Privacy Policy

Nebora (“Nebora”, “we”, “us”) operates the Nebora mobile application and the nebora.ai website (together, the “Service”): an AI assistant that helps you find and connect with local businesses. This policy explains what we collect, why, and what control you have.

If you are a business owner using the Nebora business portal, a separate privacy policy applies to that service.

1. Information we collect

1.1 Account information

When you sign in with Google or with Apple, we receive and store your email address, your first and last name (where provided), and your profile picture URL (Google only). We never receive or store your Google or Apple password. If you sign in with Apple and choose to hide your email, we receive and store only Apple's private relay address.

1.2 Guest use (website)

On the nebora.ai website you may use the chat without signing in. In that case we create a random guest identifier in your browser's local storage and store that identifier, the date it was created, the last time it was used, and the IP address of the request, so that your conversation history works and to protect the Service from abuse. A guest identifier contains no name or email.

1.3 Conversation content

We store the messages you send to the assistant and the responses it returns, together with a short summary of each exchange, the detected intent of your request, and the conversation session it belongs to. This is what allows the assistant to follow the thread of a conversation and lets you revisit past chats. If you use a business's AI Assistant page, those conversations are stored separately and are associated with that specific business.

1.4 Location information

If you grant location permission, we collect your device's precise latitude and longitude at the moment you send a request, and use it to find and rank businesses near you and to show you how far away each one is. From those coordinates we also derive and store an approximate description of the area (city, province/state, country, and nearest intersection).

Location is optional. If you decline the permission, the assistant still works; results simply will not be distance-ranked. You can revoke the permission at any time in your device or browser settings.

1.5 Interaction information

We record which business listings were shown to you and which of their links you tapped (for example phone, website, directions, or social profiles). We use this to measure whether recommendations are useful and to give participating businesses aggregate statistics about interest in their listing.

1.6 Reports you submit

If you report an assistant response, we store the reported content, the reason you selected, and the identifier of the conversation, so that we can investigate and improve the Service's safety.

1.7 Technical information

Our servers process the IP address of requests and standard technical information necessary to operate and secure the Service. The Nebora mobile app does not contain third-party analytics, advertising, or tracking software, and does not collect an advertising identifier. Our websites use cookies and third-party measurement tools, described in the cookie section of the relevant website policy.

1.8 What we do not collect

We do not collect payment or billing information (the Service is free to consumers). We do not access your contacts, photos, camera, microphone, calendar, or health data. We do not collect precise location in the background — only while you are actively using the app.

2. How we use information

We use the information above to:

• generate answers and business recommendations relevant to your request;
• rank results by distance and show how far each business is from you;
• keep the context of your conversation so follow-up questions make sense;
• show you your conversation history;
• give participating businesses aggregate, de-identified statistics about how often their listing was seen and clicked;
• detect abuse, prevent fraud, debug problems, and keep the Service secure;
• review reported content and improve the safety and quality of assistant responses;
• comply with legal obligations.

We do not use your conversations to train third-party AI models, and we do not sell your personal information.

3. How information is shared

3.1 AI providers

To generate answers, we send your message text and the relevant business information we retrieved to our AI provider (OpenAI) for processing. We use these services under terms that do not permit your content to be used to train their models. We do not send your name, email, or exact coordinates to the AI provider as part of the answer-generation request.

3.2 Google Maps Platform

To translate coordinates into a readable area and to build map links, we use Google Maps Platform services. Your coordinates are processed by Google under its own terms.

3.3 Businesses

When you interact with a business listing, that business may see aggregate counts of views and link clicks. Businesses do not receive your name, email, or precise location. If you chat with a specific business's AI Assistant, that business can see the conversation content associated with an opaque identifier.

3.4 Service providers

We use infrastructure and email providers to host the Service and send transactional email. They process data only on our instructions.

3.5 Legal

We may disclose information where required by law, to enforce our terms, or to protect the rights, safety, and property of Nebora, our users, or the public.

4. Retention

We keep your account information and conversation history for as long as your account exists. Guest records and their conversations are kept while the guest identifier remains in use and for a reasonable period afterwards. When you delete your account, we delete your account record, your conversations, and your session history from our production systems, except where we are legally required to keep something; residual copies in encrypted backups are removed on our normal backup rotation.

5. Your choices and rights

• Delete your account and data. You can delete your account from inside the app (Menu → Delete account) or on the web at nebora.ai/delete-account. Deletion removes your account and associated conversation data and cannot be undone.
• Delete individual conversations. You can delete any conversation from your history at any time.
• Location. Grant or revoke location permission at any time in your device settings.
• Access and correction. Contact us to request a copy of your personal information or to correct it.
• Withdraw consent. Stop using the Service and delete your account.

Depending on where you live (for example Canada under PIPEDA, the EEA/UK under the GDPR, or California under the CCPA/CPRA) you may have additional rights, including the right to object to or restrict processing, the right to data portability, and the right not to be discriminated against for exercising your rights. We honour requests from all users regardless of location. To exercise any right, email info@nebora.ca.

6. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

7. Automated content and its limits

Responses in Nebora are generated by an AI system. They can be incomplete or wrong, and business details such as prices, hours, and availability may be out of date. Nothing in the Service is professional advice (medical, legal, financial, or otherwise). Verify important details directly with the business.

8. International transfers

We are based in Ontario, Canada. Our service providers, including our AI and mapping providers, may process data in the United States and other countries. Where required, we rely on appropriate safeguards for those transfers.

9. Security

We use industry-standard measures including encryption in transit (HTTPS), access controls, and hashed credentials where applicable. No system is perfectly secure, so we cannot guarantee absolute security.

10. Changes

We will post any changes to this policy on this page and update the “last updated” date. Material changes will be communicated in the app or by email where appropriate.

11. Contact

Privacy, legal, and general support: info@nebora.ca
Technical support: tech@nebora.ai
Nebora, Ontario, Canada