The documents that govern Nora and how a property's information is handled. Where a summary is shorter than the signed agreement, the agreement controls.
Effective 30 June 2026 · Last updated 30 June 2026
1Who we are
Nora is operated by Advant AI Pte. Ltd. (Singapore, UEN 202621829D), registered office 1 North Bridge Road, #18-06 High Street Centre, Singapore 179094 ("Advant", "we"). For privacy matters: privacy@advant.ai.
2Who this applies to
Visitors to dearnora.ai, people who join our waitlist or contact us, attendees of our sessions, and the named administrators and staff users of customer accounts. Personal data of a hotel's guests processed inside Nora is handled on the hotel's instructions as processor — see the DPA.
3What we collect
Contact & enquiry data (name, work email, role, property, message content); account & user data (names and contacts of staff users/administrators; authentication and access logs); usage data (how the site and product are used, via cookies); and communications with us. We do not seek special-category data and ask you not to send it unsolicited.
4How we use it, and why
To respond to enquiries and deliver sessions; to provide, secure and improve the site and product and administer accounts; to send service and (where permitted) relevant updates with an easy opt-out; and to comply with law. Where the GDPR applies, we rely on your request, our legitimate interests, consent, contract and legal obligation as relevant.
5AI & automated processing
Nora is an AI product. To deliver it we share inputs with trusted third-party AI providers. We do not use personal data to train our own models, and do not subject website visitors to solely-automated decisions with legal or similarly significant effects. See our AI Transparency & Disclosures.
6Sharing & sub-processors
We share personal data only with service providers that help us run Nora and our business, each under appropriate obligations — see our Sub-processors list. We may also share where required by law or in a corporate transaction, with protections in place. We do not sell personal data.
7International transfers
We use providers in the EU and the United States, so personal data may be processed outside your country. Where personal data leaves the EU/EEA or UK, we rely on recognised safeguards such as the EU Standard Contractual Clauses, and make further information available on request.
8Retention
We keep personal data only as long as needed for the purposes above, and longer only where the law requires. Customer data processed within Nora is returned and deleted as described in the DPA.
9Your rights
Depending on where you are, you may have rights to access, correct, delete, port, restrict or object, and to withdraw consent — write to privacy@advant.ai. If your data is processed within Nora on a hotel's instructions, contact that hotel as controller; we will assist. You may also complain to your local supervisory authority.
10Security
Encryption in transit and at rest, multi-factor authentication on administrative systems, least-privilege access, and audit logging. No system is perfectly secure, but we work to keep your data safe and respond promptly if something goes wrong.
11Cookies
Necessary cookies to run the site and, with consent where required, analytics cookies — see the Cookie Notice.
12EU & UK representatives
As a company outside the EEA, Advant has appointed an EU Representative under Article 27 GDPR: Sérgio Abreu, CIPP/E (EDPO), Senior Legal Manager — Sergio.abreu@edpo.com, +32 470 56 32 59. A UK Representative is appointed where required for UK data subjects.
13Children
Nora is a business tool, not directed to children, and we do not knowingly collect their personal data.
14Changes
We may update this policy; material changes show in the "Last updated" date, with notice where the law requires.
Nora · Legal
Terms of Use.
Effective 30 June 2026 · Last updated 30 June 2026
1Agreement to these terms
These Terms are between you (or the organisation you represent) and Advant AI Pte. Ltd. (Singapore, UEN 202621829D). By accessing dearnora.ai or using Nora, you agree to them. If accepting for an organisation, you confirm you're authorised to bind it.
2What Nora is
An AI commercial-intelligence assistant for hotels — a web Workbench and messaging — that surfaces signals and prepares briefs, drafts and recommendations for a property's team to review and release. We may improve, change or rename features, provided core functionality isn't materially degraded during a paid term.
3Eligibility & accounts
You must be able to form a binding contract and use Nora for business only. You are responsible for your account, credentials and all activity under them, and must promptly notify us of any suspected compromise.
4Acceptable use
See our Acceptable Use policy. In short: no reselling, reverse-engineering, uploading data you have no right to process, automated decisions with legal effect over individuals, unlawful use, or interference with security.
