%20--%3e%3cg%3e%3cg%20id='Layer_1'%3e%3cg%3e%3cg%3e%3cg%3e%3cg%3e%3cpath%20class='cls-1'%20d='M54.7,12.3c-1.4-1-3.3-1.6-5.5-1.6s-4.1.5-5.5,1.6c-1.7,1.2-2.5,2.9-2.5,5v11.8h5v-11.8c0-.4.1-.7.5-.9.6-.4,1.4-.6,2.6-.6s2,.2,2.6.6c.3.2.4.5.4.9v9.8c0,.5.2,1,.6,1.4.4.4.8.6,1.4.6h3v-11.8c0-2.1-.8-3.7-2.5-5Z'/%3e%3cpath%20class='cls-1'%20d='M75.4,11.1c-1,0-1.9.4-2.5,1.1-1.5-1.1-3.4-1.6-5.5-1.5s-4.4,1.1-6,2.7-2.7,4-2.7,6.5,1,4.9,2.7,6.7,4,2.7,6.6,2.7,3.4-.5,4.8-1.5c.6.7,1.4,1.1,2.5,1.1h1.7V11.1h-1.7ZM71.2,23.2c-.9.9-1.9,1.3-3.2,1.3s-2.3-.5-3.1-1.3-1.2-1.8-1.2-3,.4-2.3,1.2-3.1,1.9-1.3,3.1-1.3,2.2.4,3.1,1.3c.9.9,1.3,1.9,1.3,3.1s-.4,2.2-1.3,3.1h0Z'/%3e%3cpath%20class='cls-1'%20d='M89.5,10.7c-1.5,0-2.8.3-4,1v-6.8h-5v24.1h1.7c1,0,1.9-.4,2.5-1.1,1.5,1.1,3.2,1.6,5.2,1.5s4.7-1.1,6.3-2.8,2.7-4,2.7-6.5-.9-4.8-2.7-6.6c-1.8-1.8-4-2.7-6.6-2.7ZM92.6,23.2c-.9.9-1.9,1.3-3.1,1.3s-2.3-.5-3.1-1.3-1.3-1.9-1.3-3.1.5-2.3,1.3-3.1,1.9-1.3,3.1-1.3,2.3.5,3.1,1.3,1.3,1.9,1.3,3.1-.5,2.3-1.3,3.1Z'/%3e%3cpath%20class='cls-1'%20d='M116.3,11.1c-1,0-1.9.4-2.5,1.1-1.5-1.1-3.4-1.6-5.5-1.5s-4.4,1.1-6,2.7-2.7,4-2.7,6.5,1,4.9,2.7,6.7,4,2.7,6.6,2.7,3.4-.5,4.8-1.5c.6.7,1.4,1.1,2.5,1.1h1.7V11.1h-1.7ZM112.1,23.2c-.9.9-1.9,1.3-3.2,1.3s-2.3-.5-3.1-1.3-1.2-1.8-1.2-3,.4-2.3,1.2-3.1,1.9-1.3,3.1-1.3,2.2.4,3.1,1.3c.9.9,1.3,1.9,1.3,3.1s-.4,2.2-1.3,3.1h0Z'/%3e%3cpath%20class='cls-1'%20d='M157.2,11.1c-1,0-1.9.4-2.5,1.1-1.5-1.1-3.4-1.6-5.5-1.5s-4.4,1.1-6,2.7c-1.8,1.8-2.7,4-2.7,6.5s1,4.9,2.7,6.7,4,2.7,6.6,2.7,3.4-.5,4.8-1.5c.6.7,1.4,1.1,2.5,1.1h1.7V11.1h-1.7ZM153,23.2c-.9.9-1.9,1.3-3.2,1.3s-2.3-.5-3.1-1.3-1.2-1.8-1.2-3,.4-2.3,1.2-3.1,1.9-1.3,3.1-1.3,2.2.4,3.1,1.3c.9.9,1.3,1.9,1.3,3.1s-.4,2.2-1.3,3.1h0Z'/%3e%3cpath%20class='cls-1'%20d='M164.6,10.6c.8,0,1.5-.3,2.1-.9.6-.6.9-1.3.9-2.1s-.3-1.5-.9-2.1c-.6-.6-1.3-.9-2.1-.9s-1.5.3-2.1.9c-.6.6-.9,1.3-.9,2.1s.3,1.5.9,2.1c.6.6,1.3.9,2.1.9Z'/%3e%3c/g