Privacy Policy for Naseh

This Privacy Policy (the Policy) explains how Naseh LLC - QFC 03123 (Naseh, we, us, or our) collects, uses, stores, shares, and otherwise processes personal data through the Naseh platform, website, applications, content, and related services (collectively, the Platform).

By accessing or using the Platform, you acknowledge this Policy. Where consent is required by applicable law, we will seek it in the relevant manner.

This Policy applies to personal data processed in connection with the Platform, including information provided by users, collected automatically, received from third parties, or generated through service delivery, support, billing, compliance, and security activities.

We may process the following categories of personal data, depending on how you use the Platform:

• identity and account information, such as name, username, company name, job title, and login credentials;
• contact information, such as email address, telephone number, billing address, and correspondence details;
• transaction and subscription information, such as selected plans, orders, invoices, payments, refunds, and service history;
• technical and usage information, such as IP address, browser type, device identifiers, pages viewed, session logs, timestamps, and approximate location derived from technical data;
• communications and support records, such as inquiries, complaints, support tickets, attachments, and correspondence with Naseh;
• content and documents submitted through the Platform, including prompts, uploaded files, forms, workflow inputs, and generated outputs, to the extent they contain personal data; and
• compliance and verification information, where necessary, such as identity verification materials, fraud-prevention indicators, and records needed to comply with legal or regulatory obligations.

We may collect personal data directly from you, from your employer or organization, from your use of the Platform, from payment service providers, analytics providers, identity-verification providers, public sources, and from other lawful third-party sources.

We may process personal data for the following purposes:

• providing, operating, maintaining, securing, and improving the Platform and related services;
• creating and administering accounts, subscriptions, bookings, and user profiles;
• processing orders, payments, invoices, refunds, and service communications;
• responding to inquiries, support requests, complaints, and legal notices;
• authenticating users, preventing fraud, monitoring abuse, and protecting the Platform, users, and third parties;
• complying with legal, regulatory, judicial, tax, accounting, recordkeeping, and enforcement obligations;
• sending service-related notices, updates, transactional messages, and important administrative communications;
• conducting internal analytics, audits, troubleshooting, quality assurance, and business administration; and
• where permitted, sending marketing communications, measuring engagement, and managing user preferences.

Where QFC data protection law applies, Naseh LLC - QFC 03123 will process personal data only on one or more lawful bases permitted under applicable law. Depending on the circumstances, these may include consent, steps requested before entering into a contract, performance of a contract, compliance with legal obligations, protection of vital interests, tasks carried out in the public interest where applicable, and legitimate interests that are not overridden by the rights and legitimate interests of the relevant individual.

Where processing is based on consent, you may withdraw that consent to the extent permitted by law, without affecting the lawfulness of processing carried out before withdrawal.

Where required by applicable QFC rules, our privacy information may also describe the categories of personal data concerned, the recipients or categories of recipients, whether personal data may be transferred outside the QFC, the applicable safeguards for such transfers, the relevant retention period or criteria used to determine it, available data-subject rights, the right to lodge a complaint with the competent authority, the source of the data where they were not collected directly from you, and whether automated decision-making or profiling is used in a manner that produces legal or similarly significant effects.

The Platform may use cookies, SDKs, pixels, local storage, and similar technologies to enable functionality, remember preferences, analyze usage, measure performance, improve services, and support security. Some of these technologies may be operated by third-party providers.

Where required by law, we will request consent before placing non-essential cookies or similar technologies on your device.

We may disclose personal data to the following categories of recipients where reasonably necessary and lawful:

• affiliates and group companies;
• hosting, cloud, infrastructure, software, analytics, communications, customer-support, payment-processing, verification, and security providers;
• professional advisers, auditors, insurers, and financing parties;
• courts, regulators, law-enforcement bodies, tax authorities, and competent governmental authorities;
• counterparties, service partners, or other users where this is inherent in the requested service or transaction; and
• any acquirer, successor, investor, or transferee in connection with a merger, restructuring, financing, sale of business, or transfer of assets.

Personal data may be processed in Qatar, within the QFC, and in other jurisdictions where Naseh, its affiliates, or its service providers operate. Where personal data is transferred outside the QFC or across other borders, Naseh will take reasonable steps to ensure an appropriate level of protection, including by applying safeguards required or recognised under applicable law and by providing further information about those safeguards where required.

If we use solely automated processing, including profiling, to make a decision that has legal effects on you or otherwise significantly affects you, and QFC law applies, you may have the right to human intervention, to express your point of view, and to contest the decision, subject to any lawful exception.

Naseh will retain personal data for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain accounts, resolve disputes, enforce agreements, protect rights, prevent fraud, meet legal and regulatory obligations, and maintain appropriate business and security records. Where QFC law applies, retention will also reflect the stated retention period or the criteria used to determine that period.

Retention periods may vary depending on the nature of the data, the service involved, contractual commitments, legal requirements, limitation periods, and operational needs.

Naseh will use reasonable technical, organizational, and administrative measures designed to protect personal data against unauthorized or unlawful access, loss, misuse, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and absolute security cannot be guaranteed.

For any AI-enabled or AI-facing functionality made available through the Platform, users must not upload confidential or personal data to third-party AI tools through or in connection with the Platform unless expressly authorized and protected by appropriate safeguards. Users remain responsible for ensuring they have lawful authority to submit personal data through the Platform.

Subject to applicable law, you may have rights to request access to personal data, correction of inaccurate data, deletion, restriction of processing, objection to certain processing, portability where applicable, withdrawal of consent where processing is based on consent, and—where QFC law applies—rights in relation to direct marketing and qualifying automated decision-making.

Where QFC law applies, you may also have the right to complain to the Office of the Data Protection Commissioner or another competent authority, and to ask for information about applicable transfer safeguards where personal data is transferred outside the QFC.

These rights are not absolute and may be limited where an exception applies under applicable law.

The Platform is not intended for children unless expressly stated for a specific service. Where a service is intended to involve a minor, the relevant parent, guardian, or authorized representative must provide any required permissions and ensure lawful submission of personal data.

Naseh may amend this Policy from time to time. The updated version will be posted on the Platform with its effective date. Where required by law, we will provide additional notice or obtain consent for material changes.

Questions, requests, or complaints about this Policy or personal-data processing may be sent using the contact details made available on the Platform.