Privacy Notice

Effective: October 22, 2026

This notice covers the informational Nexora AI pilot website and project inquiries sent by email. It does not cover a public AI chat or WhatsApp service: neither is enabled for visitors. We will publish an updated notice before enabling either service.

Who is responsible

Nexora AI is an independent project operated by Muhammad Bilal, individual operator of Nexora AI, in Saudi Arabia. Nexora AI is a project name, not a claim of a registered company. Privacy contact: bilalmohsin328242@gmail.com.

What this site processes

• Basic website delivery: when a page is requested, the hosting and delivery providers may process an IP address, request time, browser/device information, and requested page for delivery, abuse prevention, and security.
• Project email: only if you choose to send an inquiry, we receive your email address, any name you include, and the message content. The email button requires an affirmative consent checkbox and prepares a consent statement in the email; your mail app sends nothing unless you choose Send.

This site does not use advertising trackers, analytics, or an online chat form. It uses no third-party font service. Please do not send passwords, payment data, government ID, health information, or other sensitive information.

Purposes and legal bases

• Responding to an inquiry or privacy request: your consent when you choose to contact us and send the message. You can withdraw consent by contacting us; withdrawal does not affect processing already carried out.
• Delivering and protecting the site: limited technical request data for necessary site delivery and information security. The purpose is limited to preventing misuse and keeping the site available; this does not include sensitive data. A balancing assessment is maintained for this security processing.

Providing an inquiry is optional. If you do not want your email processed, do not send an inquiry.

Providers and international processing

The static site and its public files are hosted and delivered by Cloudflare Pages over Cloudflare's global network. When a page is requested, Cloudflare may process the visitor's IP address, request/routing details, browser or device information, and other technical traffic data for delivery, network operation, and security. Processing may occur outside Saudi Arabia. Cloudflare's privacy policy and service terms describe its handling of end-user traffic and retention; the provider's processing and retention controls may vary by service and account settings. Nexora does not receive email or message content from a page request.

If you choose to send an inquiry, it is sent from your own email application to our Gmail address. Google provides that email service and may process email data in the United States and other countries where Google or its affiliates operate; this project does not pin email data to a country. The static website does not send visitor messages to OpenAI or Supabase. The separate OpenAI webchat function and WhatsApp/n8n workflow are not available through this website. If either is enabled later, we will update this notice and review its data flows first. Provider processing locations and safeguards can change; current provider terms apply. See Cloudflare's Privacy Policy and Google's Privacy Policy.

Retention and deletion

• Website request/security data: Nexora does not maintain a separate visitor-log database for this static website. Cloudflare may process or retain technical and security data under its own service terms and account settings; its retention period can vary, and Nexora cannot directly delete provider-controlled records. Cloudflare's request-log documentation says HTTP request-log retention is off by default unless Logpull retention is enabled; we do not promise a fixed provider-level deletion period.
• Email inquiries: the operator's procedure is to delete the inquiry no later than 90 days after the last response or closure, unless it must be kept for a legal claim or legal obligation. Deletion includes removing it from Trash where available; provider-level copies follow Google's own deletion schedule.
• Public website files: contain no visitor-submitted content. They remain published until updated or removed by the operator.

We do not store website-chat text or inquiry form submissions in a Nexora database.

Your rights

Subject to applicable law, you may ask to know about, access, obtain a copy of, correct, or request destruction of your personal data. You may withdraw consent. Contact us at bilalmohsin328242@gmail.com. We may request reasonable information to verify a request and aim to respond within 30 days. You may also complain to the competent Saudi authority (SDAIA).

Children and updates

This pilot website is not intended for children under 18 and does not knowingly invite them to submit personal information. We may update this notice when project features or provider arrangements change; the effective date above will be revised.

For deletion request steps, see Data deletion.