Witnessed is a product of NexusSentry AI, a Delaware-registered company. When this policy says "we," "us," or "our," it means NexusSentry AI.
Contact: support@nexussentry.ai
We strive to collect only the information reasonably necessary to provide and improve the Witnessed service.
Witnessed is built around the photos you upload to document condition at move-in, pick-up, move-out, or return.
Important: Photos may contain sensitive information about your property. Only upload what you are comfortable submitting for AI analysis.
We store inspection-related information including:
When you create an account, we collect:
If you use Witnessed without an account, we assign a guest identifier to your browser session. Guest inspection data is associated with this identifier, not an email address. See Section 8 for retention details.
When available from your uploaded photos or browser, we may collect device type, operating system, browser type, and IP address. This information is used for security, abuse prevention, and service improvement only.
When available in your photo's EXIF data or provided by your browser, we may collect approximate GPS coordinates at the time photos were taken. This is included in your condition report as a verification signal confirming where photos were captured. We do not independently track your location at any other time.
Metadata may be unavailable, incomplete, altered, or removed depending on the device, operating system, camera settings, or image editing performed before upload.
Report unlock payments are processed by Stripe. We do not store credit card numbers, CVV codes, or bank account details. We receive only a confirmation of successful payment and an associated reference ID from Stripe.
Pages visited, features used, and interactions with the Witnessed platform. Usage data is analyzed in aggregated or de-identified form to improve the service.
We use your information to provide, secure, improve, and support the Witnessed service, and to comply with applicable legal obligations. We do not sell your personal information or use your photos for advertising or AI model training. We do not use your data for any purpose not described in this policy.
| Information | Purpose |
|---|---|
| Photos | Processed by AI to generate your condition report |
| Inspection details | Included in your PDF condition report |
| Name and email | Account management, report generation, service communications |
| Payment information | Processed by Stripe to unlock your report |
| Device metadata | Security, fraud prevention, service improvement |
| Location metadata | Included in your report as a location verification signal |
| Usage data | Aggregated service improvement and bug fixing |
We do not:
We process your personal data under the following legal bases:
Where we process data based on legitimate interests, you have the right to object. Contact support@nexussentry.ai with the subject line "Objection to Processing" and we will assess and respond promptly.
Witnessed does not verify whether uploaded photographs have been edited, filtered, enhanced, or otherwise modified before upload. Witnessed also does not independently verify that uploaded photographs accurately depict the claimed property, asset, date, time, or condition. Users are solely responsible for ensuring uploaded images accurately represent the condition of the property or asset at the time of inspection.
We share your data only where strictly necessary to provide the service.
Your uploaded photos are transmitted to one or more AI inference service providers to generate observations about visible condition. The AI providers we use are contractually prohibited from using API-submitted data to train their general models. We may change or replace AI service providers without notice, provided doing so does not materially reduce the protections described in this policy.
Report unlock payments are processed by Stripe, Inc. We transmit only the information required to complete the transaction. We do not store card numbers or payment credentials. Stripe's own privacy policy governs their data handling practices.
Your inspection data and reports are stored using commercial cloud infrastructure providers. All data is encrypted in transit and at rest. Infrastructure providers have access to data only as operationally necessary and are contractually bound to protect it.
We may disclose data to law enforcement, regulatory authorities, or courts where required by applicable law, in response to a valid legal process, or where we have a good-faith belief that disclosure is necessary to prevent serious harm, fraud, or illegal activity including child exploitation.
We do not share your data with:
The following categories of service providers process data on our behalf:
| Category | Purpose |
|---|---|
| AI inference services | Generating observations about visible condition from uploaded photos |
| Payment processing | Processing report unlock payments |
| Cloud hosting and storage | Securely storing inspection data and reports |
| Email delivery | Sending transaction receipts and service communications |
We do not currently use third-party analytics services that process personal data.
Reports are private by default.
Access: Only you can access your reports through your Witnessed account dashboard.
Sharing: You decide who receives your report. You may share it by sending the downloaded PDF directly or by sharing a secure report link. Recipients can view the report without creating a Witnessed account.
Acknowledgment: When you share a report link, the recipient may optionally acknowledge receipt. Their name and acknowledgment timestamp are recorded and displayed within your report as additional verification.
We never proactively share your reports with landlords, hosts, property managers, dealers, or any other party. Sharing is always your decision and your action.
| Data Type | Guest (no account) | Registered Account |
|---|---|---|
| Unpaid inspections and photos | 30 days from last activity, then permanently deleted | 30 days from last activity, then permanently deleted |
| Paid inspection reports and photos | 90 days — create a free account to retain permanently | Retained until you delete them or close your account |
| Account information | N/A | While account is active |
| Account data after closure | N/A | 30 days from closure, then permanently deleted |
| Security and abuse logs | Up to 12 months | Up to 12 months |
After the applicable retention period expires, your data is deleted from our active systems. Backup copies are retained only for disaster recovery purposes, are stored in encrypted form, and are automatically overwritten according to our backup retention schedule. Backup systems are isolated from operational access and cannot be queried for individual data retrieval. We do not archive deleted data for any other purpose.
