Nuncily handles work that matters to the businesses we serve, and often to their own clients. Accountancy practices trust us with records, documents and conversations, and we treat that trust as the foundation of the product. This policy explains, in plain language, what personal data we handle, why, where it lives, and the control you have over it.
In short
- Your data stays in the UK. The Nuncily service is hosted on Amazon Web Services in London. Files, records and conversations are stored and processed there.
- It is encrypted. Data is encrypted in transit and at rest, including every file and the database behind the service.
- It is never used to train AI models. Our AI runs on Amazon Bedrock in the London region. Your prompts and documents are not used to train any model, are not shared with the companies that make the models, and are not kept by the AI service after a request is processed.
- We never sell personal data, and we don't use advertising or tracking cookies.
- We follow UK data protection law, including the UK GDPR and the Data Protection Act 2018, and the EU GDPR where it applies.
Who we are
Nuncily is an AI execution layer for business operations. It takes a request from the first message to a finished outcome: it asks for what's needed, checks what comes back, updates the systems the work depends on, and brings in a person only when judgment is required.
Our mission is simple: give it to us, and we'll take it from here. We want businesses to hand over routine operational work with complete confidence that it will be done properly and handled carefully.
Nuncily is operated by Icosphere Pvt Ltd ("Nuncily", "we", "us"). For any question about this policy or your data, contact us at support@nuncily.com.
Our two roles
How we handle personal data depends on whose data it is.
When you use our website or talk to us, we decide how your data is used, so we are the controller. This policy covers that data.
When a business uses the Nuncily service, that business — for example an accountancy practice — decides what data is processed and why. The business is the controller and Nuncily is its processor. We process that data only on the business's documented instructions, under a data processing agreement that meets Article 28 of the UK GDPR. If you are a client of a business that uses Nuncily, that business's own privacy notice applies to you, and we will help them respond to any request you make.
What we collect
Information you give us. When you book a demo or contact us, we collect your name, work email address, company name, and anything else you include in your message.
Customer account information. When a business signs up, we collect the contact and billing details of the people who manage the account.
Data processed in the service. On a customer's behalf, Nuncily handles the documents, records and conversations that a process requires — for example the information an accountancy practice collects from its clients for a quarterly filing. We only access what the customer has connected and permitted, system by system and action by action.
Website usage. Our website does not use advertising or tracking cookies. Where we measure traffic, we use privacy-friendly analytics that set no cookies and do not identify individual visitors.
How we use it
We use personal data only for clear, specific purposes, each with a lawful basis under the UK GDPR:
- To deliver the service a customer has signed up for — performance of a contract, and the customer's instructions where we act as processor.
- To reply to enquiries and arrange demos — our legitimate interest in responding to people who contact us.
- To run, secure and improve the service, including preventing misuse and keeping an audit trail of every action Nuncily takes — legitimate interest, and the customer's instructions.
- To meet legal obligations, such as keeping financial records.
We don't use personal data for automated decisions that have legal or similarly significant effects on you. Where judgment is needed, a person makes the decision.
How our AI handles your data
The AI behind Nuncily runs on Amazon Bedrock, inside AWS's London region. It is not a public AI tool, and your data is never sent to a consumer AI service. Under AWS's commitments for Bedrock:
- prompts, documents and outputs are not used to train any AI model;
- they are not shared with the model providers;
- they are not stored by Bedrock after a request is processed.
This is the same contractual and technical basis as storing a file in Amazon S3. It's the model accountancy practices already rely on with the cloud tools they use every day.
Where your data is stored
Customer data is hosted and processed in the United Kingdom, in AWS's London region. Files are held in private, encrypted storage, and the database is encrypted too.
Should any processing outside the UK ever become necessary, for example to provide support, we only allow it with the safeguards UK law requires, such as the UK International Data Transfer Agreement or an adequacy decision. Customers are told in advance.
How we protect it
Security is designed into how Nuncily works, not added afterwards:
- Encryption in transit and at rest, with managed encryption keys.
- Scoped permissions. Nuncily can only do what a customer has explicitly permitted, per system and per action.
- A full audit trail of what was read, what was changed, and when.
- Restricted access. Only the people who need access to run the service have it, and they are bound by confidentiality.
- Human escalation. Anything outside Nuncily's permissions, or anything ambiguous, goes to a person rather than being guessed.
You can read more on our Security page. If a personal data breach ever affects you, we will notify affected customers without undue delay, and the Information Commissioner's Office within 72 hours where the law requires it.
Who we share it with
We don't sell, rent or trade personal data. We share it only with carefully chosen service providers that help us run Nuncily, under contracts that require them to protect it and to use it only on our instructions:
- Amazon Web Services — hosting, storage and AI processing, in the UK.
- Our email provider — to deliver enquiries and account emails.
We may also disclose data where the law requires it, or to protect the rights and safety of our customers, our users or the public. Customers can ask us for the current list of sub-processors at any time.
How long we keep it
We keep personal data only as long as we need it:
- Enquiries and demo requests: up to 24 months after our last contact, unless you become a customer.
- Customer data in the service: for as long as the customer's agreement is in place. When it ends, the customer can export their data, and we delete it within 30 days unless the law requires us to keep it.
- Account and billing records: as long as UK law requires for tax and accounting purposes.
Your rights
Under UK and EU data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to how we use it;
- receive your data in a portable format;
- withdraw consent at any time, where we rely on it.
To use any of these rights, email support@nuncily.com. We respond within one month. If your data is processed by a business that uses Nuncily, contact that business first. We'll support them in answering you.
If you're not satisfied with how we've handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local data protection authority. We'd appreciate the chance to put things right first.
If you're in the United States
We do not sell personal information, and we do not share it for cross-context behavioural advertising. Depending on your state, you may have the right to know what personal information we hold, to have it deleted or corrected, and not to be treated differently for exercising those rights. Contact us at support@nuncily.com to make a request.
Children
Nuncily is a business service and is not directed at children. We do not knowingly collect personal data from anyone under 16.
Changes to this policy
When our practices change, we'll update this page and the date at the top. If a change is significant, we'll tell our customers directly before it takes effect.
Contact us
Questions, requests or concerns about privacy: support@nuncily.com.