Privacy Policy

• We collect account info (name, email, workspace), the document content you upload, and viewing telemetry.
• We never train AI models on your content.
• You can export or delete your data at any time from Settings.
• We honor data-subject rights (access, deletion, portability).
• Data is encrypted in transit (TLS 1.3) and at rest by our infrastructure providers.

Account data: the workspace owner's name, email, and workspace name.

Content: the documents, rooms, links, and agreements you create, plus metadata about how they're used.

Usage: visits, page-by-page views, time on page, country-level geolocation, device and browser, and deterrence signals (e.g. copy/print attempts).

Recipient data: when someone opens a shared link, signs an agreement, or asks a question, we capture the email and engagement data the sender configured.

• To provide the service — authentication, sharing, analytics, and agreements.
• To secure documents — watermarking, access control, and leak traceability.
• To notify you — transactional emails about views, questions, and activity.
• To meet legal obligations.

We share data only with the subprocessors required to run the service (hosting, storage, email delivery, and analytics). We don't sell data, and we don't use it for advertising.

You can access, correct, export, or delete your data at any time from Settings. For requests, email privacy@nurvia.app. We respond within 30 days.

We keep your data as long as your workspace is active. After deletion, data is removed from live systems, with backups expiring shortly after.

The Nurvia Data Room is not directed at children under 13 (or under 16 in the EU), and we don't knowingly collect their data.

Nurvia operates in the US and EU. Transfers outside your region are governed by Standard Contractual Clauses and additional safeguards as required.

Data Protection Officer: dpo@nurvia.app.