Privacy Policy
Important — please read
- nonaAi runs on your own computer. Your projects, files, code, prompts and the work your agents do stay on your computer. They are not sent to us and we hold no copy of them.
- To confirm your plan, the Software sends our service only your account sign-in token, an identifier for your installation and the Software version.
- Your agents are not ours. When you use an agent, your content goes to that agent’s provider under that provider’s privacy policy. We do not control, and are not responsible for, what they do with it.
- Sign-in is handled by a third-party identity service and payments by Paddle. We never see your password or your full card number.
- We do not sell your personal information and do not share it for advertising.
1. About this Policy
1.1 What it covers. This Privacy Policy explains how we handle personal information in connection with the nonaAi software, the phone companion, our website at nonaai.ai, and the account, subscription and support services connected with them (together, the “Services”).
1.2 Part of the Terms. It forms part of, and must be read together with, the nonaAi Terms of Service (the “Terms”) and the Refund Policy. Words defined in the Terms have the same meaning here.
1.3 What it does not cover. This Policy does not apply to any Agent or other Third-Party Service, to the providers of sign-in or payment services acting for their own purposes, or to any website we do not operate. Their own privacy policies apply, and we are not responsible for their practices.
1.4 “Personal information” means information that identifies, or can reasonably be linked to, an individual.
2. Who we are
The controller responsible for the personal information described in this Policy is Advanced Technologies — A General Trading and Contracting Co. (Commercial Registration No. 337859), Abdullah Al Mubarak Street, Qibla, Block 9, Yousef M. Y. Alroomi Building, Floor 4, Office 3, Kuwait City 13083, Kuwait (“nonaAi”, “we”, “us”, “our”). You can reach us about privacy at [email protected].
3. Your work stays on your computer
3.1 Local by design. nonaAi is a workbench that starts, coordinates and displays Agents on your own computer. Your Content — your projects, files, source code, data, prompts, instructions and the records of your conversations with Agents — is held and processed on your computer and by the Third-Party Services you choose to connect.
3.2 Not sent to us. Your Content does not pass through our systems, and we do not collect, store or have access to it. The Software does not report to us what you work on, which Agents you use, or what they do.
3.3 The phone companion. When you use the phone companion, your phone connects to your own computer over the network connection you set up. That traffic does not pass through our systems.
3.4 Consequence. Because we hold no copy of Your Content, we cannot retrieve, restore or delete it for you. Its protection and backup are your responsibility, as the Terms provide.
4. What the Software sends us
4.1 The plan check. To confirm that a Subscription or trial is active on your Account and on which computer, the Software contacts our plan service and sends only the following:
| Information | Why it is needed |
|---|---|
| Your Account sign-in token | To identify your Account and confirm the status of your Subscription |
| An identifier for your installation — a random value created when the Software is first run, not derived from your hardware | To apply the one-active-computer limit of your plan and the “use here” feature |
| The version of the Software | Compatibility, security and support |
4.2 What is not sent. The Software does not send us Your Content, the names or paths of your projects or files, your prompts, any Output, a record of your activity, or your sign-in details or keys for any Agent or other Third-Party Service.
4.3 Connection data. As with any service reached over the internet, the systems that receive these requests may record technical connection data such as your IP address, the date and time, and the type of request. We use this only to operate, secure and troubleshoot the service.
4.4 What our service sends back. Our service replies with the status of your plan and, for subscribers, service notices and reference price tables for display in the Software.
5. Information handled when you sign in
5.1 Third-party sign-in. Sign-in takes place in your web browser through a third-party identity provider (for example Auth0, together with the Google, Apple or Microsoft sign-in you choose, or an email address and password held by that provider). Those providers process your email address and basic profile to authenticate you, under their own privacy policies.
5.2 What we receive. We receive an account identifier and your email address so that we can attach your Subscription to your Account and contact you about it. We do not receive or store your password.
5.3 On your computer. The Software keeps your sign-in credential in the protected credential store of your operating system so that you remain signed in.
6. Information handled when you pay
6.1 Paddle. Our orders are processed by our online reseller and Merchant of Record, Paddle.com Market Ltd (“Paddle”). When you start a trial, buy or renew a Subscription, Paddle collects and processes your payment and billing information — for example your name, billing address, country, and card or other payment-method details — as an independent controller under Paddle’s Privacy Policy.
6.2 What we receive. We receive from Paddle the records we need to manage your Subscription and to meet our tax and accounting obligations — such as your name, email address, country, the plan bought, its status and dates, and the amounts charged or refunded. We do not receive your full card number or its security code.
7. Our website and correspondence
7.1 Website. Our website uses Google Translate to offer optional language switching; choosing a language may set a functional cookie for that purpose and involves Google under its own privacy policy. The systems that serve our website may record technical connection data as described in Section 4.3.
7.2 When you write to us. If you contact us — for example at [email protected] — we process your contact details and the content of your message to respond to you and to keep a record of the correspondence. Please do not send us confidential material, credentials or secrets; we do not need them to help you.
7.3 Feedback and community. If you post a suggestion or comment in a public place we direct you to, what you post there is public and is governed by the terms and privacy policy of the service that hosts it.
8. Agents and other third-party services
8.1 Your choice, their policies. You decide which Agents and other Third-Party Services to install and connect. When you use one, Your Content and other information are sent to its provider as that service requires. That provider — not nonaAi — decides how that information is used, stored, shared and protected, under its own terms and privacy policy.
