Privacy Policy

Nervyn AI Ltd ("Nervyn", "we", "us", "our") operates the Nervyn AI recruiting platform available at nervyn.ai. We are registered in England and Wales.

If you have any questions about this policy, contact us at privacy@nervyn.ai.

We collect data in two ways:

Data you give us directly When you fill in the Book a Demo or Pricing enquiry forms, we collect your name, work email address, agency name, role, team size, annual revenue range, and any notes you choose to include.

Data collected automatically When you visit our website we collect standard server log data including your IP address, browser type, pages visited, and time spent on each page. We use cookies to support this — see the Cookies section below.

Candidate and client data (platform customers) If you are a paying customer using the Nervyn platform, you may upload or sync candidate and client records. You remain the data controller for that data. We process it only on your instruction as a data processor under a Data Processing Agreement (DPA) provided at contract stage.

We use the data we collect to:

• Respond to demo and pricing enquiries
• Set up and manage your Nervyn account
• Deliver and improve the platform
• Send transactional emails (account setup, onboarding, support)
• Send product updates if you have opted in
• Meet our legal and regulatory obligations

We do not sell your data to third parties. We do not use your data for advertising.

We process your personal data on the following legal bases:

• Contract — processing necessary to deliver the service you have requested
• Legitimate interests — responding to enquiries, improving our product, and preventing fraud
• Legal obligation — where we are required to retain data by law
• Consent — for marketing emails, where you have explicitly opted in

You may withdraw consent for marketing at any time by clicking the unsubscribe link in any email or contacting us at privacy@nervyn.ai.

We keep enquiry form data for 24 months from the date of submission, unless you become a customer, in which case it becomes part of your account record.

Active customer data is retained for the duration of your contract and for 12 months after contract end, after which it is deleted or anonymised unless we are required by law to retain it longer.

Server log data is retained for 90 days.

We use a small number of trusted third-party sub-processors to operate the platform. These may include cloud infrastructure providers, transactional email providers, and analytics tools. All sub-processors are contractually bound to process data only on our instruction and to maintain appropriate security standards.

We will never share your data with third parties for their own marketing purposes.

We may disclose data if required by law, court order, or to protect the rights and safety of Nervyn, its customers, or the public.

We use the following categories of cookies and similar technologies on our marketing website:

Strictly necessary — required for the website and platform to function, and to remember your cookie choice. These cannot be disabled.

Analytics — Google Analytics 4 (Google Ireland Ltd) Tells us which pages are visited, where visitors arrive from, and which buttons and forms are used. Cookies set: _ga and _ga_FTSX5NV6SX, both expiring after 24 months. We do not send your name, email address, or form contents to Google, and we do not use Google Analytics for advertising or remarketing.

Session recording — Microsoft Clarity (Microsoft Corporation) Records how you interact with a page — mouse movement, scrolling, clicks and the pages you move between — so we can replay the session and see where the site is confusing. Cookies set: _clck (12 months) and _clsk (1 day). Text you type into forms is masked before it leaves your browser, so we can see that a field was filled in but not what you wrote.

Your choice Analytics and session recording only run if you allow them. If you are in the UK, EEA or Switzerland, nothing is loaded until you choose — we ask on your first visit and remember your answer. You can change or withdraw your choice at any time using the Cookie settings link in the footer of any page, or by clearing this site's data in your browser. Declining does not affect your ability to use the site.

Microsoft Clarity and Google Analytics may transfer data outside the UK/EEA. Both providers rely on the UK/EU Standard Contractual Clauses and, for Microsoft and Google, the EU-US and UK-US Data Privacy Framework.

Under UK GDPR you have the right to:

• Access a copy of the personal data we hold about you
• Rectification of inaccurate or incomplete data
• Erasure ("right to be forgotten") in certain circumstances
• Restriction of processing in certain circumstances
• Data portability — receive your data in a structured, machine-readable format
• Object to processing based on legitimate interests

To exercise any of these rights, contact us at privacy@nervyn.ai. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include encryption in transit and at rest, access controls, and regular security reviews.

No method of transmission over the internet is 100% secure. If you believe your data has been compromised, contact us immediately at security@nervyn.ai.

We may update this policy from time to time. When we make material changes, we will notify customers by email and update the "Last updated" date below. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

For any privacy-related questions or requests:

Email: privacy@nervyn.ai Post: Nervyn AI Ltd, [Registered Address]

For data protection enquiries, you may also contact our Data Protection contact at privacy@nervyn.ai.