5AI outputs — read before you rely
Nora uses AI, including third-party language models. Outputs are probabilistic and may be incomplete or inaccurate; they support, and do not replace, your judgment. You are responsible for reviewing outputs before use and for any decision taken on them. Outputs are not professional advice.
Nora counsels; you decide.
6Your content & data
You retain your data and, subject to your agreement and fees, own outputs prepared specifically for you. You grant us the licence needed to operate and improve the service, including anonymised, non-identifying aggregates. Personal data is handled under our Privacy Policy and DPA.
7Our intellectual property
Advant owns Nora and all related IP — models, prompts, code, templates and documentation — and improvements to them. No rights are granted by implication.
8Fees
Where you subscribe, fees and pricing are set out in your Order Form and MSA. Website access and the waitlist are free. Fees are exclusive of taxes.
9Warranties & disclaimers
EXCEPT AS EXPRESSLY STATED IN A SIGNED AGREEMENT, THE WEBSITE AND SERVICE ARE PROVIDED "AS IS" AND "AS AVAILABLE", AND WE DISCLAIM ALL IMPLIED WARRANTIES TO THE FULLEST EXTENT PERMITTED BY LAW, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT OUTPUTS ARE ACCURATE OR COMPLETE OR THAT THE SERVICE WILL BE UNINTERRUPTED.
10Limitation of liability
NEITHER PARTY EXCLUDES LIABILITY FOR FRAUD, OR DEATH OR PERSONAL INJURY CAUSED BY NEGLIGENCE, OR ANY LIABILITY THAT CANNOT BE EXCLUDED BY LAW. SUBJECT TO THAT, NEITHER PARTY IS LIABLE FOR INDIRECT OR CONSEQUENTIAL LOSS OR LOSS OF PROFIT, REVENUE, BUSINESS, GOODWILL OR DATA. FOR PAID CUSTOMERS, TOTAL LIABILITY IS CAPPED AS SET OUT IN THE MSA; FOR FREE USE OF THE WEBSITE, TO THE FULLEST EXTENT PERMITTED BY LAW.
11Suspension & termination
We may suspend or end access for breach, where required by law, or to protect the service. You may stop using Nora at any time. Provisions on content, IP, disclaimers, liability and governing law survive.
12Changes
We may update these terms; material changes take effect on posting or notice, and continued use means acceptance. Changes are not retroactive.
13Governing law
Singapore law. Disputes resolved by arbitration administered by the Singapore International Arbitration Centre (SIAC), seat Singapore, in English — save that we may seek injunctive relief in any competent court.
Nora · Legal
Data Processing Agreement.
Effective 30 June 2026 · Last updated 30 June 2026
Roles. The Customer is the Controller and Advant is the Processor of the Personal Data processed to provide the Services.
Customer responsibilities. The Customer is responsible for compliance as Controller, including establishing a lawful basis and providing notices to, and obtaining consents from, data subjects, and warrants that its instructions and provision of data comply. Mere receipt by Advant of data the Customer was not entitled to provide does not of itself render Advant liable.
Processing on instructions. Advant processes personal data only on the Customer's documented instructions (the agreement, Order Form and the Customer's configuration and use), save where law requires otherwise, with notice where permitted.
Subject-matter & data. Automated processing for the term to generate signals, briefs and recommendations and operate AI assistants. Data subjects are Customer staff users; data is their names, contact details and message content. No payment-card data; no special-category data save dietary/accessibility preferences where provided.
AI service providers. The Services use third-party AI providers to generate outputs. AI Input and AI Output, including Customer Data, are shared with and processed by them to deliver the Services. Advant does not train its own models on Customer Data, and is not liable for a provider's independent acts beyond selecting reputable providers and imposing equivalent obligations.
Sub-processors. The Customer authorises Advant to engage sub-processors under equivalent obligations. Advant gives at least 30 days' notice of new sub-processors; the Customer may object on reasonable grounds within 14 days.
International transfers. At-rest data is stored in the EU; AI inference runs on US-based providers. Where personal data leaves the EU/EEA, the parties rely on the EU Standard Contractual Clauses, supported by a transfer assessment on request. The Customer also acknowledges and instructs these transfers as Controller.
Security. Encryption in transit and at rest (TLS 1.2+), multi-factor authentication on administrative systems, least-privilege access, audit logging and regular assessments.
