Last updated: June 2026
This policy explains how NosmoTech ("we", "us") collects, uses and protects personal data when you use the BuiltAir indoor air quality monitoring platform, our monitors, and related services (together, "BuiltAir").
Note for organisations: BuiltAir is provided to organisations. Where your organisation has signed up for BuiltAir and added you as a user, your organisation decides who has access and what is monitored, and is the data controller for that information. NosmoTech processes it on their behalf. For your account details and our own website operations, NosmoTech is the data controller.
NosmoTech Ltd 13784382, with registered address at 22 Friars Street, Sudbury, UK, CO10 2AA.
For any privacy question or request, contact us at info@nosmotech.com.
When an account is created for you directly or by invitation, or via your organisation's team import, we hold:
BuiltAir monitors measure the indoor environment including: temperature, humidity, CO2, particulate matter, volatile organic compounds, nitrogen dioxide, air pressure, air speed, sound level and light level, together with the time of the reading and the location of the monitor.
This data describes rooms and buildings, not individuals. Monitors do not record audio, video or images but where readings are optionally linked to locations, environmental data can be used to estimate probability of occupancy.
To keep accounts secure and provide an audit trail, we log actions taken in BuiltAir such as logins, settings changes, user invitations and data exports along with the date, the IP address and the browser used.
When you contact support or raise a ticket through BuiltAir, we keep the content of your request and our correspondence with you so we can resolve it and improve the service.
We do not sell personal data, and we do not use it for advertising.
BuiltAir uses a small number of cookies that are necessary for the service to work: a session cookie to keep you logged in and a security (CSRF) cookie to protect forms. We use Swetrix, a privacy-focused analytics service, to understand overall usage of the site; it does not use advertising cookies or track you across other websites.
If you use BuiltAir's help and support features, your question and relevant context may be processed by an AI service (Anthropic's Claude) to help answer it or route it to the right person. Support questions are not used by the AI provider to train its models. Please do not include sensitive personal information in support requests.
Beyond these support features, we do not currently use AI in the processing of your data, but may do so in the future. We will always be transparent about how we use AI.
We share personal data only with service providers who help us run BuiltAir, under contracts that restrict how they may use it:
We may also disclose data where required by law, or to your organisation's administrators as part of providing the service.
We keep data in the UK or EU where possible. Some providers (such as Anthropic and Twilio) may process data outside the UK and the European Economic Area; where they do, transfers are protected by approved safeguards such as the UK International Data Transfer Agreement (or UK Addendum) and, where EU data is involved, the EU Standard Contractual Clauses.
When your organisation's agreement ends, its data is deleted or returned in line with that agreement.
Under data protection law (including the UK GDPR and, where it applies, the EU GDPR) you have the right to:
To exercise any of these rights, contact info@nosmotech.com. If your account was created by your organisation, we may refer your request to them as the data controller for that information.
You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.
We protect your data with encrypted connections (HTTPS), role-based access controls, audit logging, and restricted access to production systems. Access to your organisation's data is limited to users your organisation has authorised.
BuiltAir is a workplace service and is not directed at children. We do not knowingly collect personal data from anyone under 16.
We may update this policy from time to time. We will post changes here and, for significant changes, notify your organisation's administrators. The "Last updated" date at the top shows the current version.
Questions about this policy or your data: info@nosmotech.com
Find out more about cookies and how you opt out Here