Who we are
Nabbly provides software for tradespeople to capture work, track leads, manage jobs, send quotes and invoices, and stay organised between jobs. For the personal data described in this notice, Nabbly is the data controller unless this policy says otherwise.
If you use Nabbly to store information about your own customers, suppliers, or staff, you are usually the controller of that business data and Nabbly acts as your processor in providing the service to you.
What we collect
Depending on how you use Nabbly, we may collect the following categories of personal data.
Account and profile details
Name, email address, phone number, organisation name, plan tier, trade type, region, and account settings.
Billing and subscription data
Stripe customer IDs, subscription IDs, billing status, and plan selection. Full card details are handled by Stripe, not stored by Nabbly.
Website and waitlist data
Email addresses and related information you submit through our website, including waitlist and launch interest forms.
Lead, customer, job, quote, and invoice data
Contact names, phone numbers, email addresses, addresses, job descriptions, notes, quote values, invoice data, and activity history.
Location, Bluetooth, and van workflow data
Location data used for nearby supplier features, background location during Van Mode where enabled, and limited device or connection-state data needed to support in-van workflows.
Voice capture data
Audio you intentionally record, transcripts, parsed command data, and limited wake-word feedback data used to improve hands-free capture.
Photo and image capture data
Photos of handwritten notes, lists, or job information that you choose to capture or upload for extraction.
Device, app, and support data
Push tokens, notification preferences, app version, device information, crash data, bug reports, and optional screenshots you submit.
Communications and integrations
Email sending data, SMS and calling data where comms features are enabled, and accounting sync data where you connect Xero.
How we use your data
We use personal data to run and improve Nabbly, including to:
- create and manage user accounts and organisations;
- manage waitlist signups and launch interest from our website;
- capture, organise, and display leads, jobs, tasks, quotes, invoices, and reminders;
- process voice notes, voice commands, and image captures into structured information;
- power Van Mode, including hands-free workflows and nearby supplier features where enabled;
- send transactional emails, notifications, invoices, and quote links;
- process subscriptions, reconcile billing status, and prevent abuse of paid features;
- sync data with third-party services you connect, such as Xero;
- respond to bug reports, support requests, and security issues;
- monitor reliability, diagnose crashes, and understand product usage.
Our main lawful bases under UK data protection law are contract, legitimate interests, and where relevant consent. For example, we rely on contract to deliver the service you signed up for, legitimate interests to secure and improve the platform, and consent where device permissions or specific optional features require it.
Your customers' data in Nabbly
Many Nabbly users store information about their own customers, including names, phone numbers, email addresses, job addresses, notes, quote details, invoice details, and communications history. That data belongs to the Nabbly user or organisation that uploaded it.
If you are a Nabbly user, you are responsible for making sure you have a lawful basis to collect and use your customers' data and for giving them any privacy information you are required to provide. We process that data on your instructions in order to provide the service.
Voice, image, and Van Mode data
Nabbly includes voice and image capture features so users can work quickly on site or between jobs. When you choose to record audio or capture an image, that content may be processed to extract tasks, jobs, quotes, leads, or other structured business information.
- Voice captures you start yourself may be processed into transcripts and structured results.
- Hands-free Van Mode may process audio for wake-word and command handling where a user has actively enabled that feature.
- Images you choose to take or upload may be processed to read handwritten notes, whiteboards, lists, or customer details.
- Location may be used for nearby supplier suggestions and related van workflow features.
Because these features can involve personal data about users, customers, and people nearby, we aim to minimise retention where we can and to keep these features permission-based and opt-in at the device level.
Who we share data with
We share data only where needed to operate Nabbly, support your chosen features, or comply with the law.
- Supabase for database, authentication, file storage, and website waitlist submissions.
- Google Cloud Vertex AI for voice and image processing.
- Stripe for billing, subscriptions, and payment processing.
- Resend for transactional email sending.
- Xero if you choose to connect accounting sync features.
- Twilio if SMS or calling features are enabled for your organisation.
- Sentry for crash and error monitoring where enabled.
- PostHog for product analytics where enabled.
- Expo for app delivery and push-related infrastructure.
- Railway / n8n for workflow automation and operational processes.
Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as contractual protections and the provider's UK or EU transfer mechanisms.
How long we keep data
We keep personal data for as long as needed to provide Nabbly, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type.
- Account, organisation, billing, lead, job, quote, invoice, and activity data are generally kept while the account remains active and for a reasonable period afterwards where needed for legal, accounting, or support reasons.
- Voice session transcripts older than 30 days are scheduled to be cleared from the `voice_sessions` table while keeping the underlying row for historical counts.
- Wake feedback events containing ambient heard text are scheduled for deletion after 30 days.
- Bug report screenshots may be stored for support and triage, then removed when no longer needed.
If you request account deletion, we will delete or anonymise personal data unless we need to keep specific records for legal, tax, fraud-prevention, or security reasons.
Security
We use technical and organisational measures designed to protect personal data from unauthorised access, loss, misuse, or disclosure. No service can guarantee absolute security, but we work to limit access, secure our infrastructure, and reduce unnecessary retention.
Your rights
Depending on where you are and the circumstances, you may have the right to:
- ask for access to the personal data we hold about you;
- ask us to correct inaccurate or incomplete information;
- ask us to delete your data in some situations;
- object to or restrict certain processing;
- ask for a portable copy of certain data;
- withdraw consent where processing relies on consent.
If you are a customer of a tradesperson who uses Nabbly, your request may need to be handled by that tradesperson first because they control the customer record they entered into Nabbly.
Contact and complaints
For privacy questions or requests, contact us at hello@nabbly.co.uk.
If you are in the UK and you are unhappy with how we handle your data, you can also complain to the Information Commissioner's Office (ICO): ico.org.uk.
We may update this policy from time to time. If we make material changes, we will update the date at the top of this page and, where appropriate, notify users in the app or on the website.