Privacy policy

This policy explains how Nuro AI Labs Limited("Nuro AI Labs", "we", "us", "our") collects, uses, retains and protects personal data when you visit nuroailabs.com or otherwise interact with us as a company. It is written to be readable and to align with the UK GDPR and the Data Protection Act 2018.

This policy covers this website and our public-facing surfaces (press, careers, hello inboxes). Each of our products — Hypersave, Khyaa, Nuro Chat, Nuro Studio, Nuro One — publishes its own product-specific privacy notice and data-processing addendum. Those govern data processed inside the product, and they take precedence over this policy for that data.

1 · Who we are

Nuro AI Labs Limited is a private limited company registered in England and Wales under Companies House #16079959, with registered office at 128 City Road, London EC1V 2NX, United Kingdom. We are the data controller for personal data processed via this site.

To contact our privacy function: privacy@nuroailabs.com.

2 · What we collect via this site

This website is intentionally minimal in its data collection. We collect the following:

• Email correspondence. When you email hello@nuroailabs.com, press@nuroailabs.com, careers@nuroailabs.com or any other Nuro AI Labs address, we store your message, your email address, and any attachments you choose to send so we can respond.
• Server logs. Our hosting provider records standard request metadata (IP address, user agent, referrer, timestamp, response status). We use this to operate the site, debug issues and mitigate abuse. Logs are retained for 30 days and then deleted on a rolling basis.
• No analytics, no advertising trackers, no third-party cookies. This site ships no Google Analytics, Meta Pixel, Plausible, PostHog or comparable tracker. We do not fingerprint visitors. We do not sell, rent or share visitor data with advertising networks.
• Job applications. If you apply to a role via careers@nuroailabs.com, we process the CV, cover material and any references you provide for the purpose of evaluating your application. See "Retention" below.

3 · How we use it

We process the data above only for the purposes for which you provided it:

• To respond to correspondence and follow up on your enquiry.
• To operate, debug and secure the website.
• To evaluate, communicate about, and (if applicable) onboard you for a role.
• To meet legal, accounting and regulatory obligations.

Lawful basis (UK GDPR Art. 6). We rely on (a) legitimate interests for operating the site, replying to correspondence, securing the service and recruitment screening; (b) consent where you actively opt in (e.g. subscribing to a newsletter, where offered); and (c) legal obligation for retention required by law.

4 · Your rights (UK GDPR)

You have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (the "right to be forgotten") where applicable.
• Restrict processing, where you contest accuracy or object to processing.
• Object to processing based on legitimate interests.
• Data portability — receive your data in a structured, commonly-used, machine-readable format.
• Withdraw consent at any time, where processing is consent-based.

To exercise any of these rights, email privacy@nuroailabs.com. We respond within one calendar month, as required by Art. 12(3) UK GDPR.

Right to complain.You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk. We'd appreciate the opportunity to address your concern first, but it's your right and we will not obstruct it.

5 · Retention

• Server logs: 30 days, rolling.
• Email correspondence: up to 24 months from last contact, then deleted unless an active matter requires longer.
• Job applications: 12 months from the application date for unsuccessful applicants, unless you ask us to keep it longer for future opportunities.
• Statutory records (tax, accounting, contracts): per UK statutory minimums (typically 6 years).

6 · International transfers

Our hosting and email infrastructure may process data in jurisdictions outside the United Kingdom (primarily the European Economic Area and the United States). Where we transfer personal data outside the UK, we rely on either an adequacy decision under UK GDPR or the UK International Data Transfer Agreement / EU Standard Contractual Clauses with the UK Addendum, with supplementary measures where appropriate.

7 · Cookies

This website does not set non-essential cookies. We do not display a cookie banner because there is nothing to consent to. The only browser storage used is for transient session state (e.g. theme preference) and is strictly necessary for the site to function — exempt from consent under PECR Reg 6(4).

8 · Security

We apply technical and organisational measures appropriate to the risk of processing — encrypted transport (HTTPS), restricted access, hardened mail infrastructure, separation of duties for production systems. For security disclosures see responsible disclosure.

9 · Children

This site is not directed at children under 13 (or 16, in jurisdictions where that is the lower age of digital consent), and we do not knowingly collect personal data from them.

10 · Changes to this policy

We will update this policy when our practices change. The date at the top of the page is authoritative. Material changes will be flagged on this page for a reasonable period before they take effect.

11 · Contact

privacy@nuroailabs.com
Nuro AI Labs Limited
128 City Road
London EC1V 2NX
United Kingdom