%3e%3cpath%20class='cls-1'%20d='M130.2,24c0,0-.2,0-.2.1-.3.2-1.8.3-2.3.3s-1.1-.1-1.4-.4c-.2-.2-.3-.6-.3-1.2v-6.8h2.4c.5,0,1-.2,1.4-.6.4-.4.6-.8.6-1.4v-3h-4.3v-1.6c0-.5-.1-1-.4-1.4-.7-1.1-1.7-1.6-2.8-1.6h-1.7v16.4c0,1.9.6,3.5,1.9,4.7,1.2,1.2,2.8,1.8,4.8,1.8s1.8,0,2.6-.2v-5.3Z'/%3e%3c/g%3e%3crect%20class='cls-1'%20x='162'%20y='11.6'%20width='5'%20height='17.6'/%3e%3cpath%20class='cls-1'%20d='M139.6,26.1c0,1.8-1.5,3.3-3.3,3.3s-2.6-.2-2.8-.2c0,0-.5-2.2-.5-3.1,0-1.8,1.5-3.3,3.3-3.3s2.8.1,3,.4c.2.4.4,2,.4,3Z'/%3e%3c/g%3e%3cpath%20class='cls-1'%20d='M29.3,17.5c-1.9,0-3.5,1.3-3.9,3h-.3c-2.8,0-5.3,1.2-7,3.1v-4.9c0-3.3.5-4.5,3.2-4.6.5,1.6,2,2.7,3.8,2.7s4-1.8,4-4-1.8-4-4-4-3.3,1.2-3.8,2.9c-1.3,0-2.3.3-3.1.7v-4.6c1.6-.5,2.7-2,2.7-3.8S19,.2,16.8.2s-4,1.8-4,4,1.2,3.3,2.9,3.8v4.6c-.8-.5-1.9-.7-3.3-.8-.5-1.7-2-2.9-3.8-2.9s-4,1.8-4,4,1.8,4,4,4,3.2-1.1,3.8-2.7c0,0,0,0,0,0,2.8,0,3.3,1.1,3.3,4.6v4.9c-1.7-1.9-4.2-3.1-7-3.1h-.7c-.4-1.7-2-3-3.9-3S0,19.3,0,21.5s1.8,4,4,4,3.1-1,3.7-2.5h.9c3.9,0,7,3.1,7,7v1.6h-4.2c-.7,0-1.2.5-1.2,1.2s.5,1.2,1.2,1.2h10.9c.7,0,1.2-.5,1.2-1.2s-.5-1.2-1.2-1.2h-4.2v-1.6c0-3.9,3.2-7,7-7h.5c.6,1.5,2,2.5,3.7,2.5s4-1.8,4-4-1.8-4-4-4ZM25,11.4c.9,0,1.6.7,1.6,1.6s-.7,1.6-1.6,1.6-1.6-.7-1.6-1.6.7-1.6,1.6-1.6ZM8.6,14.5c-.9,0-1.6-.7-1.6-1.6s.7-1.6,1.6-1.6,1.6.7,1.6,1.6-.7,1.6-1.6,1.6ZM4.1,23.1c-.9,0-1.6-.7-1.6-1.6s.7-1.6,1.6-1.6,1.6.7,1.6,1.6-.7,1.6-1.6,1.6ZM16.8,5.7c-.9,0-1.6-.7-1.6-1.6s.7-1.6,1.6-1.6,1.6.7,1.6,1.6-.7,1.6-1.6,1.6ZM29.3,23.1s0,0,0,0c0,0,0,0,0,0,0,0-.1,0-.2,0,0,0,0,0,0,0-.8-.1-1.3-.8-1.3-1.5s.6-1.5,1.4-1.6c0,0,0,0,0,0,0,0,0,0,0,0s0,0,0,0c0,0,0,0,0,0,.9,0,1.6.7,1.6,1.6s-.7,1.6-1.6,1.6Z'/%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/svg%3e)
NabatOS Privacy Policy
Last updated: 21 October 2026
This privacy policy sets out how Nabat A I Technologies - L.L.C - S.P.C. (Nabat) uses and protects your personal data.