We protect your data using industry-standard security practices including encryption in transit (TLS), encryption at rest, secure session management, one-way password hashing, rate limiting, and least-privilege access controls. Internal access to user data is restricted on a strict need-to-know basis and reviewed periodically. We evaluate our security posture on an ongoing basis and apply updates to address evolving threats.
Security incidents: If we determine that a security incident affecting your personal information requires notification under applicable law, we will notify affected users as required by applicable law.
If you believe your account has been compromised, contact us immediately at support@nexussentry.ai.
You have the following rights over your personal data:
You may request a copy of the personal data we hold about you at any time.
You may request correction of any inaccurate or incomplete personal data we hold.
You may request deletion of your account and all associated personal data. We will process deletion requests promptly. Note that deletion is irreversible — deleted reports cannot be recovered. See Section 7 regarding copies already shared with third parties. Deleted data may remain in encrypted backups for a limited period before being automatically overwritten.
Note: Witnessed condition reports may serve as evidence in property or vehicle disputes. We strongly recommend downloading all your reports before requesting deletion, as deleted records cannot be recovered after account closure.
You may download any of your condition reports as a PDF at any time directly from your account dashboard. No request required.
You may request that we restrict processing of your personal data in certain circumstances — for example, while we are verifying the accuracy of data you have disputed, or while you await the outcome of an objection to processing based on legitimate interests.
Where our processing of your data is based on your consent, you may withdraw that consent at any time by contacting us. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
Email support@nexussentry.ai with the subject line "Privacy Request" and describe what you are requesting. We aim to acknowledge requests promptly and within applicable legal timeframes.
If Witnessed or NexusSentry AI is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to the commitments described in this Privacy Policy. We will notify you of any such transfer and any material changes to how your data is handled as a result.
Witnessed is not intended for use by anyone under the age of 18. We do not knowingly collect, store, or process personal data from minors. Account creation requires users to confirm they are 18 or older.
If you are a parent or guardian and believe a minor has used Witnessed or submitted data through our service, please contact us immediately at support@nexussentry.ai. We will investigate and delete any data associated with a minor promptly upon confirmation.
Witnessed uses a minimal set of cookies required to operate the service.
Used for session management, authentication, security, and fraud prevention. These cookies are required for the service to function. They cannot be disabled without breaking core functionality.
Where used, analytics are first-party only — we do not use third-party analytics services that track you across other websites. Usage data is collected in anonymous, aggregated form to help us understand how the service is used and where to improve it. These cookies do not identify you personally. You can disable them in your browser settings without affecting core service functionality.
What we do not use:
Witnessed is operated from the United States. If you access the service from outside the United States, your data will be transferred to and processed in the United States, which may have different data protection laws than your country of residence.
If you are located in the EEA, you have additional rights under the General Data Protection Regulation including the right to data portability, the right to erasure, the right to restriction of processing, and the right to lodge a complaint with your national supervisory authority. Legal bases for processing are described in Section 4 above. Where we process data based on legitimate interests, you have the right to object by contacting us at support@nexussentry.ai.
California residents have the right to know what personal information we collect and how it is used, the right to delete personal information, the right to correct inaccurate personal information, and the right to opt out of the sale or sharing of personal information. We do not sell, rent, license, or share personal information as defined under California law. To exercise your rights, contact support@nexussentry.ai with the subject line "California Privacy Request."
We respect applicable local data protection laws. If you have questions about how your data is handled under the laws of your jurisdiction, contact support@nexussentry.ai.
Witnessed reports, emails, or platform pages may occasionally contain links to third-party websites or services. We are not responsible for the privacy practices, content, or data handling of those third parties. We encourage you to review the privacy policies of any third-party services before providing personal data to them.
We may update this Privacy Policy from time to time as the service evolves or as legal requirements change.
For material changes — changes that significantly affect how we collect, use, or share your data — we will notify you by email at least 30 days before the changes take effect.
For minor changes — corrections, clarifications, or administrative updates — we will update the "Last Updated" date at the top of this policy.
The most current version of this policy is always available at witnessed.nexussentry.ai/privacy. Continued use of Witnessed after changes take effect constitutes your acceptance of the updated policy.
General Support:
support@nexussentry.ai
Privacy Officer:
support@nexussentry.ai
Subject: Privacy Request
Privacy Requests:
support@nexussentry.ai
Subject: Privacy Request
Security Reports:
support@nexussentry.ai
Subject: URGENT — Security
Effective Date: July 2026 | Version: 1.5 | Terms of Service | witnessed.nexussentry.ai