1. Who we are
NURA is a supervised, multi-tenant AI work platform operated by DataMonks Ltd ("DataMonks", "we", "us"). This policy explains what personal and business data NURA processes, why, and the controls that apply when you use the platform or enquire about a pilot.
2. Data we collect
Account data: when you create an account we collect your name, email address, phone number and a password. Authentication is handled by our identity provider (Supabase Auth); passwords are stored by that provider as security hashes, not as plain text.
Business data: during workspace setup we collect your business name, business type, template selection, city or town, and an optional contact phone number.
Customer conversation data: when you connect a channel such as WhatsApp, messages, enquiries, orders, bookings and customer records you create or import are stored in your tenant workspace so the platform can operate.
Usage and billing data: we record workspace activity (conversations, AI usage, enabled services) to operate usage-based billing under an approved, versioned billing configuration.
Contact enquiries: if you email us about a pilot, we keep the contents of that correspondence.
3. How we use data
We use the data above to provision and secure workspaces, authenticate users, route and display customer conversations, generate AI-assisted drafts grounded in your stored business knowledge, enforce human-approval policy, calculate usage, and respond to enquiries.
We do not sell personal data, and we do not use your tenant's customer conversation data to train shared AI models.
4. Tenant isolation
Each workspace is a separate tenant with its own identity, modules, knowledge, conversations, permissions and notifications. Tenant isolation is enforced in the application and data layers: one tenant's data is not visible to another tenant, and platform staff access is limited to what operation and support of the service reasonably requires.
5. AI processing
AI features prepare drafts and suggestions grounded in your workspace's stored knowledge. AI providers remain configurable per workspace. Sensitive actions stay subject to policy and human authority: an approved draft is used only after a person with the right role reviews it.
Content sent to a configured AI provider is limited to what is needed to produce the draft for your workspace. AI output can be wrong; the reviewing staff member remains responsible for what is sent to customers.
6. Service providers
We use Supabase for authentication and application data hosting, and the AI providers you or your workspace configuration select for draft generation. These providers process data on our instructions to the extent needed to provide the service.
7. Retention and deletion
We keep account and workspace data for as long as the workspace exists. If you ask us to delete your account or workspace data, we will delete or anonymise it within a reasonable period, except where we must keep limited records to meet legal, billing or security obligations.
8. Security
Access to the platform requires authentication; sessions are validated on each request; and role-based permissions limit what each user can see and do. AI providers are configured per workspace rather than shared across tenants.
9. Your choices
You can ask to access, correct, export or delete your personal data, or object to particular processing, by emailing us at the contact address below. We may need to verify your identity before acting on a request.
10. Cookies and storage
NURA uses browser storage to keep you signed in and to remember safe continuation paths during authentication. No advertising or cross-site tracking cookies are set by the application.
11. Changes to this policy
We may update this policy as the platform evolves. The effective date above shows the current version; material changes will be announced in the product or by email where appropriate.
12. Contact
Privacy questions, requests and pilot enquiries: pilot@datamonks.com.