nule.ai

1. Who we are

Nearfield AI ("we", "us", "our") operates Nule (available at nule.ai), an AI-native business ledger designed for UK tradespeople. We are a company registered in the United Kingdom.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Nearfield AI is the data controller for the personal data we collect through Nule.

2. What data we collect

We collect and process the following categories of data:

Account information

• Email address (for account creation, waitlist registration, and communications)
• Name and business name (if provided)

Business data

Data you enter into Nule to manage your business, including:

• Jobs and job descriptions (including location, client details, notes)
• Expenses and transactions (amounts, suppliers, payment methods, receipts)
• Invoices and quotes
• Client records (names, addresses, contact details, notes)
• Materials and specifications
• Mileage and travel records
• Time entries and calendar events

Device and usage data

• Device type, operating system, and browser information
• IP address
• Usage patterns and feature interactions
• Error logs and performance data

Location data

• Job site locations you enter
• Device location (only when you explicitly provide it for mileage tracking or job records)

3. How we use your data

We use the data we collect for the following purposes:

• Providing the service: storing and displaying your business records, generating invoices, tracking expenses and jobs
• AI-powered insights: processing your business data with artificial intelligence to provide contextual answers, suggestions, and business intelligence (e.g. "What materials did I use at the Johnson house?", "How much have I spent on copper this month?")
• Service improvement: understanding how features are used to improve and develop the product
• Communications: sending service-related emails including updates, security notices, and support responses
• Security and fraud prevention: protecting accounts and detecting abuse

4. Lawful basis for processing

Under UK GDPR, we rely on the following lawful bases:

• Contract: processing necessary to provide Nule to you as a registered user (Article 6(1)(b))
• Legitimate interests: improving our service, ensuring security, and providing AI-powered insights that enhance your experience (Article 6(1)(f))
• Consent: where you opt in to waitlist communications or marketing emails (Article 6(1)(a))

5. AI processing

Nule uses artificial intelligence to process your business data. This means your jobs, expenses, transactions, and other records are analysed by AI models to:

• Understand natural language queries about your business
• Provide contextual answers and insights
• Suggest autocomplete entries and categorisations
• Generate summaries and reports

Your data is processed to serve you and is not used to train general-purpose AI models. AI processing is a core part of the service you sign up for.

6. How we store your data

Your data is stored securely on Amazon Web Services (AWS) infrastructure, using DynamoDB as our primary database. Data is encrypted in transit (TLS) and at rest (AES-256). We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or destruction.

We retain your data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where we are required by law to retain it (e.g. financial records required under HMRC regulations).

7. Who we share data with

We do not sell your personal data to third parties.

We may share data with the following categories of service providers who process data on our behalf:

• Cloud infrastructure: Amazon Web Services (AWS) for data storage and computing
• AI providers: for natural language processing capabilities (data is processed, not stored, by these providers)
• Email services: for transactional and service communications

All third-party processors are bound by data processing agreements and are required to protect your data to standards consistent with UK GDPR.

We may also disclose data where required by law, regulation, or legal process.

8. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your data ("right to be forgotten")
• Restriction: request that we limit how we process your data
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interests
• Withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at privacy@nule.ai. We will respond within one month as required by UK GDPR.

9. Cookies

Nule uses essential cookies and local storage to maintain your session and preferences. We do not use third-party advertising or tracking cookies.

10. International transfers

Your data is primarily stored within AWS regions. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the Information Commissioner's Office (ICO).

11. Children

Nule is a business tool designed for tradespeople and is not intended for use by individuals under the age of 18. We do not knowingly collect data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the app. The "effective date" at the top of this page indicates when the policy was last revised.

13. Contact us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

Nearfield AI
Email: privacy@nule.ai

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.