Last updated: 12 February 2026
Nerzo (“Nerzo”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you access or use our website, applications, platform, tools, and related services (collectively, the “Services”).
We process personal data in accordance with the UK General Data Protection Regulation (“UK GDPR”), the EU General Data Protection Regulation where applicable, the Data Protection Act 2018, and other applicable data protection legislation. We are committed to principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.
By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.
For the purposes of applicable data protection law, Nerzo acts as the data controller in respect of personal data collected and processed through the Services.
As data controller, we determine the purposes and means of processing personal data. Where we engage third-party service providers, they act as data processors under contractual obligations consistent with applicable data protection laws.
If you have questions regarding this Privacy Policy or the processing of your personal data, you may contact us at:
This Privacy Policy applies to personal data collected when:
We collect personal data necessary to operate the Services and fulfil contractual obligations. The categories of data we may collect include:
When you create an account, we may collect:
This information is necessary to provide access to the Services and authenticate users.
Payments are processed via Stripe. We do not store full payment card details. We may receive limited billing metadata, such as:
Stripe acts as an independent data controller in relation to payment processing.
We may collect information about how you access and use the Services, including:
This data supports system security, fraud prevention, and service improvement.
You may upload, input, or generate business-related content within the platform. This may include project names, business plans, brand concepts, workflow tasks, campaign information, and AI prompts.
We process such content solely for the purpose of providing and improving the Services.
Users are responsible for ensuring that any personal data included in uploaded content complies with applicable law.
We process personal data under one or more of the following lawful bases:
Contractual Necessity
Processing is necessary for the performance of a contract between you and Nerzo, including:
We may process data where necessary for legitimate business interests, provided such interests do not override your fundamental rights. These interests include:
We may process data to comply with legal obligations, including accounting, tax, regulatory, and fraud prevention requirements.
Where required by law, we rely on consent for certain activities, including non-essential cookies and certain marketing communications. Consent may be withdrawn at any time.
The Services include AI-assisted features that process user inputs to generate outputs.
You acknowledge that:
We do NOT claim ownership of your inputs or outputs. However, AI-generated outputs may be similar to outputs generated for other users.
Users are responsible for reviewing and validating outputs before relying upon them.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.
Retention periods may vary depending on:
When accounts are deleted, personal data is removed from active systems. Certain data may remain in secure backups for a limited period before permanent deletion.
We apply storage limitation principles consistent with applicable law.
We engage third-party service providers to operate the Services. These may include:
All processors operate under written data processing agreements requiring confidentiality, security safeguards, and lawful processing.
We do NOT sell personal data to third parties.
Where personal data is transferred outside the UK or European Economic Area, we ensure appropriate safeguards are in place, including:
We take reasonable steps to ensure data remains protected in accordance with applicable law.
We implement appropriate technical and organisational measures to protect personal data, including:
No system can guarantee absolute security. Users are responsible for maintaining account credential confidentiality.
Subject to applicable law, you have the right to:
To exercise your rights, contact team@nerzo.ai.
We may require identity verification before responding.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).
We do not engage in automated decision-making that produces legal or similarly significant effects without human review.
We may update this Privacy Policy periodically to reflect changes in law, regulation, or platform functionality. Material changes will be communicated appropriately.
Continued use of the Services constitutes acceptance of the revised Policy.
Sign in or create an account.
