Privacy Policy

1.Who we are

NUFU CMS Solution LTD (“NUFUCMS”, “we”, “us”) operates the website www.nufucms.com and the NUFUCMS content management platform. We act as data controller for account and website data, and as data processor for the content you store in your workspace.

2.Data we collect

We collect only what is needed to deliver and secure the service.

• Account data: name, work email, company, role and authentication credentials.
• Billing data: plan, billing cadence, invoices and payment status. Card details are handled by our payment processor and never stored on our servers.
• Usage data: log records, IP address, browser and device type, feature usage and API request metadata.
• Support data: messages, attachments and diagnostic information you send us.
• Customer content: the entries, media and configuration you create inside your workspace.

3.How we use your data

• To provide, maintain and improve the NUFUCMS platform.
• To authenticate users, prevent abuse and protect account security.
• To process payments, issue invoices and manage subscriptions.
• To provide support and communicate service, security and billing notices.
• To produce aggregated, non-identifying analytics about product usage.
• To comply with legal, accounting and regulatory obligations.

4.Legal bases for processing

We rely on performance of a contract (providing the service you subscribed to), legitimate interests (service security, product improvement and direct business communication), consent (optional marketing and non-essential cookies) and legal obligation (tax and accounting records).

5.Sharing and sub-processors

We never sell personal data. We share data only with vetted sub-processors who support the service, such as cloud hosting, content delivery, payment processing, email delivery and error monitoring providers. Each sub-processor is bound by contractual confidentiality and data protection obligations. A current sub-processor list is available on request from legal@nufucms.com.

6.International transfers

Where personal data is transferred outside your region, we use appropriate safeguards such as Standard Contractual Clauses. Annual plan customers may request specific data residency for workspace content.

7.Retention

Account and workspace data is retained for the life of your subscription. After cancellation, workspace content is retained for 30 days to allow recovery and export, then permanently deleted. Billing records are kept for the period required by law. Log data is retained for up to 12 months.

8.Security

We apply encryption in transit (TLS 1.3) and at rest (AES-256), role-based internal access controls, least-privilege administration, continuous monitoring, automated backups and periodic penetration testing. No system is perfectly secure, but we notify affected customers without undue delay in the event of a qualifying breach.

9.Your rights

To exercise any right, contact privacy@nufucms.com. We respond within 30 days and may verify your identity first.

• Access a copy of the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure where we have no overriding legal basis to retain it.
• Object to or restrict certain processing activities.
• Request portability of data in a structured, machine-readable format.
• Withdraw consent for marketing communications at any time.

10.Children

NUFUCMS is a business product and is not directed to children under 16. We do not knowingly collect data from children.

11.Changes to this policy

We may update this policy as the service evolves. Material changes are announced by email or in-product notice at least 14 days before they take effect.