GDPR

Privacy Policy

Last updated: June 8, 2026

NoorDine is committed to protecting your personal data. This policy explains what data we collect, why we collect it, and how you can exercise your rights.

1. Data Controller

2. Data We Collect

a) Account Data

When you register on NoorDine, we collect:

• Email address
• Password (stored securely, hashed)
• Navigation data on the platform
• History of your questions and received answers

b) Navigation Data

We automatically collect certain technical information during your visit:

• IP address (anonymized after 12 months)
• Browser type and version
• Pages visited and time spent
• Preferred language

c) Usage Analytics

We use analytics tools to understand how users interact with NoorDine. This data helps us improve the service. Analytics data is anonymized where possible and stored for a maximum of 12 months.

d) Payment Data

Payments are processed by Stripe. NoorDine does not store your banking data. Only your subscription reference is retained.

3. Purposes and Legal Basis

• Service delivery: performance of contract (Art. 6-1-b GDPR)
• Personalization: explicit consent (Art. 6-1-a GDPR)
• Service improvement: legitimate interest (Art. 6-1-f GDPR)
• Payments: legal obligation / contract performance
• Customer support: consent (Art. 6-1-a GDPR)

4. Data Retention Period

• Account data: retained until user deletion or deletion request
• Q&A history: 36 months, then deleted or anonymized
• Navigation data: maximum 12 months
• Payment data: compliant with accounting obligations (10 years)

5. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of your data ("right to be forgotten")
• Right to restriction: limit the processing of your data
• Right to portability: receive your data in a structured format
• Right to object: object to processing of your data for marketing purposes
• Right to withdraw consent: withdraw your consent at any time

To exercise your rights, contact us at: contact@noordine.app. We respond to all requests within a maximum of 30 days.

6. Cookies and Trackers

NoorDine uses cookies. For details on the types of cookies used and how to manage them, see our Cookies page.

7. Third-Party Services

NoorDine uses the following third-party services:

• Analytics: We may use anonymized usage analytics to improve the platform. No personal data is shared with advertising networks.
• Payments: Stripe processes all payment data. Stripe's own privacy policy applies to payment data.
• Hosting: Render (our hosting provider) may process technical data in accordance with their privacy policy.
• AI services: AI-powered features are processed through secure API connections. No user conversation data is stored beyond the session.

8. Transfers Outside the European Union

NoorDine uses Render (hosting provider) whose servers may be located in the United States. Appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

9. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, modification, disclosure, or destruction. This includes encryption of sensitive data, use of firewalls, and strict access control procedures.

10. Children's Privacy

NoorDine is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us immediately at contact@noordine.app.

11. Changes to This Policy

We may update this privacy policy periodically. Any changes will be posted on this page with a revised update date. We encourage you to review this page regularly.

12. Contact DPO