Last updated: 22 September 2026
Who is responsible
Nora is a NeuroLeash service. NeuroLeash LTD, 124 City Road, London EC1V 2NX, is responsible for the information it processes through Nora. NeuroLeash operates Nora’s application, AI service and hosting infrastructure, using the supporting services described below. Contact [email protected] about your information or this notice.
Information you provide
Nora processes your first and last name, account email, messages, AI responses, business profile and preferences to provide conversations and personalised suggestions. Include only information you are entitled to use. Avoid passwords, payment details, sensitive personal records and confidential information you are not authorised to share.
Your conversations, business profile, preferences and saved selections are stored in your authenticated Nora account and sync across devices. Session cookies keep you signed in. Legacy browser-held workspace data may be imported into your account and removed from browser storage.
AI processing and memory
When you upload a file, Nora extracts text or spreadsheet rows. If saving succeeds, the original file and its extracted preview are stored in your private Library. If saving fails, the upload can still be used for the current research without being added to Library.
Selected rows or sections and your business profile are processed through NeuroLeash’s AI service when you start research. Background runs also store the selected input, progress and results so processing can continue after you close the browser. You can review or stop a run in Research; stopping keeps results already completed.
If you choose a completion email, Resend sends a progress summary and a link to Nora to your confirmed account email. The email does not contain the uploaded prospect list or full research results.
When you send a message, Nora sends it, your business profile, recent chat context and selected excerpts from earlier conversations to NeuroLeash’s AI service to generate a response. Suggested prompts also use this context and can be generated when the workspace opens or the mode changes.
You can turn off use of earlier conversations in Settings. Your current conversation and business profile still apply. Earlier assistant responses are context, not independently verified facts.
NeuroLeash operates Nora’s AI service and controls the models, features and context used for each request. We use Cloudflare infrastructure to support this service, including processing the inputs and outputs needed to generate AI responses. Further information is available in Cloudflare’s AI data processing information. Processing may involve infrastructure outside the UK; no UK-only processing commitment is made here. Contact us for the applicable processing and transfer arrangements before sharing restricted data.
Why we process information
We process the information needed to provide the service you request. Optional personalisation is under your control. We also process limited operational information to keep the service working, investigate errors and prevent misuse, relying on our legitimate interests in operating a reliable service. We do not use Nora to make decisions with legal or similarly significant effects about individuals.
Storage and retention
Your account workspace remains available until you remove its contents through Settings or request deletion. Library files are managed separately: deleting a file removes its original and extracted preview, but does not remove copies used in conversations or research runs. Request deletion of research runs or your full account by emailing us; stopping a run is not deletion. Deleting a conversation also removes its linked discoveries from future workspace views and memory. Backups and provider or operational logs may retain copies separately; deleting workspace data does not erase information already processed by providers.
Providers and public sources
NeuroLeash manages Nora’s hosting, authentication, database and file storage. Account services use a self-hosted Supabase deployment managed by NeuroLeash. Research queries and requested pages are processed by our search and extraction services and their search providers. A mailbox check may disclose the address being checked to its mail server. Company and contact search queries may include names, domains and the business context needed for the search.
We also use Cloudflare for DNS, proxied traffic and caching to help improve Nora’s performance, availability and security. Depending on the service involved, Cloudflare processes network information such as IP addresses and request details, as well as content passing through its infrastructure. This supports the service operated by NeuroLeash.
Resend is our email delivery provider. It processes recipient email addresses and message content to deliver account, security and requested research-completion emails. Resend does not provide Nora’s AI, application hosting or account database.
When enabled, Companies House lookups use company names or company numbers to retrieve public registration details and officer appointments. Other research sources can include company websites and public business directories. These sources may contain names, roles and published business contact details of people who do not use Nora. A public listing does not establish permission to contact someone, and a listed director is not necessarily the purchasing contact.
Stripe hosts checkout and billing management. Nora stores the customer, subscription and invoice references needed to show billing status; payment details are entered on Stripe. Billing currently operates in test mode. This site does not include advertising trackers.
Your choices and rights
Use Settings → Account to correct your business context, and Settings to disable cross-chat recall, export workspace data or delete conversations. The workspace export does not include original Library files or all background-run records; download original files from Library and contact us for a wider data request. Depending on the circumstances, UK data protection law gives you rights to access, correct, erase or restrict use of personal information, request portability and object to processing. Where consent is relied on, it may be withdrawn.
Send requests to [email protected]. If Nora research contains information about you, you can also use this address to request access, correction or removal. We may need information to confirm your identity and locate the relevant record. You can also complain to the Information Commissioner’s Office.
Changes to the service
We will update this notice when the service or its providers change how information is processed. The date above identifies the current version.