Last updated:
Who is responsible
Nora is a NeuroLeash service. NeuroLeash LTD, 124 City Road, London EC1V 2NX, is responsible for the information it processes through Nora. NeuroLeash operates Nora’s application, AI service and hosting infrastructure, using the supporting services described below. Contact [email protected] about your information or this notice.
Information you provide
Nora processes your first and last name, account email, messages, AI responses, business profile and preferences to provide conversations and personalised suggestions. Include only information you are entitled to use. Avoid passwords, payment details, sensitive personal records and confidential information you are not authorised to share.
Your conversations, business profile, preferences and saved selections are stored in your authenticated Nora account and sync across devices. Session cookies keep you signed in. Legacy browser-held workspace data may be imported into your account and removed from browser storage.
AI processing and memory
When you upload a file, Nora extracts text or spreadsheet rows. If saving succeeds, the original file and its extracted preview are stored in your private Library. If saving fails, the upload can still be used for the current research without being added to Library.
Selected rows or sections and your business profile are processed through NeuroLeash’s AI service when you start research. Background runs also store the selected input, progress and results so processing can continue after you close the browser. You can review or stop a run in Research; stopping keeps results already completed.
If you choose a completion email, Resend sends a progress summary and a link to Nora to your confirmed account email. The email does not contain the uploaded prospect list or full research results.
When you send a message, Nora sends it, your business profile, recent chat context and selected excerpts from earlier conversations to NeuroLeash’s AI service to generate a response. Suggested prompts also use this context and can be generated when the workspace opens or the mode changes.
If you connect Outlook and call @Outlook in chat, Nora checks recent Inbox and Sent messages, reads the bodies of up to three relevant messages and sends that text to Cloudflare Workers AI for the answer. Nora does not store a separate copy of mailbox bodies or send email. Its answers may quote email content and are saved in your chat history. Saving an editable Outlook draft requires a separate action from you.
You can turn off use of earlier conversations in Settings. Your current conversation and business profile still apply. Earlier assistant responses are context, not independently verified facts.
NeuroLeash operates Nora’s AI service and controls the models, features and context used for each request. We use Cloudflare infrastructure to support this service, including processing the inputs and outputs needed to generate AI responses. Further information is available in Cloudflare’s AI data processing information. Processing may involve infrastructure outside the UK; no UK-only processing commitment is made here. Contact us for the applicable processing and transfer arrangements before sharing restricted data.
Why we process information
We process the information needed to provide the service you request. Optional personalisation is under your control. We also process limited operational information to keep the service working, investigate errors and prevent misuse, relying on our legitimate interests in operating a reliable service. We do not use Nora to make decisions with legal or similarly significant effects about individuals.
Storage and retention
Your account workspace remains available until you remove its contents through Settings or request deletion. Library files are managed separately: deleting a file removes its original and extracted preview, but does not remove copies used in conversations or research runs. Request deletion of research runs or your full account by emailing us; stopping a run is not deletion. Deleting a conversation also removes its linked discoveries from future workspace views and memory. Backups and provider or operational logs may retain copies separately; deleting workspace data does not erase information already processed by providers.
For answer reliability, Nora keeps a server-owned audit record for up to 30 days, with hourly cleanup after expiry. It records source URLs with query values removed, fingerprints of search queries and answers, tool outcomes, model and usage references, checks, timing and errors. It does not store an extra copy of your prompts, file excerpts, mailbox bodies, credentials or hidden model reasoning. Access is restricted to authorized operational systems and staff for reliability and safety investigations. These operational records survive conversation deletion until expiry, and are removed from the active database when your account is deleted; backups may retain copies separately.
Providers and public sources
NeuroLeash manages Nora’s hosting, authentication, database and file storage. Research queries and requested pages are processed by our search and extraction services and their search providers. A mailbox check may disclose the address being checked to its mail server. Company and contact search queries may include names, domains and the business context needed for the search.
We also use Cloudflare for DNS, proxied traffic and caching to help improve Nora’s performance, availability and security. Depending on the service involved, Cloudflare processes network information such as IP addresses and request details, as well as content passing through its infrastructure. This supports the service operated by NeuroLeash.
Resend is our email delivery provider. It processes email addresses and message content to deliver account, security and requested research-completion emails. Resend does not provide Nora’s AI, application hosting or account database.
When enabled, Companies House lookups use company names or company numbers to retrieve public registration details and officer appointments. Other research sources can include company websites and public business directories. These sources may contain names, roles and published business contact details of people who do not use Nora. A public listing does not establish permission to contact someone, and a listed director is not necessarily the purchasing contact.
Stripe hosts checkout and billing management. Nora stores the customer, subscription and invoice references needed to show billing status; payment details are entered on Stripe. Stripe processes live subscription payments when you choose a plan.
Your choices and rights
Use Settings → Account to correct your business context, and Settings to disable cross-chat recall, export workspace data or delete conversations. The workspace export does not include original Library files or all background-run records; download original files from Library and contact us for a wider data request. Depending on the circumstances, UK data protection law gives you rights to access, correct, erase or restrict use of personal information, request portability and object to processing. Where consent is relied on, it may be withdrawn.
Send requests to [email protected]. If Nora research contains information about you, you can also use this address to request access, correction or removal. We may need information to confirm your identity and locate the relevant record. You can also complain to the Information Commissioner’s Office.
Changes to the service
We will update this notice when the service or its providers change how information is processed. The date above identifies the current version.