Privacy Policy
Overview
Data We Collect
How We Use Your Data
We only process your data for the purposes described here. We do not use your data for any purpose not listed below.
Service delivery: connecting, operating, and maintaining your AI agent, using Meta Platform Data, business content, and account data
Onboarding: setting up your account and configuring your agent, using your name, email, phone, and WhatsApp/Telegram handle
Billing: processing subscription payments via bKash and SSLCommerz, using transaction records only
Support: responding to your questions and resolving issues, using account data and communication history
Legal compliance: meeting applicable legal obligations, using data only as required by law
AI Processing & Automation: To provide our AI-driven responses, we process message content (text and media) through artificial intelligence models. These models analyze incoming queries to generate relevant, automated replies on behalf of the business. This data is processed in real-time and is used solely to fulfill the requested communication.
End-User & Customer Data
When our AI agents (such as Nebula) interact with your customers (End Users) through Messenger, WhatsApp, or Instagram, those conversations may contain personal information shared by End Users, such as names, contact details, addresses, and order information.
How this data is handled:
We do not store End User data in our databases. Order and conversation data collected during chats is written directly into the Client's own Google Sheet. Numorph does not retain this data after it is transferred to the Client's storage.
Clients are the data controllers. The Client whose page or channel the End User messaged is the data controller responsible for that End User's data. Numorph acts as a data processor — we handle the data only on the Client's instructions and solely to provide the agreed service.
We are not liable for Client data practices. Clients are responsible for ensuring they have appropriate legal basis to collect and process their customers' data, and for informing their customers that their messages may be handled by an AI system.
Note to Clients: You are responsible for obtaining any necessary consent from your customers before deploying an AI agent on your communication channels. Numorph provides the technology; you remain the data controller for your customers' personal data.
Data Subject Rights for Endusers: If any of your customers contacts you or Numorph requesting access to, correction of, or deletion of their personal data, Numorph will promptly notify you of such a request and cooperate with you to fulfill it. End Users whose data is held in a Client's Google Sheet should direct their requests to that Client directly.
Platform & Third-Party Integrations
We use trusted third-party services to operate Numorph. Each is engaged under a data processing agreement or equivalent safeguards. The following providers may process your data as part of delivering our services:
AI Sub-processors: We use OpenAI to power our AI agent responses. OpenAI is contractually bound to process data only as instructed by Numorph and is prohibited from using your data to train its own models or for any purpose other than providing the specific service requested
n8n: workflow automation and integration orchestration. Handles message routing and workflow triggers.
Supabase: backend database and authentication infrastructure. Stores Client account data and session data.
Google Drive / Google Sheets: Client-owned storage for business content and order data. Business content is uploaded by Clients; order data is written directly by the agent into the Client's own sheet.
Framer: website hosting for numorph.net. Processes standard website visitor data.
bKash: payment processing for Bangladesh. Handles transaction data; Numorph does not store payment credentials.
SSLCommerz: payment gateway for Bangladesh. Handles transaction data; Numorph does not store payment credentials.
Meta (Facebook / Instagram / WhatsApp): communication platform APIs. Processes page access tokens and messages on behalf of Clients.
Google Analytics: website analytics. Collects anonymized usage data, page views, and device information.
Meta Pixel: website conversion tracking. Tracks page visit events and conversion signals.
We do not sell your data to any third party. We share data with third parties only to the extent necessary to provide our services, and we require all third-party processors to protect your data in accordance with applicable law.
Data Retention
We retain your data only for as long as is necessary to provide our services or to comply with applicable legal obligations. The following retention periods apply:
Client account data (name, email, contact details): retained for the duration of your active subscription, plus 30 days after termination
Meta Platform Data (tokens, page data): retained for the duration of the active integration; revoked immediately upon disconnection
Business content (product lists, FAQs, policies): retained for the duration of your active subscription; deleted upon request or termination
End User conversation / order data: not retained by Numorph; written directly to the Client's Google Sheet
Payment transaction records: retained for 7 years for tax and accounting compliance
Technical / server logs: retained for 12 months
Website analytics data: retained for 26 months (Google Analytics default; governed by Google's policies)
When a retention period expires or your account is terminated, we will securely delete or anonymize your data, unless a longer period is required by law.
Your Rights & Control
As a Client or as an individual whose data we hold, you have the following rights with respect to your personal data. These rights apply to data for which Numorph is the data controller.
Access. You may request a copy of the personal data we hold about you.
Correction. You may request that we correct any inaccurate or incomplete data we hold about you.
Deletion. You may request that we delete your personal data.See our Data Deletion page at numorph.net/data-deletion for full instructions.
Object. You may object to our processing of your personal data where we rely on legitimate interest as our legal basis.
Portability. You may request a copy of your data in a structured, machine-readable format.
Withdraw consent. Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at hello@numorph.net We will respond within 30 days of receiving your request.
Security
We take reasonable and appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures include encrypted data transmission (HTTPS), access controls, and using reputable third-party infrastructure providers with their own security certifications.
Access tokens and API credentials provided by you are stored securely and are never shared with unauthorized parties.
While we strive to protect your data, no system is 100% secure. If you believe your data has been compromised, please contact us immediately at [email protected]. In the event of a data breach that may affect your rights, we will notify affected parties as required by applicable law.
Cookies & Tracking Technologies
Our website (numorph.net) uses cookies and similar tracking technologies. These are small files placed on your device that help us understand how visitors use our site and improve our services.
Types of Cookies We Use
Essential cookies (Numorph / Framer) — required for the website to function correctly. Cannot be disabled.
Analytics cookies (Google Analytics) — measures website traffic, pages visited, and time on site. Data is anonymized.
Marketing / tracking cookies (Meta Pixel) — tracks conversions and page events to measure ad performance on Meta platforms.
You can control or disable non-essential cookies through your browser settings. Note that disabling cookies may affect your experience on our website.
You can opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout and manage Meta ad preferences at facebook.com/ads/preferences.
Children
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, contact us at hello@numorph.net and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or Meta's Platform Terms. When we make material changes, we will notify Clients by email or by a prominent notice on our website before the changes take effect.
The "Last Updated" date at the top of this page always reflects when the most recent version came into effect. Your continued use of Numorph services after any update constitutes your acceptance of the revised policy.