Privacy notice

Nestly is operated by The Bricksquare, a company incorporated in Singapore, which decides how and why your information is used and is responsible for it. Write to kk@thebricksquare.com for anything on this page.

Your account. Your email address and a password. Your password is handled by our authentication provider and is never stored by Nestly — when you set or change it, it goes from your browser straight to that provider and never passes through a Nestly server or record.

Your household. The people you add and what you tell us about them: names, the legal names as printed on a passport, dates of birth, your relationship to each other, citizenships, and contact details you choose to enter.

Documents you upload. The file itself, and what is printed on it. For identity documents, Nestly records what it reads — the document number, the holder’s name, the date and place of birth, sex as printed, the issuing authority, and the dates of issue and expiry. Tax reference numbers and property details are recorded the same way when they appear.

How you use Nestly. Messages you send, appointments, the requirements you complete, and a permanent record of actions taken in your missions. That record is what lets anyone reconstruct who did what and when.

To provide the service you asked for: keeping your relocation’s people, documents, requirements and deadlines in one place, reading your documents so you do not retype them, and letting the professionals you choose work on your case.

We do not sell your information, use it for advertising, or use it to train anyone’s models. If you are in the European Union, the basis is that this is necessary to provide the service you signed up for.

Nestly runs on a small number of external services. Each one is listed here with what it actually receives — not what it could receive in principle.

Our database, sign-in and file storage provider. Everything above is stored here: your account, your household, your documents and the files themselves.

Our application hosting providers. Two services run the Nestly application itself. They process your data in order to serve the product to you.

A document-reading service. When a document reaches Nestly — because you uploaded it, or because it arrived as an attachment to an email you sent us — the file is sent to a third-party service that reads it and returns what it says. For images and PDFs the document itself is sent, not just text from it. We send it without your filename. We ask that service not to retain it for its own retrieval, which is the strongest retention control available to us as a caller. That service is based in the United States.

Reading your messages, if you turn it on. The same service can also read the text of messages in your Nestly account — messages you and your professionals send each other, emails that arrive as replies, and notices about appointments — to find the appointments, deadlines and requested documents they mention, so they appear alongside everything else instead of only in a thread. It is the same service, in the same place, under the same retention request; no new company receives your information. What is new is that the words of your correspondence can be sent, not only your documents.

This is off until you agree to it. Nestly does not read a single message in your account until you have confirmed this version of this notice. If you have not, nothing is sent and nothing is read — there is no partial state. What Nestly finds this way is recorded as something Nestly read, shown with the sentence it came from so you can check it, and you can correct or remove it. It is never treated as a legal deadline or as anything an authority has decided.

Email you copy your mission on. Each mission has its own email address. When you copy that address on an email, Nestly processes the resulting correspondence and its attachments — including replies from the people you wrote to, who are outside your household and may not use Nestly — to keep your mission current. That means the reading service described above is sent the new words of each message, and any attachment, together with the first names and plan roles (for example "main applicant", "spouse" or "child") of the people on that mission — never their surnames, dates of birth, document numbers or contact details — so it can tell which of them a message is about, and what Nestly has already learned from earlier correspondence about the people writing — the name they have used, the kind of professional they appear to be, and a short note of what they have written about on that mission — never their email address or other contact details, and Nestly records what it found: who the correspondence is with and what kind of correspondent they appear to be, which member of your household and which parts of your mission it concerns, appointments reported as confirmed, things you were asked for, and facts that were reported. Each is kept with the message it came from and who wrote it. What Nestly learns about who someone is — the name they use and the kind of correspondent they appear to be — is kept for your household, so it can be used on your other missions too, and you can correct it. A request is recorded as a request — never as an obligation — and nothing an email says is treated as a decision by any authority.

Copying the address lets Nestly observe that conversation only. The people you write to get no Nestly account and no access to your mission, and Nestly does not write to them. An email from someone you have not corresponded with through the mission address is refused and its content is not kept. Mail that arrives before you have confirmed this version of this notice is held unread and is processed once you confirm it. Nestly can switch this off for your household if you ask.

An email delivery service. It receives the address we are writing to and the content of the message — which can include your name, the name of your mission, the title of a document, and the full text of a message someone sent you. Replies you send by email come back through the same service. If you email us a document as an attachment, the attachment is also sent to the document-reading service described above, exactly as an uploaded document is. We do this only for attachments sent from an address we already hold for you, or sent on a conversation you copied your mission on. This service receives every email sent to a mission address and keeps its own copy under its own retention rules; when Nestly erases your records it erases what Nestly holds, not that copy.

An error-reporting service. When something breaks, a report is sent so we can fix it. This is active in the product you are using, including in your browser. Reports are filtered before they are sent: values are removed unless their field is on a permitted list, so the report carries what went wrong and where, plus internal identifiers, rather than the contents of your records. There is no session recording, and Nestly runs no analytics or tracking of any kind.

Professionals see only what you share with them, and you can withdraw that.

Your records, your documents and the application that serves them run in Frankfurt, Germany. Error reports are received in Germany.

One part of the system — the web layer your browser talks to, which passes data through but does not store it — runs on a provider’s network without a pinned region, so that leg may be served from outside the EU.

The Bricksquare is based in Singapore and the person supporting you may access your records from wherever they are working. The document-reading service processes documents in the United States.

Nothing is deleted automatically. Your information stays while you use Nestly and until you ask us to remove it. The one exception: a document whose upload failed, or that you cancelled before it was filed, is discarded.

Ask us and we will send you your record: your account, your household and its details, your missions and requirements, your documents and the files themselves, your messages, appointments and notifications. During this beta a person at Nestly runs this for you, and every time it is run it is recorded — who ran it, for which household, when, and why.

You can also ask us to remove your data. We want to be exact about what that does, because it does not remove everything:

Destroyed. The document files you uploaded — scans and photos — are deleted and cannot be recovered.

Overwritten. The names, dates of birth, phone numbers and notes on your account and the people in your household, and the email address on your account and household records.

Kept. Nestly keeps a permanent record of what happened, which nobody — including us — can edit or delete. Details already read from your documents stay in it, including passport numbers and dates of birth, as do messages you exchanged, the audit history of your missions, and a professional’s record of work they did for you. Our records of emails we sent you and emails you sent us, the invitation you were sent, and any unsubscribe or delivery-block record also keep your email address; the email records also keep each message’s subject line.

We tell you this now so you can decide what to upload. If you want an item left out, tell us before you upload it.

You can ask to see, correct, receive a copy of, or remove your information, and to object to how we use it. Write to kk@thebricksquare.com; we will answer within one month. Removal works as described above.

If you are unhappy with our answer you can complain to Singapore’s Personal Data Protection Commission, or, if you are in the European Union, to the data protection authority where you live — in Greece, the Hellenic Data Protection Authority.

This notice has a version and a date. If it changes materially we will tell you by email and ask you to read it again. What you agreed to, and when, is shown in Account & settings.