1. Who we are

Nurama Ltd ("Nurama", "we", "us", "our") operates the Nurama platform, including Nurama.com and app.Nurama.com (the "Service").

Company details

• Legal entity: Nurama Ltd
• Company number: 16162813
• Registered address: Ground Floor Office, Clarence Court, 5 Dee Road, Richmond, United Kingdom, TW9 2JN
• Contact email: privacy@Nurama.com

Nurama Ltd is the data controller for personal data processed through the Service.

2. What Nurama does

Nurama provides an interface for creative collaboration, asset management, and client communication for visual production workflows.

3. Who this policy applies to

This Privacy Policy applies to:

• Workspace owners and administrators
• Project owners and administrators
• Team members and creators
• Clients and reviewers
• Anyone accessing the Service through an account or via public sharing links

Nurama is used globally by studios, freelancers, and individuals working in visual production.

4. Personal data we collect

Information you provide When you create an account or use the Service, we may collect:

• Name
• Email address
• Account credentials
• Profile information, including profile image
• Authentication data when signing in via Google
• Workspace, project, and role information

Phone numbers are not required to create an account.

Content and collaboration data Users may upload or generate content through the Service, including:

• Video files, images, and other media
• Project files of any type
• Project briefs, references, and notes
• Comments, chat messages, and review feedback
• Activity and collaboration history

Nurama does not require or request sensitive personal data. Any sensitive data included in uploaded content is provided at the user's discretion.

Technical and usage data We automatically collect limited technical data, including:

• IP address
• Device and browser information
• Log files and error data
• Usage activity within the Service

5. How we use personal data

We use personal data to:

• Provide, operate, and maintain the Service
• Enable collaboration between users and clients
• Authenticate users and manage accounts
• Process subscriptions and payments
• Communicate service updates and respond to support requests
• Monitor performance, reliability, and security
• Improve the Service and user experience
• Comply with legal and regulatory obligations

We do not sell personal data.

6. Legal bases for processing

Under UK GDPR and applicable data protection laws, we process personal data based on:

• Contract: Where processing is necessary to provide the Service
• Legitimate interests: To operate, secure, and improve the platform
• Legal obligation: Where required by law
• Consent: Where explicitly requested (for example, certain cookies or communications)

7. Cookies and tracking

Nurama uses cookies and similar technologies to operate and improve the Service.

On Nurama.com, cookies may be used for:

• Website functionality
• Analytics and performance measurement
• Marketing and advertising, including Meta and LinkedIn tracking pixels

On app.Nurama.com, cookies are primarily used to:

• Authenticate users
• Maintain secure sessions
• Support core application functionality

Additional analytics cookies may be introduced within the application. Where required by law, appropriate consent mechanisms will be provided.

8. Marketing and analytics

Nurama may use third-party analytics and advertising tools to understand how users interact with the marketing site and to measure the effectiveness of campaigns. You can manage cookie preferences through browser settings and, where applicable, consent controls provided on the site.

9. Service providers and subprocessors

Nurama uses trusted third-party service providers to operate and support the Service. These providers process data only on our instructions and in line with applicable data protection laws. Current providers include:

• Cloudflare: Content delivery, security, and performance optimisation
• SendGrid: Transactional and service-related email communications
• Stripe: Payment processing (Nurama does not store card details)
• Sentry: Error monitoring and performance diagnostics
• PostHog: Product analytics (planned, not yet active)

We may update or replace service providers where necessary to operate the Service.

10. International data transfers

Nurama operates globally and uses infrastructure that may process data in multiple regions. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including:

• adequacy decisions where applicable, or
• standard contractual clauses or equivalent legal mechanisms

11. AI and automated processing

Nurama does not currently use artificial intelligence or automated decision-making systems to process customer content. If AI-powered features are introduced, they will be designed to:

• Assist users with navigating, understanding, or tracing creative work
• Support search, comparison, organisation, or insight within a workspace
• Preserve authorship, ownership, and creative intent

Nurama does not use customer content to train general-purpose AI models and will not do so without explicit agreement. AI features, where introduced, will be clearly disclosed and governed by this policy and the Terms of Service.

12. Data retention

Nurama retains personal data only for as long as necessary to:

• Provide the Service
• Meet contractual obligations
• Comply with applicable laws

When an account or workspace is cancelled, data is handled in line with legal requirements. Users may request deletion or exercise their rights under data protection law.

13. Your rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion of your data
• Restrict or object to processing
• Receive a copy of your data (data portability)
• Withdraw consent where processing is based on consent

Requests can be made by contacting privacy@Nurama.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

14. Security

We use appropriate technical and organisational measures to protect personal data, including access controls and secure infrastructure.

15. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or via email.