RohariGroup LTD

Nzuko AI Privacy Policy

Last updated: September 3, 2026

Nzuko AI helps approved communities and teams turn authorised WhatsApp, Telegram and imported conversations into reports, action items and voice-note summaries. This policy explains what data we collect, how we use it, and how we protect it.

What we collect

How we use data

Our role and lawful use

RohariGroup LTD is the controller for account administration, service security, billing and customer support. When a business or organisation uses Nzuko AI to process its authorised conversations, that customer normally decides why the content is processed and RohariGroup LTD normally acts as its processor. The customer must identify and document an appropriate lawful basis. Consent is not always the appropriate basis, particularly in an employment relationship.

Optional AI processing

Whole-conversation AI reconciliation is off unless it has been enabled for the service and separately authorised by the workspace owner. When authorised, selected conversation text, relevant speaker labels, timestamps and voice-note meanings may be sent to OpenAI to produce a draft report. Nzuko AI removes common email addresses, telephone numbers, web links and platform identifiers and limits the amount of material sent. OpenAI API requests are submitted with storage disabled. AI output is never an official record until a user reviews and approves it.

Do not use Nzuko AI for clinical diagnosis, treatment decisions, medication records, safeguarding records or decisions that produce legal or similarly significant effects. Healthcare mode is limited to administrative operations unless a customer has completed its own lawful-basis assessment, special-category condition assessment and data protection impact assessment.

Third-party services

Nzuko AI currently relies on third-party infrastructure providers, which may process limited data on our behalf, including:

Data retention

Nzuko AI does not save the telephone number entered to request a WhatsApp pairing code. Connected WhatsApp and Telegram services may hold account authorisation data only while the connection remains active. Disconnecting a service removes that connector session and clears its temporary workspace content.

Captured source messages and voice-note transcripts are removed after a draft is created and, in all cases, from Nzuko AI's temporary source buffer after a maximum of 24 hours. Unapproved report drafts expire after 24 hours. Workspace owners choose whether approved reports and their action records are kept for 30, 60 or 90 days; the default is 60 days. Users can erase temporary source data or all operational reports and actions from the workspace. Account, billing and limited security records may be retained where needed to provide the service, prevent fraud or meet legal obligations, subject to backup deletion cycles.

Users may deliberately create a seven-day link to an approved report. Anyone who receives that link can read the approved report until it expires or the workspace user disables it. Shared links do not expose source conversations, drafts or workspace access. Referral links record which existing user introduced a genuinely new verified account so the stated report-credit reward can be applied; self-referrals and repeat rewards are blocked.

Your responsibilities

Workspace owners must use Nzuko AI only with appropriate consent from the relevant group or community members and must not connect private accounts or groups without approval.

Security

We use access controls, authentication, scoped workspace records, and operational logging to protect the service. No system can guarantee absolute security, so users should avoid storing unnecessary sensitive information in recap content.

International processing

Some service providers may process information outside the United Kingdom. Where a restricted transfer applies, RohariGroup LTD will rely on an applicable adequacy regulation or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum, together with an appropriate transfer-risk assessment. Information about applicable safeguards is available on request.

Your rights

Depending on the circumstances, individuals may have rights to access, correct, erase or restrict their information, receive a portable copy, and object to certain processing. Requests should first be directed to the organisation that controls the relevant workspace, or to RohariGroup LTD using the address below. You may also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.

Contact

If you have privacy questions or wish to exercise a data-protection right, contact:

Rohari Group Ltd (Company No. 16978332)
128 City Road
London
United Kingdom
EC1V 2NX
Email: info@roharigroup.com