1. About Us and About this Policy
1.1This notice gives you information on how Nabat A I Technologies - L.L.C - S.P.C (“Nabat”, “we”, “us” or “our”) collect and use your personal data when you use our websites (www.nabat.ai, app.nabat.ai etc - “Platform”.), platforms, services, or otherwise correspond or deal with us. It should be read together with our Terms and Conditions and Cookies Policy.
1.2Our site is not intended for children, and we do not knowingly collect data relating to children.
1.3Nabat is the controller and responsible for your personal data. Where an Organisation uploads personal data to the Platform as part of its User Content and determines how it is used, Nabat processes that data on the Organisation’s behalf and the Organisation’s own privacy notice will apply.
2. Data Controller and Contact Details
2.1We are responsible for the processing of your personal data described in this Privacy Policy. You may contact us at any time at:
Email: dataprivacy@nabat.ai
Postal address: P.O. Box: 9639, Yas Island Abu Dhabi, United Arab Emirates
3. Personal Data We Collect and How It Is Collected
3.1Personal data means any information about an individual from which that person can be identified.
3.2We may process the following types of personal data about you:
3.2.1Account and identification data, such as your name, password (in encrypted form), organisation, job title, country and user role;
3.2.2Contact details, such as your email address, telephone number and company address;
3.2.3Platform usage data, such as information about how you use our website, the sites, areas of interest, projects and portfolios you create, your settings, features used, log-in records and audit logs;
3.2.4AI Assistant data, such as the prompts, questions and content you submit to the Alma AI assistant and the responses generated;
3.2.5Location and geospatial data you draw or upload, to the extent it relates to an identifiable individual (for example, privately owned land);
3.2.6Technical and device data, such as IP address, browser type, device information, pages visited, referring URLs and data collected through cookies (see our Cookies Policy);
3.2.7Support and correspondence data, such as enquiries and support requests;
3.2.8Marketing and communications data, such as your preferences, consent records and engagement with our communications; and
3.2.9Financial, billing and transaction data for Paid Plans, such as invoicing details and payment records.
3.3We also collect, use and share aggregated data such as statistical or demographic data. Aggregated data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. If we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.
3.4We use different methods to collect data from and about you including through:
3.4.1Direct Interactions, when you sign up to our services, correspond with us by post, phone, email or otherwise. This includes personal data you provide when you: create an account on our website; subscribe to our service or publications; request marketing to be sent to you; or give us feedback or contact us.
3.4.2When you use our site, we will automatically collect data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive data about you if you visit other websites employing our cookies. Please see our cookie policy for further details.
4. How We Use Your Personal Data
4.1Legal basis for processing your personal data
4.1.1We will only use your personal data when we have a legal basis to do so. Our legal basis for each purpose for which we use your personal data is specified below. Most commonly we will use your personal data in the following circumstances:
4.1.1.1Consent: Where you have freely consented before the processing in a specific, informed and unambiguous indication of your agreement, by a statement or clear affirmative action. You can withdraw your consent at any time by contacting us (see your legal rights below).
4.1.1.2Performance of a contract with you: Where we need to process your personal data to perform a contract with you or where you ask us to take steps before we enter into a contract with you. Where we rely on performance of a contract and you do not provide the necessary information, we will be unable to perform your contract.
