How BearingNorthAI handles your information.

3. Data ownership and AI use

Your data stays your data, on every product.

Customer conversations, uploaded documents, ERP and CRM records, tender archives, and business policies belong to the business that provided them. None of this information is used to train public AI models, on Zenvox, ZenDox, Zortex, ZentraBid, or any other product we build. Each customer's data is kept isolated in its own tenant or namespace and is never pooled or cross-referenced with another customer's data. Full detail on how we secure and isolate this data is covered on our security and compliance page.

4. Third-party service providers

Who processes your data

We use a small number of established providers to operate our products. We do not sell data, and we do not share it for advertising.

Messaging — Meta Platforms, Inc. and WhatsApp LLC (WhatsApp Business Platform, Cloud API). Where you or your customers communicate with us or with a BearingNorthAI product over WhatsApp, message content, phone numbers and delivery metadata are transmitted and processed by Meta under Meta's own terms and privacy policy. This applies to every WhatsApp conversation, including those handled by Zenvox.

Cloud infrastructure — Amazon Web Services, Microsoft Azure, Google Cloud Platform, for hosting, storage and compute.

AI processing — Amazon Bedrock, Microsoft Foundry, Google Vertex AI. These are contracted enterprise tiers. Content sent to them is not used to train public or shared models.

Business systems you connect — Odoo, Zoho, HubSpot, Bitrix24 and similar CRM/ERP platforms, only where you have explicitly connected an account and only for the records you have configured us to read or write.

Website — analytics and hosting providers used to operate bearingnorthai.com.

Each provider is engaged under a written agreement limiting them to processing data on our documented instructions.

5. Data residency

Where your data is processed

Our default is data residency in the United Arab Emirates. Customer content is stored in UAE regions of our cloud providers wherever those regions support the service required.

Some processing necessarily takes place outside the UAE:

• WhatsApp message transmission. Messages sent over the WhatsApp Business Platform are routed and processed by Meta on its global infrastructure. This is inherent to WhatsApp and cannot be restricted to the UAE.
• Certain AI model endpoints. Where a model required for a feature is not yet available in a UAE region, inference may be performed in another region of the same enterprise provider.
• Support and administration. Our team may access systems from outside the UAE when providing support.

Where personal data leaves the UAE, we rely on the transfer conditions permitted under the UAE Personal Data Protection Law, supported by written data processing agreements with each provider that impose contractual protections equivalent to those required here.

If your organisation requires that no personal data leaves the UAE, tell us before onboarding. We can configure most deployments accordingly, and will tell you plainly which features are affected.

6. Data retention

How long we keep data

7. WhatsApp and AI agents

WhatsApp messaging and AI agents

When we message you. We send WhatsApp messages only to people who have asked to hear from us — by messaging our number first, submitting a form, scanning one of our codes, or agreeing at a meeting or event. We record when and how that consent was given.

How to stop. Reply STOP (or إيقاف) at any time and we will stop messaging that number. You can also email contact@bearingnorthai.com. We honour opt-outs in English and Arabic.

You may be talking to an AI agent. Conversations with BearingNorthAI, and with Zenvox deployed for our customers, may be handled by an automated AI agent rather than a person. The agent answers using business information the operating company has approved. You can reach a human at any time by replying /human or asking to speak to a person.

What the agent can see. The current conversation and the approved knowledge base of the company operating it. It cannot access other customers' conversations or data.

What Meta receives. All WhatsApp messages pass through Meta's infrastructure. Meta's handling of that data is governed by Meta's privacy policy, not ours.

Message windows. WhatsApp allows businesses to reply freely for 24 hours after your most recent message. Outside that window we can only send pre-approved message templates.

8. Cookies and website analytics

Our website uses basic analytics to understand visitor traffic.

We use cookies and similar technologies to understand how visitors use our website and to improve it over time. This does not include tracking your activity on other, unrelated websites. You can control or disable cookies through your browser settings; some parts of the website may not function as intended if you do.

9. Children's privacy

Our website and products are built for businesses, not children.

BearingNorthAI's website, products, and services are directed at businesses and professionals, not children. We do not knowingly collect information from individuals under the age of 18. If you believe a child has provided us with information, contact us and we will remove it.

11. Data deletion

Data deletion requests

You can ask us to delete personal data we hold about you at any time.

How to request. Email contact@bearingnorthai.com with the subject line "Data Deletion Request" and include:

1. Your name
2. The phone number, email address or account the data relates to
3. Which data you want deleted — all of it, or a specific conversation, document or record
4. The BearingNorthAI product or channel involved, if you know it (for example, a WhatsApp conversation with +971 55 960 8496)

We will ask you to confirm the request from the phone number or email address concerned, so we do not delete someone else's data on a stranger's instruction.

What happens next. We acknowledge within 5 business days, verify you control the account, remove the data from live systems within 30 days of verification, and confirm in writing when it is done. Data ages out of encrypted backups within 35 days of live deletion.

What gets deleted. WhatsApp conversation content and metadata associated with your number; contact and enquiry records; documents you uploaded where you are the account holder; marketing contact records.

What we keep, and why. A suppression record — your number or email on a do-not-contact list, so we do not message you again; this is the minimum needed to honour your own request. Invoices and financial records, where UAE commercial and tax law requires it. Aggregate statistics that cannot identify you.

If you are a customer of a business using our products. Where a business uses Zenvox, ZenDox, ZentraBid or Zortex to communicate with you, that business controls your data and we act on their instructions. Send your request to them first. If you cannot reach them, write to us and we will pass it on and help you follow it up.

Data held by Meta. Messages sent over WhatsApp also pass through Meta's systems. Deleting data from BearingNorthAI does not delete it from Meta. For that, see WhatsApp's own privacy policy and in-app settings.

12. Changes to this policy

We will update this page as our products and practices evolve.

If we make material changes to how we collect or use information, we will update the date at the top of this page and, where appropriate, let active customers know directly.