Last updated: 2 August 2025
Nessa ("we", "us", "our") is a workplace incident documentation tool. We help people record, organise, and export details of workplace incidents using AI. This policy explains how we handle your data.
Your conversations are sent to Anthropic's Claude API for processing. Anthropic does not use your data to train their models. Your conversations are processed in real time and are not stored by Anthropic beyond what is needed to generate a response. For more details, see Anthropic's privacy policy.
Your data is stored securely using industry-standard encryption. Evidence files are stored in encrypted cloud storage (Cloudflare R2). Your password is hashed using bcrypt and is never stored in plain text.
We use HTTPS for all data transmission. Access to your account is protected by your credentials and, where applicable, email verification.
Only you. Your conversations, incidents, and evidence are private to your account. We do not share, sell, or provide your personal data to any third party for marketing or advertising purposes.
We use the following services to operate Nessa:
Under GDPR (UK/EU) and CCPA (California), you have the right to:
To exercise any of these rights, email us at privacy@nessa-app.com.
We keep your data for as long as your account is active. If you delete your account, all your data, including conversations, incidents, evidence files, and profile information, is permanently deleted within 30 days. We do not keep backups of deleted accounts.
We use essential cookies only: a session cookie to keep you logged in and a beta access cookie during the private beta period. We do not use advertising or tracking cookies. PostHog analytics uses localStorage, not cookies.
Nessa is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us and we will delete it.
We may update this policy from time to time. If we make significant changes, we will notify you via the app or by email. The "last updated" date at the top of this page reflects when the policy was last revised.
Nessa is registered with the Information Commissioner's Office (ICO) under registration number CSN2538921.
If you have any questions about this policy or how your data is handled, email us at privacy@nessa-app.com.
Nessa | Terms of Service