سياسة خصوصية نصيح

Naseeh Privacy Policy

How we collect, use, share, retain, and protect data, and the choices and rights available. Effective July 31, 2026. Version 2026-07-31.2.

01

Controller and Scope

10881252 Canada Corporation of Toronto, Ontario, Canada controls data for Naseeh consumer services. Where a commercial customer provides the service to users, that customer may be controller and we may process under its instructions. This Policy covers the website, apps, service, and support and may be supplemented by a feature notice, agreement, or DPA.

02

Account and Contact Data

We may collect name, email, phone, country, language, organization, role, account identifiers, profile image and settings, authentication methods, acceptance records, and communications. An administrator may provide this data when creating an account for you. Do not submit unnecessary information.

03

Content and Work Data

We collect what you choose to enter, upload, or create, such as questions, instructions, documents, images, recordings, files, matter and client data, outputs, and comments. Content may contain sensitive personal or professional information about you or others. You or your organization is responsible for authority, notice, and minimization.

04

Payment and Subscription Data

We collect plan, billing status, invoices, taxes, currency, transaction history, and payment-provider identifiers. A payment provider or app store typically processes the full card or bank number under its policy, and we may not hold it. We receive payment success, failure, dispute, and refund information.

05

Usage and Device Data

We may collect IP address, device, operating system, browser, app version, language, time zone, pages, features, clicks, requests, errors, performance, usage time, session identifiers, and technical logs. We use these to operate, understand, secure, meter, and cost the service.

06

Security and Abuse Data

We may collect login attempts, fraud signals, network reputation, verification results, permission history, alerts, and samples needed to investigate abuse, compromise, or violations. We may correlate signals across accounts and devices to protect users and the service, subject to law.

07

Identity or Age Verification

If a feature, law, or provider requires identity, age, or location verification, we may collect a document, image, verification result, country, or date of birth as necessary. A specialist may process an image or biometric measurement if used, with notice or consent where law requires. This is not collected for every account.

08

Data Sources

We receive data from you and your use, your organization and administrators, sign-in, payment, app-store, and integration providers, support and security partners, public or licensed sources used by legal search, and government or other parties reporting abuse or disputes.

09

Cookies and Similar Technologies

The service may use cookies, local storage, or identifiers needed for sign-in, security, preferences, and measurement. Content-blind analytics is enabled by default for all users; the service does not currently offer an in-product setting to turn it off and does not respond to browser privacy signals such as Do Not Track or Global Privacy Control.

10

Providing the Service

We use data to create and authenticate accounts, preserve work, follow instructions, run search, analysis, generation, integrations, files, permissions, billing, support, and operational communications. Processing scope depends on selected features and account settings.

11

Security and Enforcement

We use data to detect, prevent, and investigate fraud, compromise, malware, prohibited use, and limit evasion; protect rights, people, and infrastructure; enforce terms; and test reliability. This may include automated classification and limited human review where necessary.

12

Improvement and Research

We may use optional feedback, performance, failure, and security data, and aggregated or de-identified metrics to improve products, classifiers, models, and operations. We may use private content to evaluate or improve a service where an account setting, agreement, notice, consent, legitimate interest, or law permits. Commercial Customer Data follows its terms and DPA.

13

Communications and Marketing

We send service, security, billing, and legal-change notices that may be non-optional while an account remains open. We may send updates or offers under law and your choices. Marketing messages can be unsubscribed through the clear link in the message or by emailing privacy@naseeh.io. Necessary non-marketing contact may continue.

14

Control and Opt-Out Rights

You may ask us not to use your contact details for marketing and to limit contact to the service or information you requested. Any commercial marketing email we send identifies the sender and includes a clear unsubscribe link. We do not use Google Ads API data to build advertising audiences or retarget people. Naseeh does not currently provide an in-product control to disable content-blind measurement and does not respond to browser Do Not Track signals; where applicable law gives you a right to opt out of analytics or advertising-identifier sharing, you may exercise it through privacy@naseeh.io. You may also manage advertising or cookie preferences through the relevant provider or browser where applicable.

15

Legal Bases

Depending on location and context, we process to perform a contract or take requested steps, with consent, for balanced legitimate interests such as service delivery, security, fraud prevention, and improvement, to comply with law, protect vital interests, and establish or defend claims. Where consent applies, it may be withdrawn prospectively and the feature may stop.