4.1.1.3Legal obligation: Where we need to use your personal data to comply with a legal or regulatory obligation. Where we rely on legal obligation and you do not provide the necessary information, we may be unable to fulfil a right you have or comply with our obligations to you, or we may need to take additional steps, such as informing law enforcement or a public authority or applying for a court order.
4.1.1.4Legitimate interests: We may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud and enable us to give you the best and most secure customer experience. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We will only rely on legitimate interests as a legal basis for processing where this is permitted under applicable law.
4.2Purposes of Processing
4.2.1Purposes for which we will use your personal data
We have set out below a description of all the ways we plan to use the various categories of your personal data, and which of the legal bases we rely on to do so.
Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal basis, we are relying on to process your personal data where more than one ground has been set out in the table below.
| Purpose/Use | Type of data | Legal basis | Retention Period |
|---|---|---|---|
| Account Registration. To register you as a new user of the Platform, verify your account and send you the transactional emails required to provide the service (such as account confirmation and verification codes). | Identification: first and last name, organisation and role or job title Contact: work email address and phone number with country code |
Consent Performance of a contract with you |
For as long as your account remains active, or until you ask us to delete your data. |
| Providing the Platform. To create and manage your Account, authenticate you, provide the Services (including maps, insights, reports and the AI Assistant), manage seats and permissions, and communicate with you about your Account. | Identification, Contact and Account data (as described above) User content: data you enter on the Platform yourself, such as the areas you draw and the projects you create |
Consent Performance of a contract with you |
For as long as your account remains active, or until you ask us to delete your data. |
| Technical Support. When you contact us for support, we use your contact details, correspondence and relevant technical information to diagnose and resolve your issue and improve our support services. | Identification and Contact data, your correspondence with us, and relevant Technical data | Consent Performance of a contract with you |
For as long as your account remains active, or until you ask us to delete your data. |
| Platform Security, Analytics and Improvement. To maintain, secure, monitor and improve the Platform and website, prevent fraud and misuse, and analyse how you use the Platform, including through product analytics and session replays provided by PostHog. Session replays rebuild your session from snapshots of the page structure and your interactions. They are not video recordings, but they show what you saw and did on the Platform. This data is linked to you through your email address and is not anonymised. | Technical: IP address and the approximate location derived from it (country, region, city, coordinates accurate to about 20 km, and timezone); operating system, browser type and version, user agent, device type, and screen and window size; referrer and the pages you visit (full addresses, including project and site identifiers); and cookies Usage: pages visited, components clicked (your user journey) and session replays, linked to your email address |
Consent Necessary for our legitimate interests (to keep the Platform secure and to understand and improve how it is used), where legitimate interests is a valid legal basis under applicable law Performance of a contract with you, where the data is necessary for the functioning of the tool |
PostHog analytics and session replay data: 30 days. Other Technical data: 6 months. |
| Marketing. To send you marketing communications, event invitations and product updates. Where required by applicable law, we will obtain your prior consent. You may opt out at any time using the unsubscribe link in each communication or by contacting us. | Identification and Contact data | Consent | Until you opt out or withdraw your consent |
| Demo Requests. When you submit the “Book a demo” form on our website (nabat.ai), to respond to your request and follow up with you. | Identification and Contact: first and last name, email address, phone number, company website, area of interest and, optionally, any message you include | Consent | 24 months after the last interaction, unless you opt-in to marketing communication |
4.2.2Marketing
4.2.2.1You will receive marketing communications from us if you have requested information from us or purchased goods or services from us and you have opted-in to receiving the marketing.
4.2.2.2We will get your express consent before we share your personal data with any third party for their own direct marketing purposes.
4.2.2.3You can ask to stop sending you marketing communications at any time by contacting us at dataprivacy@nabat.ai.
