Privacy Policy

1Introduction

This Privacy Policy explains how Nine Square Technology (“we,” “us,” or “our”) collects, uses, discloses, and protects personal data in connection with the Rannah AI agent platform and our voice and chat AI agents, websites, applications, and related services (the “Service”). It applies to visitors to our websites, to customers who register for the Service, and to end users who interact with our customers’ AI Agents. Please read it together with our Terms and Conditions and our Data Protection (GDPR) Policy.

2Who We Are

Nine Square Technology is an establishment registered in the Kingdom of Bahrain under Commercial Registration No. 184120-1, and is the operator of the Rannah platform. For personal data that we determine the purposes and means of processing, we act as the data controller. Where we process personal data on behalf of a customer who deploys an AI Agent, we act as a data processor and process that data in accordance with our agreement with that customer. Our contact details are set out in the “Contact Us” section below.

3Information We Collect

We collect the following categories of personal data:

Account and contact information:

name, email address, telephone number, company or organization name, billing details, and login credentials that you provide when you register for or manage the Service.

Configuration and content data:

the prompts, instructions, knowledge sources, files, and settings you use to build and operate your AI Agents.

Conversation data:

the messages, voice recordings, transcripts, and other content exchanged between an AI Agent and an end user, together with related metadata such as timestamps and session identifiers.

Usage and technical data:

information about how the Service is accessed and used, including IP address, device and browser type, operating system, pages viewed, features used, and diagnostic and log data.

Cookies and similar technologies:

identifiers and preferences collected through cookies and similar technologies on our websites and dashboards.

Communications:

information you provide when you contact us for support, sales, or other enquiries.

4How We Use Your Information

We use personal data to: provide, operate, maintain, and secure the Service; create and administer accounts and process payments; configure, deliver, and improve AI Agent functionality; respond to enquiries and provide customer support; monitor, analyze, and improve the performance, reliability, and safety of the Service; detect, prevent, and address fraud, abuse, security incidents, and technical issues; communicate with you about the Service, including service-related and, where permitted, marketing communications; and comply with legal obligations and enforce our agreements. We do not sell your personal data.

5Legal Bases for Processing

Where data-protection law applies, we rely on the following legal bases to process personal data: performance of a contract, to provide the Service you have requested; our legitimate interests, to operate, secure, and improve the Service, provided those interests are not overridden by your rights; your consent, where we ask for it, for example for certain cookies or marketing; and compliance with a legal obligation. Where we act as a processor on behalf of a customer, that customer is responsible for establishing the legal basis for the processing of end-user data.

6Cookies and Similar Technologies

We and our service providers use cookies and similar technologies to operate our websites and dashboards, keep you signed in, remember your preferences, measure and analyze usage, and secure the Service. Some cookies are strictly necessary for the Service to function; others are used for analytics and, where applicable, marketing, and are used only with your consent where required. You can control cookies through your browser settings and, where offered, through our cookie preferences tool. Disabling certain cookies may affect how the Service functions.

7How We Share Information

We do not sell personal data. We share personal data only as follows:

Service providers and sub-processors:

with trusted third parties who process personal data on our behalf to provide hosting, infrastructure, AI model processing, communications, analytics, payment processing, and support, under contractual obligations to protect the data and use it only as instructed.

Our customers:

where you are an end user, the content of your interactions with an AI Agent is made available to the customer that deploys that AI Agent, who acts as the controller of that data.

Legal and compliance:

where required to comply with applicable law, regulation, legal process, or a governmental request, or to protect the rights, property, or safety of Nine Square Technology, our users, or others.

Business transfers:

in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case personal data may be transferred as part of that transaction, subject to this Privacy Policy.

8International Data Transfers

We and our service providers may process and store personal data in countries other than the one in which it was collected, including outside the Kingdom of Bahrain and the European Economic Area. Where we transfer personal data internationally, we take steps to ensure it receives an adequate level of protection, including by using recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses and appropriate supplementary safeguards where required. Further detail is provided in our Data Protection (GDPR) Policy.

9Data Retention

We retain personal data for as long as necessary to provide the Service, to fulfil the purposes described in this Privacy Policy, and to comply with our legal, accounting, and reporting obligations. Where we act as a processor, we retain and delete customer and end-user data in accordance with our agreement with the relevant customer and their configured settings. When personal data is no longer needed, we delete or anonymize it using appropriate measures.

10Data Security

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, and destruction, including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; however, we work to protect personal data and to respond promptly to security incidents.

11Your Privacy Rights

Depending on your location and applicable law, you may have rights in relation to your personal data, including the right to access, correct, update, or delete it, to object to or restrict certain processing, to withdraw consent, and to data portability. If you are an end user interacting with a customer’s AI Agent, please direct your request to that customer in the first instance, as they control that data; we will assist them as required. To exercise your rights with respect to data for which we are the controller, contact us using the details below. We will respond in accordance with applicable law. A fuller description of rights for individuals in the European Economic Area and the United Kingdom is set out in our Data Protection (GDPR) Policy.

12Children’s Privacy

The Service is not directed to children, and we do not knowingly collect personal data from children under the age of 16 (or the minimum age required in your jurisdiction). If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

13Third-Party Links and Services

Our websites and the Service may contain links to, or integrate with, third-party websites and services that we do not operate. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you use.

14Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes become effective indicates your acceptance of the updated Privacy Policy.

15Contact Us

If you have any questions or requests regarding this Privacy Policy or your personal data, please contact us: