Skip to content
Legal

Privacy Policy

Last updated: February 15, 2026

Nella Labs (“Nella”, “we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (getnella.dev), our platform, CLI tools, and related services (collectively, the “Service”).

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

  • Account information: name, email address, and authentication credentials when you create an account or join our waitlist.
  • Payment information: billing details processed securely through Lemon Squeezy. We do not store your full credit card number on our servers.
  • Communications: any information you provide when contacting us for support or feedback.

1.2 Information Collected Automatically

  • Usage data: pages visited, features used, timestamps, and interaction patterns.
  • Device information: browser type, operating system, IP address, and device identifiers.
  • Analytics: we use Vercel Analytics to collect anonymized performance and usage metrics.

1.3 Code and Workspace Data

When you use the Nella MCP server or CLI, code diffs and validation metadata may be processed to provide the Service. We process this data transiently and do not retain your source code beyond what is necessary to deliver results. No code is shared with third parties.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service.
  • Process transactions and manage your subscription.
  • Send transactional emails (account confirmations, billing receipts, security alerts).
  • Respond to support requests and communicate with you.
  • Monitor and analyze usage trends to improve the Service.
  • Detect, prevent, and address fraud, abuse, or technical issues.
  • Comply with legal obligations.

3. Third-Party Services

We use the following third-party services that may receive or process your data:

Supabase

Authentication and database hosting.

Privacy Policy

Lemon Squeezy

Payment processing and subscription billing.

Privacy Policy

Vercel

Hosting and analytics.

Privacy Policy

Google Cloud Platform

Infrastructure and cloud services.

Privacy Notice

4. Cookies and Tracking

We use essential cookies for authentication and session management. We use Vercel Analytics for anonymized, privacy-friendly usage metrics. We do not use third-party advertising cookies or trackers.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance).

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Object to or restrict processing of your data.
  • Request data portability.
  • Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, please contact us at support@getnella.dev.

7.1 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information.

7.2 European Economic Area (GDPR)

If you are in the EEA, we process your data based on legitimate interests (providing and improving the Service), contractual necessity, and your consent where applicable. You have the right to lodge a complaint with your local data protection authority.

8. Children’s Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: