Skip to main content
Start free

LegalPrivacy Policy

How Nara Solutions collects, uses, stores, and protects your data across our website, dashboard, and the AI assistants we operate on Telegram, WhatsApp, Facebook Messenger, and Instagram DM.

Last updated: 2026-07-31

1. Who we are

Nara Solutions ("we", "us") provides an AI omnichannel customer-service platform. We act as a data processor on behalf of our business customers ("tenants") for the end-user conversations that flow through their channels, and as a data controller for our own marketing site visitors and tenant admins. This policy applies to both roles.

2. Data we collect

From end-users who message a Nara-powered bot

  • Channel identifiers (Telegram chat ID, WhatsApp phone number, Facebook PSID, Instagram user ID).
  • Profile metadata exposed by the channel (display name, language, country when available).
  • Message content you send to the bot — text, voice notes, images, and attachments — and the bot's replies.
  • Booking details you submit (name, email, time slot) when you schedule a meeting through the bot.

From tenant admins using our dashboard

  • Email address, hashed password, role, and audit timestamps.
  • Configuration you write (system prompt, business hours, channel toggles, knowledge base, API keys you choose to store).

From visitors to this marketing site

  • Standard server logs (IP, user agent, page path, timestamp). We use Vercel Web Analytics — privacy-friendly and cookieless, with no cross-site tracking. It records aggregated page views and a small set of anonymous conversion events (for example, clicking a "Book a demo" button or starting a signup) so we can see which pages help and which do not. These events carry no personal information and are not tied to your identity, and data is retained for 30 days. No third-party advertising trackers.
  • When you choose a language using our language switcher, we save your choice in a NEXT_LOCALE cookie (one year) so we can show you content in your chosen language on return visits. This is a strictly-necessary functional cookie. No other cookies are set by this site.
  • If you talk to the Nara assistant embedded on this site, the conversation is processed to answer you — the same way the assistant works for our customers. See "How we use it" and "Where data is stored" below.

3. How we use it

  • To deliver the conversation you initiated — routing your message to the tenant's configured AI provider, returning the reply, and saving the transcript so the tenant's support team can follow up.
  • To operate the dashboard our tenants log in to (auth, RBAC, audit trail, billing usage metering).
  • For service quality: error monitoring (Sentry, with PII scrubbing) and aggregate usage analytics.
  • We do not sell your data, share it with advertisers, or train foundation models on it.

4. Where data is stored

Conversations and tenant configuration live in a Supabase (Postgres) database hosted in the United Kingdom (London region). AI inference, and the bot and voice runtime we operate on Google Cloud Platform, run in the United States — so conversation content is transferred to the United States to be processed. Audio attachments are transcribed in-memory by our STT provider (Soniox) and the resulting text is stored alongside the message; raw audio is not persisted. AI inference is performed by Google (Gemini), Anthropic (Claude), or OpenAI depending on the tenant's choice — see those providers' own policies for their processing terms. These are international transfers of personal data, and we rely on the appropriate safeguards for each transfer route, including our providers' standard data-processing terms and transfer clauses. Write to us at the address in §11 for details of the safeguards that apply to a specific transfer.

5. Retention

Tenant conversation history is retained for the active life of the tenant's account plus 90 days, after which it is purged from primary storage. Tenants can request earlier deletion (see §7). Anonymous server logs are kept for 30 days for security monitoring.

6. Sharing & subprocessors

We share the minimum data necessary with the following subprocessors:

  • Supabase — database hosting + auth.
  • Vercel — dashboard + landing site hosting, and privacy-preserving page analytics.
  • Google Cloud Platform — bot and voice runtime hosting.
  • Google (Gemini), Anthropic, OpenAI — LLM inference, per tenant choice.
  • Soniox — speech-to-text for voice notes.
  • Meta — WhatsApp, Facebook Messenger, and Instagram DM delivery.
  • Twilio — legacy/optional fallback for WhatsApp delivery, disabled by default.
  • Sentry — error monitoring (with PII scrubbing).

7. Your rights

You can request access, correction, export, or erasure (deletion) of any personal data we hold about you — including the GDPR right to erasure, also known as the 'right to be forgotten' (Article 17).

  • End-users on a Nara-powered bot: send the bot the command /delete or the phrase "delete my data" and the conversation, your profile row, and any derived data are wiped immediately. You can also email us at hello@nara-hub.com.
  • Tenant admins: use the "Delete organization" action in the dashboard, or email hello@nara-hub.com.
  • See our dedicated Data Deletion Instructions page for the full procedure.

We respond to verified requests within 30 days, in line with GDPR Articles 12 and 17.

8. Security

Data is encrypted in transit (TLS 1.2+) and at rest. Tenant data is row-level isolated in Postgres via organization_id scoping plus database RLS policies. Admin passwords are hashed with bcrypt. Service-role credentials never leave server-side environments.

9. Children

Nara Solutions is a B2B platform and is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has interacted with a Nara-powered bot, contact us and we will delete the data.

10. Changes to this policy

We may update this policy as the platform evolves. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated to tenants by email at least 14 days before they take effect.

11. Contact

Questions, concerns, or rights requests: hello@nara-hub.com.