applicable law.
12.Contact Us
VESOFT Company Limited 10080 N. Wolfe Road, Suite 200 Cupertino, CA 95014, USA
Email: [legal@vesoft.com].]
NebulaGraph may update this Privacy Policy from time to time. Material changes will be posted on our website or communicated through appropriate channels.
This Privacy Policy is effective as of [Month Day, 2026].