4.2.3Cookies
4.2.3.1For more information about the cookies we use and how to change your cookie preferences, please see our Cookies Policy.
5. Recipients of Personal Data
5.1We may disclose personal data to our affiliates including parent and subsidiary entities; service providers acting on our behalf, including our cloud hosting provider (Amazon Web Services, Germany) mapping and imagery providers (Google Maps, X); GTech (website, UAE developer and host) AI model providers that power the AI Assistant (via the information you provide in your prompts -Anthropic, United States) analytics, email and CRM providers (HubSpot , PostHog (EU); other users within your Organisation where you share projects with them; professional advisers, auditors and insurers; regulators, tax authorities, courts and law enforcement where required by law; and prospective or actual investors or acquirers in a corporate transaction.
5.2We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes in accordance with the purposes of this privacy policy and our instructions.
6. International Data Transfers
6.1We may share your personal data within our corporate group. This could involve transferring your data outside the UAE or your jurisdiction.
6.2We may also transfer your personal data to third parties that carry out certain functions on our behalf. This may involve transferring personal data outside the UAE, or your jurisdiction, to countries which have laws that do not provide the same level of data protection as UAE or other applicable law.
6.3Your personal data may be transferred to countries outside the UAE, or your jurisdiction, for any of the purposes stated above. Where we share your personal data with a third party in another jurisdiction, we ensure that the laws of the jurisdiction in which the third party is established provides an adequate level of protection for personal data; or we otherwise seek to implement appropriate measures to ensure that your personal data receives an adequate level of protection (e.g., we may put in place a contract with the third party that obliges them to provide the same level of protection as we are obliged to provide). Where the jurisdiction in which the third party is established does not provide an adequate level of protection and we are not able to implement measures to ensure your personal data receives an adequate level of protection, we will only transfer your personal data to the third party where we have obtained your consent or another derogation allowing the transfer applies.
7. Data Retention
7.1We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
7.2To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, accounting or other requirements.
7.3In some circumstances you can ask us to delete your data: see clause 8 for further information.
7.4In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
8. Your Rights
8.1Subject to applicable law, you have the right to:
8.1.1be informed about how we use your personal data;
8.1.2access your personal data;
8.1.3request correction of inaccurate or incomplete data;
8.1.4request erasure of your data (except where we need it to comply with legal obligations or for legal claims);
8.1.5request restriction of processing;
8.1.6object to processing, including direct marketing; withdraw consent at any time (without affecting prior processing);
8.1.7receive your data in a structured, machine-readable format and have it transmitted to another controller where technically feasible; and
8.1.8withdraw consent at any time where we are relying on consent to process your personal data (see the table in clause 4 for details of when we rely on your consent as the legal basis for using your data). However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
8.2To exercise your rights, contact us using the details below. We usually act on requests free of charge but may charge a reasonable fee for unreasonable, excessive or repeated requests or further copies. We will generally respond within one month and will tell you if we need longer.
9. Contact details
9.1If you have any questions about this privacy policy, including any requests to exercise your legal rights, or any complaints (clause 10), please contact us in the following ways:
Email address: dataprivacy@nabat.ai
Postal address: P.O. Box: 9639, Yas Island Abu Dhabi, United Arab Emirates
10. Complaints
10.1You have the right to make a complaint to the relevant regulator for data protection issues or other relevant supervisory authority, according to applicable law. However, before doing so please make sure you have first made your complaint to us or asked us for clarification if there is something you do not understand. Please use the contact details above to contact us in relation to any complaints.
11. Security, Children, Third-Party Links and Changes
11.1We use appropriate technical and organisational measures to protect your personal data.
11.2The Platform is not intended for individuals under 18.
11.3If you do not provide the personal data we need, we may be unable to provide the Services to you.
11.4The Platform may link to third-party websites whose privacy practices we do not control.
11.5We may update this Privacy Policy from time to time and will notify you of material changes.
11.6Please keep your Account information accurate and up to date.