Privacy Policy

Nebora (“Nebora”, “we”, “us”) operates the Nebora mobile application and the nebora.ai website (together, the “Service”): an AI assistant that helps you find and connect with local businesses. This policy explains what we collect, why, and what control you have.

If you are a business owner using the Nebora business portal, a separate privacy policy applies to that service.

1. Information we collect

1.1 Account information

When you sign in with Google or with Apple, we receive and store your email address, your first and last name (where provided), and your profile picture URL (Google only). We never receive or store your Google or Apple password. If you sign in with Apple and choose to hide your email, we receive and store only Apple's private relay address.

1.2 Guest use

You may use the chat on the nebora.ai website and in the app without signing in. In that case our server issues a random guest identifier, kept on your device (in your browser's local storage, or in the app's secure storage), and we store that identifier, the date it was created, the last time it was used, and the IP address of the request, so that your conversation history works and to protect the Service from abuse. A guest identifier contains no name or email. If you later sign in, the conversations you had as a guest move to your account.

1.3 Conversation content

We store the messages you send to the assistant and the responses it returns, together with a short summary of each exchange, the detected intent of your request, and the conversation session it belongs to. This is what allows the assistant to follow the thread of a conversation and lets you revisit past chats. If you use a business's AI Assistant (its page on nebora.ai or its screen in the app), those conversations — typed messages and the text transcripts of voice calls — are stored separately and are associated with that specific business.

1.3a Voice calls with a business's AI Assistant

Some businesses let you talk to their AI Assistant by voice. The microphone is used only during a call you start by tapping the microphone button, and only after you grant microphone permission; it is released as soon as the call ends or you leave the screen. While the call is live, your voice is streamed directly to our AI provider (OpenAI) so it can be transcribed and answered in real time. We do not record or store the audio. We store the text transcript of each spoken exchange in that business's assistant history, and the length of the call, which counts against the business's plan.

1.4 Location information

If you grant location permission, we collect your device's precise latitude and longitude at the moment you send a request, and use it to find and rank businesses near you and to show you how far away each one is. From those coordinates we also derive and store an approximate description of the area (city, province/state, country, and nearest intersection).

Location is optional. If you decline the permission, the assistant still works; results simply will not be distance-ranked. You can revoke the permission at any time in your device or browser settings.

1.5 Interaction information

We record which business listings were shown to you and which of their links you tapped (for example phone, website, directions, or social profiles). We use this to measure whether recommendations are useful and to give participating businesses aggregate statistics about interest in their listing.

1.6 Reports you submit

If you report an assistant response, we store the reported content, the reason you selected, and the identifier of the conversation, so that we can investigate and improve the Service's safety.

1.7 Technical information

Our servers process the IP address of requests and standard technical information necessary to operate and secure the Service. The Nebora mobile app sends crash reports and error diagnostics (for example the error message and stack trace, the device model, operating system and app version) to our crash-reporting provider, Sentry, so we can find and fix problems. These reports are configured not to include your name, email, conversation content or location. The Nebora mobile app does not contain third-party analytics, advertising, or tracking software, and does not collect an advertising identifier. Our websites use cookies and third-party measurement tools, described in the cookie section of the relevant website policy.

1.8 What we do not collect

We do not collect payment or billing information (the Service is free to consumers). We do not access your contacts, photos, camera, calendar, or health data. We use the microphone only during a voice call you start (see 1.3a) and never record the audio. We do not collect precise location in the background — only while you are actively using the app.

2. How we use information

We use the information above to:

• generate answers and business recommendations relevant to your request;
• rank results by distance and show how far each business is from you;
• keep the context of your conversation so follow-up questions make sense;
• show you your conversation history;
• give participating businesses aggregate, de-identified statistics about how often their listing was seen and clicked;
• detect abuse, prevent fraud, debug problems, and keep the Service secure;
• review reported content and improve the safety and quality of assistant responses;
• comply with legal obligations.

We do not use your conversations to train third-party AI models, and we do not sell your personal information.

3. How information is shared

3.1 AI providers

To generate answers, we send your message text and the relevant business information we retrieved to our AI provider (OpenAI) for processing. We use these services under terms that do not permit your content to be used to train their models. We do not send your name, email, or exact coordinates to the AI provider as part of the answer-generation request. Messages you send to a business's AI Assistant are processed the same way, and during a voice call your audio is streamed to OpenAI for real-time transcription and response (see 1.3a).

3.2 Google Maps Platform

To translate coordinates into a readable area and to build map links, we use Google Maps Platform services. Your coordinates are processed by Google under its own terms.

3.3 Businesses

When you interact with a business listing, that business may see aggregate counts of views and link clicks. Businesses do not receive your name, email, or precise location. If you chat with a specific business's AI Assistant, by text or by voice, that business can read the conversation — your messages, the assistant's replies, and the transcripts of voice calls — associated with an opaque identifier rather than your name or email. It also sees how you arrived at its card (for example from a QR code or from a Nebora chat answer) and which of its contact links you tapped.

3.4 Service providers

We use infrastructure and email providers to host the Service and send transactional email, and Sentry to receive crash reports from the app. They process data only on our instructions.

3.5 Legal

We may disclose information where required by law, to enforce our terms, or to protect the rights, safety, and property of Nebora, our users, or the public.

4. Retention

We keep your account information and conversation history for as long as your account exists. Guest records and their conversations are kept while the guest identifier remains in use and for a reasonable period afterwards. When you delete your account, we delete your account record, your conversations, and your session history from our production systems, except where we are legally required to keep something; residual copies in encrypted backups are removed on our normal backup rotation. Voice audio is never stored. Crash reports are kept by Sentry for up to 90 days.

5. Your choices and rights

• Delete your account and data. You can delete your account from inside the app (Menu → Delete account; as a guest, Menu → Delete my data) or on the web at nebora.ai/delete-account. Deletion removes your account and associated conversation data and cannot be undone.
• Delete individual conversations. You can delete any conversation from your history at any time.
• Location. Grant or revoke location permission at any time in your device settings.
• Microphone. Voice calls are optional. Grant or revoke microphone permission at any time in your device or browser settings; typing keeps working either way.
• Access and correction. Contact us to request a copy of your personal information or to correct it.
• Withdraw consent. Stop using the Service and delete your account.

Depending on where you live (for example Canada under PIPEDA, the EEA/UK under the GDPR, or California under the CCPA/CPRA) you may have additional rights, including the right to object to or restrict processing, the right to data portability, and the right not to be discriminated against for exercising your rights. We honour requests from all users regardless of location. To exercise any right, email info@nebora.ca.

6. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

7. Automated content and its limits

Responses in Nebora are generated by an AI system. They can be incomplete or wrong, and business details such as prices, hours, and availability may be out of date. Nothing in the Service is professional advice (medical, legal, financial, or otherwise). Verify important details directly with the business.

8. International transfers

We are based in Ontario, Canada. Our service providers, including our AI and mapping providers, may process data in the United States and other countries. Where required, we rely on appropriate safeguards for those transfers.

9. Security

We use industry-standard measures including encryption in transit (HTTPS), access controls, and hashed credentials where applicable. No system is perfectly secure, so we cannot guarantee absolute security.

10. Changes

We will post any changes to this policy on this page and update the “last updated” date. Material changes will be communicated in the app or by email where appropriate.

11. Contact

Privacy, legal, and general support: info@nebora.ca
Technical support: tech@nebora.ai
Nebora, Ontario, Canada