16

Service Providers and Processors

We share what is needed with AI-model, cloud, hosting, storage, search, monitoring, security, payment, app-store, analytics, communications, support, and professional providers. They operate under contracts and law, and some may be independent controllers for their functions. The provider list changes as the service changes.

17

Chosen Integrations and Actions

When you connect an account or direct content or an action, we share data with the selected party under your instruction, and it may receive account information and content. Its processing follows its policy, not this Policy. Disconnect when no longer needed; disconnection may not delete data already sent. Naseeh’s use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Google Ads Data Privacy Notice

18

Organization and Workspace Administrators

If an organization controls the account, administrators may access profile, content, outputs, activity, audit, and billing records; configure permissions, integrations, and retention; and export or delete data. The organization may transfer or reassign the account. Review its policies because we do not control administrator use of organization data.

19

Legal Disclosure and Protection

We may preserve or disclose data to government, court, law enforcement, regulator, or another party where we believe in good faith it is required or reasonably appropriate to comply with law or process, protect rights and safety, prevent harm, fraud, or crime, enforce an agreement, or investigate a violation. Notice may be withheld where prohibited or risky.

20

Corporate Transactions

Data may be shared with advisers, financiers, and actual or potential purchasers or successors in financing, reorganization, merger, asset sale, insolvency, or service transfer, with context-appropriate safeguards. Data and obligations may transfer to a successor.

21

International Transfers

Data may be processed in Canada, the United States, and any country where a necessary provider operates, under different laws and government access. Where required, we use an appropriate transfer mechanism, terms, or assessment. We do not promise data stays in a particular country unless a signed agreement says so.

22

Retention

We retain data as needed for purpose, account, contract, security, backup, audit, billing, tax, disputes, rights, and compliance. Periods vary by type, setting, and law. Limited copies may remain in logs, backups, and providers until deletion cycles complete. De-identified data may be retained indefinitely.

23

Deletion and Account Closure

Deletion or closure may end access and does not instantly erase every copy. We may retain what is needed for law, security, disputes, fraud prevention, transaction proof, organization instructions, and aggregated or de-identified data. Permanently deleted content may be unrecoverable, and we do not promise an export tool is always available.

24

Security and Its Limits

We use reasonable technical and organizational controls appropriate to the service, such as access management, encryption in transit, monitoring, backups, and edge and application protection. No method, provider, or model is perfectly secure, and we do not guarantee prevention of every breach, loss, error, or disclosure. You are responsible for devices, passwords, independent copies, and permissions.

25

Privacy Rights

Depending on law and our role, you may have rights to know, access, copy, correct, delete, restrict, object, port, withdraw consent, and complain. Organization-data requests may be directed to the organization. We may verify identity, clarify scope, and deny or limit requests where law permits to protect rights, confidentiality, security, or obligations.

26

Automated Decisions

We use automation for abuse detection, security, and feature routing, which may result in blocking or verification. We do not intend to make a final legal, credit, employment, or health decision about you without review where law requires. You may request review of a material account decision through support, but reinstatement is not guaranteed where risk or restriction remains.

27

Children

The service is not directed to anyone below the legal age for an account, and we do not knowingly collect child data without appropriate authority or basis. If you believe a child submitted data without authorization, contact privacy@naseeh.io. We may close the account and delete or isolate data subject to law and obligations.

28

Canada and Complaints

For Canadian users, we process under applicable principles and requirements. Data processed outside Canada may be lawfully accessible to foreign authorities. Questions or complaints may be sent to the Privacy Officer at privacy@naseeh.io. We will review under law, without limiting the right to contact the Office of the Privacy Commissioner of Canada or another competent authority.

29

No Sale and Targeted Advertising

We do not sell personal data for money. Some laws may characterize certain analytics or advertising identifier sharing as a sale or sharing and provide opt-out rights; where an applicable law grants you that right, you may exercise it through privacy@naseeh.io, as no in-product setting currently exists. This legal label is not a promise beyond applicable law.

30

Changes

We may update this Policy as the service, providers, law, or practices change. We publish the version and effective date and may give additional notice of a material change where required. If consent is required, we will request it; otherwise the posted Policy applies prospectively on the stated date.

31

Contact

Send requests, questions, and complaints to privacy@naseeh.io. Contact support@naseeh.io for support and legal@naseeh.io for legal matters. Entity: 10881252 Canada Corporation, 231 Broadview Ave, Toronto, Ontario M4M 2G3, Canada. We may request reasonable information to verify identity, jurisdiction, and account before acting.