8.2 Not our processing. We do not receive that information, we do not act as controller or processor of it, and we are not responsible for the privacy, security or data practices of any Third-Party Service.
8.3 Your responsibility. Before you give an Agent access to any information — including personal information about other people, confidential information, credentials and secrets — you are responsible for making sure that you are entitled to do so and that the provider’s terms and practices are acceptable to you.
9. How we use information; legal bases
| Purpose | Information used | Legal basis |
|---|---|---|
| Providing the Services: sign-in, confirming your plan, applying plan limits | Account identifier, email address, sign-in token, installation identifier, Software version | Performance of our contract with you |
| Managing your Subscription, trial and billing | Records received from Paddle | Performance of our contract; compliance with legal, tax and accounting obligations |
| Protecting the Services and preventing fraud, abuse and breaches of the Terms | Any of the information above; connection data | Our legitimate interest in keeping the Services secure and fairly used |
| Support and correspondence | Your contact details and messages | Performance of our contract; our legitimate interest in helping users |
| Service messages about your Account, your Subscription and changes to our terms | Email address | Performance of our contract; legal obligation |
| Complying with the law; establishing, exercising or defending legal claims | Any of the information above, as needed | Legal obligation; our legitimate interest |
Where the law requires consent — for example for certain cookies — we rely on your consent, which you may withdraw at any time. We do not use your personal information for advertising, and we do not make decisions about you by automated means that produce legal or similarly significant effects.
10. Who we share information with
10.1 Recipients. We share personal information only with:
- our identity provider, to authenticate your sign-in;
- Paddle, as Merchant of Record, to take payment, issue invoices and handle refunds;
- our hosting and infrastructure providers, who operate the systems that run our website and plan service and process information on our behalf under contract;
- professional advisers, such as lawyers and accountants, under duties of confidentiality;
- courts, regulators and other authorities, where we are required by law to do so, or where it is necessary to protect our rights, our users or the public; and
- a successor, if all or part of our business is reorganised, sold or transferred, subject to this Policy.
10.2 No sale. We do not sell your personal information, and we do not share it with third parties for their own marketing or advertising.
11. International transfers
We are established in the State of Kuwait, and we and our providers may process personal information in other countries, whose data-protection laws may differ from those of your country. Where the law that applies to you requires safeguards for a transfer, we rely on appropriate safeguards, such as contractual protections agreed with the recipient.
12. How long we keep information
- Account and Subscription records are kept while your Account is active, and afterwards for as long as needed to meet legal, tax and accounting requirements and to deal with disputes.
- Installation identifiers are kept while they are needed to apply your plan’s limits.
- Connection data is kept for a limited period for security and troubleshooting.
- Correspondence is kept for as long as needed to deal with your enquiry and to keep a proper record.
- Payment records held by Paddle are kept under Paddle’s own policy.
When information is no longer needed, it is deleted or made anonymous.
13. Security, and your part in it
13.1 Our measures. We use reasonable technical and organisational measures to protect the personal information we hold, and we design the Services so that as little personal information as possible reaches us.
13.2 No guarantee. No method of transmission or storage is completely secure, and we cannot guarantee the security of information. To the fullest extent permitted by law, the disclaimers and limits of liability in the Terms apply.
13.3 Your part. The security of your computer, your network, your Account and Your Content is your responsibility. Keep your devices and credentials secure, and tell us promptly if you believe your Account has been used without your permission.
14. Your rights
14.1 What you may ask. Depending on where you live, you may have the right to: be told whether we hold personal information about you and to receive a copy; have inaccurate information corrected; have information deleted; restrict or object to certain processing; receive information you gave us in a portable form; and withdraw consent where we rely on it.
14.2 How to ask. Write to [email protected] from the email address of your Account. We may need to verify your identity before acting, and we will respond within the time the law allows. Some requests may be limited where the law permits — for example where we must keep records for tax purposes or to deal with a dispute.
14.3 What we cannot do. We hold no copy of Your Content and none of the information you give to an Agent or other Third-Party Service. Requests about that information must be made to the provider concerned. Requests about payment details must be made to Paddle.
14.4 Complaints. If you are in the European Economic Area or the United Kingdom, you have the right to complain to your local data-protection authority. We would be grateful for the chance to deal with your concern first.
15. Children
The Services are not directed to children. You must be at least eighteen (18) years old, or the age of legal majority where you live if that is higher, to use them, as the Terms provide. We do not knowingly collect personal information from children; if you believe a child has given us personal information, contact us and we will delete it.
16. Changes to this Policy
We may update this Policy from time to time. We will post the revised Policy on our website with a new effective date and give notice of material changes as the Terms provide. If you continue to use the Services after a revised Policy takes effect, it applies to you.
17. Relationship to the Terms
This Policy is part of the Terms. The provisions of the Terms on disclaimers, limitation of liability, indemnity, governing law and disputes apply to this Policy. Nothing in this Policy limits any right you have under data-protection law that cannot lawfully be limited.
18. Contact
Advanced Technologies — A General Trading and Contracting Co. (Commercial Registration No. 337859)
Abdullah Al Mubarak Street, Qibla, Block 9, Yousef M. Y. Alroomi Building, Floor 4, Office 3, Kuwait City 13083, Kuwait
[email protected]