Breach notification. Advant notifies the Customer without undue delay and within [48] hours of becoming aware of a Personal Data Breach affecting Customer Data.
Assistance, return & deletion. Advant reasonably assists with data-subject requests, security, breach notice and impact assessments, and supports one audit per year via documentation. On request within 30 days of termination, Advant exports Customer Data and deletes it within 90 days, save routine backups or as law requires.
Model training. Advant does not use Customer Data, or any identifying derivative, to train, retrain or fine-tune any AI or machine-learning model. Advant may use fully anonymised, non-identifying aggregated data to improve the Services.
EU Representative. As Advant is established outside the EEA, it has appointed an EU Representative under Article 27 GDPR: Sérgio Abreu, CIPP/E (EDPO), Senior Legal Manager — Sergio.abreu@edpo.com, +32 470 56 32 59.
Transparency
AI Transparency & Disclosures.
Effective 30 June 2026 · Last updated 30 June 2026
You're speaking with Nora — and Nora is AI
When you talk to Nora — in chat, on WhatsApp, anywhere she appears — you are speaking with an artificial-intelligence assistant, not a person. We say so plainly, at the start, as good practice and increasingly as law requires, including Article 50 of the EU AI Act (applicable from 2 August 2026). Outputs are identified as AI-assisted where the law expects it.
A draft, not a verdict
Nora uses AI, including third-party language models, to surface signals and prepare briefs, drafts and recommendations. Because that work is probabilistic, it can be incomplete, out of date, or simply wrong. It is prepared for a person to read, weigh and release.
Nora counsels. The property decides.
Her outputs are not legal, financial, tax or other professional advice, and should be checked before they are relied upon. You remain responsible for any decision taken on the strength of them.
The models behind her
To do her work, Nora passes information to trusted third-party AI providers, which generate the outputs she brings back. The inputs sent to them, and the outputs they return — including a property's data — are shared for one purpose only: to deliver the service. Those providers are named in our Sub-processors list.
We don't train on your property
We do not use a property's data, or any data that could identify it or an individual, to train, retrain or fine-tune our own models. We may learn from fully anonymised, aggregated patterns that identify no one. AI providers process under their own terms; we choose them with care and hold them to obligations equivalent to ours.
Always a person in the loop
Nora is decision support, made to be used with human judgment. She is not to be used for automated decisions carrying legal or similarly significant weight over an individual, nor for any unlawful purpose.
Nora · Legal
Sub-processors.
Last updated 30 June 2026
We engage the following sub-processors to deliver Nora. Each is engaged under a written agreement with data-protection obligations at least equivalent to ours. We give at least 30 days' advance notice of any material change.
Vendor
Purpose
Region
Hetzner
Cloud Infrastructure
EU
Supabase
Database Services
EU
Google Cloud Platform
Backend Services
EU
OpenAI
AI Inference
US
OpenRouter
AI Inference
US
Meta / WhatsApp
Messaging Platform
US
Responsibility for the data you choose to upload to and process through Nora rests with you as the Customer, including ensuring you have the right to use it.
Nora · Legal
Cookie Notice.
Effective 30 June 2026
We use cookies and similar technologies on dearnora.ai to run the site and understand how it is used.
Necessary cookies
Required for the site to function (security, load balancing, session). These are always on.
Analytics cookies
With your consent where required, we use analytics (e.g. Google Analytics) to understand usage and improve the site. You can accept or decline these via our cookie controls.
Managing cookies
You can control cookies through your browser settings and our on-site controls. Declining non-essential cookies will not affect access to the site's core content.
[Insert cookie-management link / consent-tool reference and a full cookie table before publishing.]
Nora · Legal
Acceptable Use.
Effective 30 June 2026
When using Nora, you agree not to, and not to permit any third party to:
resell, sublicence or provide the Services to any third party except as agreed;
reverse-engineer, decompile or attempt to derive the source or models of Nora;
upload data you do not have the right to process;
use the Services to make automated decisions producing legal or similarly significant effects over individuals (including under Article 22 GDPR or equivalent laws);
use the Services for any unlawful, harmful or infringing purpose; or
interfere with the security or integrity of the Services.
Nora is provisioned to a designated named user and a single registered messaging number; access should not be shared or rotated across other numbers, devices or accounts. Nora is decision support and must be used with human oversight.
