Privacy Policy
Last updated: 13 September 2026
Nuzr ("we", "us") is an equipment-inspection service: organisations put scannable labels on their equipment, and anyone who spots a problem can scan a label and report it. This policy explains what personal data is involved, how it is used, and the choices you have.
The two roles we play
When an organisation uses Nuzr to manage its equipment, that organisation decides what is collected through its report and inspection forms. For data submitted through those forms, the organisation is the data controller and Nuzr is a processor acting on its instructions. For data about our own visitors and account holders — this website, staff accounts, billing — Nuzr is the controller.
What we collect
- Problem reports. What you tell us is wrong with a piece of equipment: a category, a description, whether it is safe to use, and — optionally — a photo and your email address. The email is optional and is used only if the organisation's team needs to ask you about your report. No account is created for you.
- Photos. Before a photo leaves your device, our upload process re-encodes it and strips its metadata — including GPS location, device details and timestamps embedded by your camera.
- Inspection records. For inspections, the inspector's name and answers are recorded against the equipment. Third-party inspectors verify their identity with an email address their organisation has authorised.
- Staff accounts. Name, email address and sign-in credentials for organisation staff, managed through our authentication provider (WorkOS).
- Technical data. Standard server logs (IP address, request time) used for security and rate-limiting — for example, limiting how often one device can request photo uploads.
What we don't do
- No advertising, no tracking cookies, no analytics profiles. The only cookies we set are the essential ones that keep staff signed in.
- We do not sell personal data, to anyone, for anything.
- We do not use the content of reports or photos to train AI models.
Who processes data for us
Nuzr runs on a small set of service providers, each bound by their own data-processing terms:
- Amazon Web Services — hosting and storage (London region, eu-west-2).
- WorkOS — staff sign-in and authentication.
- Stripe — billing for organisations. We never see or store card numbers.
- Amazon SES — transactional email, such as fault notifications and verification codes.
How long we keep things
Reports and inspection records are kept for as long as the organisation's account is active — they are the safety history of the equipment. A reporter's email address is removed automatically 90 days after the report is resolved; the report itself is kept without it. Organisations can answer access and erasure requests directly from their settings, and can have all their data deleted by closing their account.
Your rights
Under UK and EU data-protection law you can ask for access to, correction of, or deletion of your personal data, and you can object to or restrict its processing. If your data was submitted through an organisation's report or inspection form, the quickest route is that organisation — they control it — but you can always contact us and we will help or pass the request on. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
Contact
Questions, requests, or anything unclear: privacy@nuzr.app.
Changes
If this policy changes in a way that matters, we will update this page and its date. We won't quietly weaken it.