Privacy policy
Last updated: 1 November 2026
We collect as little as your page needs. We don't sell your data, we don't show ads, and we don't track the people who visit pages. This policy has the details.
Who is responsible
Nobtha is run from Kuwait by its founder, who is responsible for your data until Nobtha is registered as a company. For anything about your privacy, write to [email protected].
What we collect
- When you reserve a name: the name, your email, your language, who invited you if anyone, and a scrambled fingerprint of your IP address (never the address itself) to spot automated sign-ups.
- Your account: your email, language and plan. Login codes are only stored scrambled.
- Your page: everything you put on it (names, photos, numbers, links, opening hours, files), your draft, and every version you've published.
- The guided start: your answers, and your CV's text if you choose to add it. The CV is read in your browser; only the text you keep reaches us.
- Page visitors: we count visits and taps, with where the visit came from (Instagram or a QR code, say) and what was tapped. We set no cookies for them, store no IP addresses and build no profile of them.
- When you write to us: your message and email.
Why we use it
- To run Nobtha: logging you in, showing your page, and counting its visits for you.
- To protect the platform: stopping automated accounts and fraud, and checking for content that breaks our rules.
- To email you about your account, your name, Nobtha's launch and features that concern you. You can ask us to stop non-essential emails at any time.
AI
When you use the guided start or automatic translation, we send what you wrote to our AI model provider to draft your page. When you publish or upload an image, Cloudflare Workers AI checks it automatically for content that breaks our rules. We don't use your content to train any model.
Who we share it with
We never sell or rent your data. We share it only with providers who run parts of Nobtha for us, each for its own job:
- Cloudflare: hosting, security, image storage, content checks and the human check.
- Neon: our database.
- Resend: sending email.
- Our AI model provider, such as Anthropic: drafting and translating pages.
- Tuta: our inbox, when you write to us.
- A payment provider, once we launch paid plans.
We may disclose data when Kuwaiti law or a court order requires it. Your published page is public by nature: anyone who opens it can see it.
These providers may store your data outside Kuwait, including in Europe and the United States.
How long we keep it
- Your account and page: until you delete your account.
- Login codes: two days.
- Login sessions: they end 60 days after you last used them.
- Reserved names nobody confirmed: deleted a day after their hold runs out.
- Records of visits and taps: 90 days. After that, only each page's daily totals remain.
- When you delete your account, we delete your data, page and images at once, and they leave our backups within days. All we keep is an anonymous count of deleted accounts.
Cookies
We use one cookie to keep you logged in, and your browser remembers your language and your progress on the reservation form. Cloudflare's human check may set its own cookies when you log in or reserve. We use no advertising or tracking cookies, and public pages set no cookies for their visitors.
Your rights
- See your data, and ask for a copy of it.
- Correct it; you can edit most of it yourself in the app.
- Delete it, by deleting your account from the Account page.
- Object to a particular use of it, or ask us to stop non-essential emails.
Write to [email protected] and we'll reply within 30 days.
Security
Every connection to Nobtha is encrypted. Login codes, sessions and IP addresses are stored scrambled so they can't be read, and only people who need data to run the platform can reach it. If a breach ever affects your data, we'll tell you without delay.
Children
Nobtha is for people aged 18 and over, and we don't knowingly collect data from anyone younger. If we learn an account belongs to a minor, we delete it.
Changes
If we change this policy significantly, we'll tell you at least 14 days before it applies. If the Arabic and English texts ever differ, the Arabic text applies.