Privacy policy
Last updated 27 September 2026
Who we are
Nest Ready is a trading name of Repcurve Ltd, a company registered in England and Wales (company 17427637). Registered office: C/O Just Balance Accounting Ltd, 10 Dunsters Avenue, Bury, England, BL8 1EF. For anything about your data, contact us or email hello@nestready.co.uk.
Our two roles
For your account, billing contact, contact-form messages and use of this website, Repcurve Ltd is the controller.
For the drawings, photos and notes your organisation uploads, your organisation is the controller and we are its processor, under the data processing agreement.
What we collect, and why
| What | Why | Lawful basis |
|---|---|---|
| Email address, role, organisation name | Your account and signing in | Contract |
| Drawings, photos, notes and re-run notes | Providing the service | Contract (we act as processor) |
| Contact-form messages: name, email, company, message | Answering you | Legitimate interest |
| A keyed hash of your IP address with each contact message (never the address itself) | Stopping spam | Legitimate interest |
| Error reports | Keeping the service working | Legitimate interest |
| Billing records, held by Paddle, and our summary of them | Billing and tax | Legal obligation and contract |
We do not use analytics or advertising trackers, and we do not sell data.
How drawings are processed
PDF drawings are read by our own software. An AI model is sent the text and outlines we extract, not an image of the page.
Scans, photos and sketches are read by an AI model, which is sent an image of the page and close-ups of its text and numbers. Location and camera data is removed from photos in your browser before they are uploaded.
If you re-run a drawing with a note, the note is sent to the model with it and kept with the drawing.
Every AI request goes through an AI routing service to a provider in your organisation's region (the European Union unless an owner on Production or Enterprise has chosen otherwise). We only allow providers that do not use requests for training. We do not currently require providers to keep nothing: a provider may hold a request briefly under its own terms, for example to detect abuse.
Who processes data for us
We use subprocessors in these categories:
| Category | What it does | Where | What it sees |
|---|---|---|---|
| Hosting and database | Runs the website, the database and sign-in | London, United Kingdom | Account details, job records, notes and contact messages |
| File storage | Holds drawings, photos and output files | London, United Kingdom | Drawings, photos and outputs |
| Drawing processing | Runs our processing software | London, United Kingdom | Drawings and photos while they are processed |
| AI model providers | Read drawings, reached through an AI routing service | European Union by default; elsewhere only if an owner on Production or Enterprise chooses another region | Extracted text and outlines from PDFs; page images and close-ups from scans, photos and sketches; re-run notes |
| Payments | Paddle, our merchant of record: checkout, invoices and tax | United Kingdom and United States | Billing contact, payment details (held by Paddle, never by us) and what was bought |
| Email delivery | Sends sign-in, invitation and contact-form emails | United States | Email addresses and the content of those emails |
| Error monitoring | Collects error reports | Germany, European Union | Technical details of errors. A crash in drawing processing can include fragments of the drawing being processed. |
A list of our subprocessors is available to customers on request: contact us (Privacy and data) or email hello@nestready.co.uk. Owners are told by email 30 days before it changes.
Where data is held
Our database, file storage, website and drawing processor all run in London. Error reports are held in Germany, and AI processing happens in the European Union unless an owner on Production or Enterprise chooses otherwise: the United States region, or "any region", where a provider may run the request outside the UK, EU and US. Our payment and email providers may process data in the United States.
Where data leaves the UK, the transfer relies on the UK's adequacy regulations, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
How long we keep it
| Data | Kept for |
|---|---|
| Drawings, photos, outputs and their notes | 30 days after upload, or the period your organisation's owner sets on Production or Enterprise (1 day to 1 year). Deleted within 15 minutes of that date. |
| Account data | While your account is open, then 90 days |
| Contact messages | 12 months |
| Billing records | 6 years, for tax |
| Error reports | As long as our error-monitoring provider keeps them, at its retention setting |
Staff access
Nest Ready staff open a customer's drawings only to give support. Every such access is recorded with who, when and why, and the record cannot be edited.
Security
- Each organisation's data is kept apart by the database itself, not only by the app.
- Data is encrypted in transit and at rest.
- Files are kept in private storage. Uploads go straight to storage through short-lived signed links, and files come back only through the signed-in app.
- Sign-in is by emailed code or link, so there are no passwords to leak.
Your rights
You can ask for a copy of your data, or ask us to correct it, delete it, restrict or object to its use, or hand it over in a portable form. Contact us or email hello@nestready.co.uk. For drawings your organisation uploaded, we pass the request to your organisation, which decides.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.
Cookies
Our cookie policy lists everything we store in your browser.
Changes
The date at the top shows when this policy last changed. We tell owners by email before a material change takes effect.