1. Who we are
NOOR Technologies (“NOORâ€, “weâ€) operates a multi-agent AI platform that answers customer inquiries on behalf of businesses (“Customer Businessâ€). This policy explains what data we process when we run an agent for a Customer Business, and which choices you — the person speaking to that agent (“Guestâ€) — have.
2. What we process
When a Guest communicates with a NOOR agent, we process the conversation content (text, and audio where voice is used), channel identifiers (for example, the WhatsApp user ID behind a phone number), the structured data extracted from the conversation (name, number, dates, booking details), and metadata such as timestamps and channel. We do not collect data about a Guest that is not inside a conversation with one of our agents.
3. Why we process it
Conversation data is processed to (a) answer the Guest's request within the mandate given by the Customer Business, (b) maintain the audit trail the Customer Business requires for its own regulatory and operational obligations, and (c) improve the agent's performance for that Customer Business. We do not use one customer's data to train an agent for another customer, and shared model training on customer data never occurs without explicit, written, per-workspace consent.
4. Retention and deletion
Retention is set per workspace under the Customer Business's policy, and never exceeds what that business's records require. Guests may request export or deletion of their conversation data through the Customer Business, and we comply within a reasonable period, subject to the Customer Business's own legal retention obligations.
5. Sharing
Conversation data is shared with the Customer Business that operates the agent (it is, in most cases, the customer's own front line). We use channel providers (e.g., Meta for WhatsApp, telephony carriers for voice) under agreements that limit their use to operating the channel. We do not sell guest data. We do not resell or license it to third parties. Sub-processors are listed in our security documentation pack, available to business customers under NDA.
6. Security
Data is encrypted in transit (TLS 1.3) and at rest. Access is role-scoped per workspace member. Our model boundary is documented in the platform security pack: conversations are processed in-region for Saudi workspaces, and inference outputs are constrained by the rule layer described in our documentation before any reply is sent.
7. Your rights
A Guest's first point of contact is always the Customer Business, because it is that business's guest relationship. Through the Customer Business, a Guest may request access, export, correction, or deletion of their conversation data. We maintain a process to fulfill these requests on the Customer Business's behalf, on the timescales required.
8. Changes to this policy
We publish the current version of this policy at /privacy. Material changes are communicated to business customers before they take effect; the version shown to guests at the start of a conversation is the version governing that conversation.
Questions: privacy@noor.sa
Version 1.0 آ· Effective 2026-10-01 آ· NOOR Technologies, Riyadh, Saudi Arabia