Privacy Policy

1. Scope

This policy applies to chatterfykillah.uk, Nara workspaces, and Nara-powered conversations on Telegram. The privacy policies of that third-party platforms also apply when you use their services.

2. Information we collect

• Account information: name, email address, authentication-provider identifiers, workspace membership, and account preferences.
• Conversation and business content: messages, prompts, assistant responses, attachments and media metadata, agent settings, business instructions, catalog information, and information you choose to provide during a conversation.
• Connected-channel information: platform identifiers, usernames or display names, message and delivery identifiers, webhook events, channel configuration, and credentials required to operate a connection. Channel credentials are encrypted at rest.
• Technical and usage information: IP address, browser and device information, timestamps, request identifiers, security and diagnostic logs, feature usage, and cookies or local-storage values needed for authentication, preferences, and service operation.

3. How we receive information

We receive information directly from workspace owners and users, automatically through use of the service, and from connected platforms when an authorized account interacts with Nara. For example, Telegram may send Nara a message event after a person contacts a connected business account.

4. How we use information

• Provide, operate, maintain, and improve Nara.
• Receive, route, generate, and deliver requested message responses.
• Authenticate users and manage workspaces and channel connections.
• Protect the service, prevent abuse, and diagnose failures.
• Respond to support, privacy, and data-deletion requests.
• Comply with applicable legal obligations and enforce our terms.

5. AI processing

Nara uses OpenAI services to generate and evaluate assistant responses. Relevant conversation content, business instructions, and necessary context may be sent to OpenAI for this purpose. Users should avoid providing sensitive information that is not needed for their request. AI-generated responses may be inaccurate and should be reviewed before being relied upon for important decisions.

6. How we disclose information

We may disclose information to:

• Connected platforms, including Meta services and Telegram, when necessary to receive or deliver messages requested by users.
• Service providers that support hosting, databases, AI processing, authentication, email delivery, security, and service monitoring, subject to appropriate contractual restrictions.
• Authorities or other parties when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or establish or defend legal claims.
• A successor organization in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable law.

We do not sell personal information.

7. Retention

We retain information for as long as reasonably necessary to provide the service, maintain security and reliable records, satisfy legal obligations, and resolve disputes. Retention depends on the information and why it was collected. Channel credentials are retained while their connection is active or needed for authorized recovery. Information may remain temporarily in restricted backups before scheduled deletion.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, export, restrict, object to processing of, or delete personal information. You may also disconnect Nara in the settings of a connected platform. Disconnecting a platform stops future access but may not automatically delete information previously received by Nara.

To exercise a privacy right, email [email protected] with the subject "Privacy Request." Include enough information to identify the relevant Nara account or conversation. We may need to verify your identity and authority before completing the request.

9. Deleting your data

To request deletion, email [email protected] with the subject "Nara Data Deletion Request." Provide your account email and, if the request concerns a messaging channel, the platform and relevant username or phone number. After verification, we will delete or anonymize covered information unless retention is required for security, fraud prevention, legal compliance, or the establishment or defense of legal claims.

See the complete data deletion instructions for the information to include, verification steps, and expected timing.

10. International processing

Nara and its service providers may process information in countries other than the country where it was collected. Where required, we use lawful transfer mechanisms and safeguards intended to protect the information.

11. Security

We use administrative, technical, and organizational measures designed to protect information, including access controls, transport encryption, encrypted storage of connected-channel credentials, and operational monitoring. No transmission or storage system can be guaranteed completely secure.

12. Children

Nara is a business-oriented service and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child provided information to Nara, contact us so we can investigate and take appropriate action.

13. Changes to this policy

We may update this policy as the service or applicable requirements change. We will publish the updated version here and revise the "Last updated" date. Material changes may also be communicated through the service when appropriate.

14. Contact