Sam and Norah
Nederlands·English

Privacy Policy

Noor and Sam · Last updated: 18 March 2026

1. Who are we?

Noor and Sam is a service by Marcel Houtzager, based in the Netherlands. You can reach us at privacy@noorensam.nl.

Noor and Sam is a biographical interview platform. Two AI interviewers — Noor and Sam — hold patient conversations to capture your life story. The output is a biography written in novel style.

2. What data do we process?

We process the following data:

  • Account details — email address, name, language preference
  • Interview transcripts — the text of your conversations with Noor or Sam
  • Generated biography — the chapters created from your conversations
  • Voice audio — when you use the voice feature, your voice is processed for transcription; the audio recording is not stored
  • Coupon data — name, email address and the coupon code used when redeeming a gift voucher
  • Technical data — your IP address is temporarily stored (max. 60 seconds) to prevent abuse

3. Why do we process your data?

PurposeLegal basis
Store conversations and write biographyDelivery of serviceConsent (Art. 6.1a GDPR)
Login via email or GoogleCreating an accountContract performance (Art. 6.1b)
Voice processing via TTS/STTVoice interfaceConsent (Art. 6.1a)
Weekly summary emailKeeping you engaged with your biographyLegitimate interest (Art. 6.1f)
Recording coupon useAccounting and fraud preventionLegal obligation (Art. 6.1c)
Temporary IP storage in rate limiterSecure service deliveryLegitimate interest (Art. 6.1f)

4. Special categories of personal data

During a biographical interview, sensitive topics may come up — such as health, religion, sexual orientation, ethnic background or political views. These are so-called special categories under the GDPR (Art. 9).

We process these data exclusively on the basis of your explicit consent, which you provide before your first conversation. You can withdraw this consent at any time by deleting your account.

5. Sub-processors

To deliver the service we use the following parties. We have a data processing agreement with each of them.

ProcessorPurposeRegion
SupabaseStorage of conversations and account dataEU
VercelApplication hostingEU (Frankfurt/Dublin)
AnthropicAI processing of conversation textUS *
OpenAIText-to-speech (TTS)US *
CartesiaText-to-speech (alternative)US *
ResendSending emailsUS *
UpstashTemporary IP storage (rate limiting)EU

* Parties based outside the EU: transfers are safeguarded via Standard Contractual Clauses (SCCs, 2021) in accordance with Art. 46 GDPR.

6. How long do we retain your data?

  • Active account — for as long as your account is active
  • After cancellation or 12 months of inactivity — your account and all conversations are retained for 90 days, then automatically deleted
  • Accounting records (coupon use) — 7 years under statutory retention requirements
  • IP address (rate limiter) — maximum 60 seconds
  • Voice audio — not stored; deleted immediately after processing

7. Your rights

Under the GDPR you have the following rights:

  • Access (Art. 15) — you can request a copy of all data we hold about you
  • Rectification (Art. 16) — you can have inaccurate data corrected
  • Erasure (Art. 17) — you can have your account and all associated data deleted
  • Portability (Art. 20) — you can request a machine-readable export file
  • Objection (Art. 21) — you can object to processing based on legitimate interest
  • Withdrawal of consent — you can withdraw consent at any time (without retroactive effect)

Send your request to privacy@noorensam.nl. We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority: autoriteitpersoonsgegevens.nl.

8. Cookies

We only place strictly necessary cookies — no tracking, no advertising.

CookiePurposeRetention
sb-[project]-auth-tokenLogin session (Supabase authentication)Session or 1 week
guest_tokenAnonymous guest session (for use without an account)30 days

Because these cookies are strictly necessary for the service to function, no consent is required for them.

9. AI processing

Noor and Sam are AI interviewers, not real people. Your conversations are processed by AI systems (Anthropic Claude) to write your biography. The AI has no independent decision-making authority over you — all output is for your own review.

10. Changes

We may update this privacy policy. For significant changes we will notify you by email and ask for renewed consent. The date at the top of this document shows when the most recent version took effect.

11. Payments and refunds

Noor and Sam offers prepaid gift vouchers and time-limited subscriptions. The following terms apply:

  • Gift voucher (one-time credit) — credit is valid until the expiry date. If you delete your account, any remaining credit is forfeited with no refund.
  • Subscription (recurring) — a subscription runs until the end of the current billing period. After cancellation or account deletion, no further charges are made. No refund is given for the remaining period.

Questions about your payment? Contact us at privacy@noorensam.nl.

Privacyverklaring | Noor en Sam