Privacy Policy

Information We Collect

Personal Data

When you register for an account, book a demo, or contact us, we may collect:

• Name, email address, and phone number
• Company name and job title
• Billing and payment information
• Any other information you choose to provide

Usage Data

We automatically collect certain information when you access our services:

• IP address, browser type, and operating system
• Pages visited, time spent, and navigation paths
• Device identifiers and session information
• Referring URLs and search terms

Forms, sign-up and advertising

We also collect:

• Your name, email and company when you sign up for our newsletter or fill in a lead or demo form
• The details partner programme applicants give us: name, company, contact details and how they plan to work with Nateq
• Anti-abuse signals at sign-up: Cloudflare Turnstile checks your browser and IP address to tell people from bots
• Ad attribution: when you accept advertising cookies, we send Meta (Conversions API) a hashed email address and your IP address to measure our ads. Nothing is sent before you consent

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. See our Cookie Policy in our GDPR Compliance page for details on the types of cookies we use and how to manage them.

How We Use Your Information

We use the information we collect for the purposes below. Each purpose names its legal basis: contract, legal obligation, legitimate interest or consent.

• Provide and maintain our services, and process transactions and billing (contract)
• Send you technical notices, updates and support messages (contract)
• Respond to your comments, questions and customer service requests (contract)
• Keep tax and billing records, and answer lawful requests from authorities (legal obligation)
• Keep our services secure, and detect, investigate and prevent fraud and unauthorized activity (legitimate interest)
• Improve our services and your experience (legitimate interest)
• Analyze website traffic with analytics cookies, and measure our ads (consent)
• Send you our newsletter (consent)

Data we process for our customers

Businesses use Nateq to talk to their own customers on WhatsApp, Instagram, Messenger, email, web chat and phone. When you contact one of those businesses, that business is the controller of your data and Nateq processes it only on its behalf, under a data processing agreement. This covers your name, phone number, email, messages, attachments, call recordings and transcripts. To access, correct or delete that data, contact the business you were talking to. If you contact us instead, we will pass your request to them.

AI and call recording

Many businesses on Nateq use AI to answer messages and calls. They can tell you when you are talking to AI and when a call is recorded, and this notice is on by default. We do not use your conversations to train AI models. We send them to our AI and speech providers only to produce the reply or transcript.

Data Sharing & Third Parties

We do not sell your personal information. We may share your data with:

• Service providers who assist in operating our platform (hosting, analytics, payment processing)
• Professional advisors such as lawyers, auditors, and insurers
• Law enforcement or government authorities when required by law
• Business partners with your explicit consent

The providers that process our customers' data for us are listed on our sub-processors page, and our Data Processing Agreement sets out how we process it.

Where your data is stored and transferred

We store data in Amazon Web Services in Frankfurt, Germany. To provide the service, some providers process data outside the country you are in, including in the European Union and the United States: AI and speech models, call routing, message delivery and email. We send each provider only the data its function needs, and we use contractual safeguards for these transfers. The current list of providers and where they process data is at nateq.io/subprocessors.

How long we keep data

Free Trials and Fraud Prevention

To keep the free trial to one per business, we check new trials against earlier ones. We store a one-way SHA-256 hash, never the value itself, of your account email address, the fingerprint Stripe gives your payment card, your browser's device fingerprint and the IP address you sign up from. We also store your company's email domain (free email providers excluded), the IDs of any WhatsApp Business account and number you connect, and the host of any SIP trunk you connect.

We keep these records after a workspace is deleted, because that is when they are needed: deleting a workspace must not unlock a second trial. They are used only to decide trial eligibility and to investigate trial abuse, never for marketing. IP address hashes are deleted after 30 days. A log of trial verification and review events, with the IP address involved, is kept for 12 months, after which the IP address is removed from it.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Rectification — Request correction of inaccurate or incomplete data
• Deletion — Request deletion of your personal data
• Portability — Request a machine-readable copy of your data
• Restriction — Request that we limit processing of your data
• Objection — Object to processing based on legitimate interests
• Withdraw consent at any time where we rely on it (newsletter, analytics cookies, ad attribution). This does not affect earlier processing.

We answer requests within 30 days. We may ask you to confirm your identity first.

If you are in Saudi Arabia, you can complain to the Saudi Data & AI Authority (SDAIA). In the UAE, the UAE Data Office; in the EU, your local data protection authority.

To exercise any of these rights, email privacy@nateq.io.

Security Measures

We encrypt data in transit and at rest, keep databases in private networks, limit access by role, log who opens conversations and recordings, keep security audit trails, and scan outgoing email attachments and incoming files for malware. If a breach puts your data at risk, we will tell you and the authorities as the law requires.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically. We email account owners 30 days before a material change takes effect.

Contact Information

If you have questions or concerns about this Privacy Policy, please contact us: