Privacy Policy
Noor and Sam · Last updated: 18 March 2026
1. Who are we?
Noor and Sam is a service by Marcel Houtzager, based in the Netherlands. You can reach us at privacy@noorensam.nl.
Noor and Sam is a biographical interview platform. Two AI interviewers — Noor and Sam — hold patient conversations to capture your life story. The output is a biography written in novel style.
2. What data do we process?
We process the following data:
- Account details — email address, name, language preference
- Interview transcripts — the text of your conversations with Noor or Sam
- Generated biography — the chapters created from your conversations
- Voice audio — when you use the voice feature, your voice is processed for transcription; the audio recording is not stored
- Coupon data — name, email address and the coupon code used when redeeming a gift voucher
- Technical data — your IP address is temporarily stored (max. 60 seconds) to prevent abuse
3. Why do we process your data?
| Purpose | Legal basis | |
|---|---|---|
| Store conversations and write biography | Delivery of service | Consent (Art. 6.1a GDPR) |
| Login via email or Google | Creating an account | Contract performance (Art. 6.1b) |
| Voice processing via TTS/STT | Voice interface | Consent (Art. 6.1a) |
| Weekly summary email | Keeping you engaged with your biography | Legitimate interest (Art. 6.1f) |
| Recording coupon use | Accounting and fraud prevention | Legal obligation (Art. 6.1c) |
| Temporary IP storage in rate limiter | Secure service delivery | Legitimate interest (Art. 6.1f) |
4. Special categories of personal data
During a biographical interview, sensitive topics may come up — such as health, religion, sexual orientation, ethnic background or political views. These are so-called special categories under the GDPR (Art. 9).
We process these data exclusively on the basis of your explicit consent, which you provide before your first conversation. You can withdraw this consent at any time by deleting your account.
5. Sub-processors
To deliver the service we use the following parties. We have a data processing agreement with each of them.
| Processor | Purpose | Region |
|---|---|---|
| Supabase | Storage of conversations and account data | EU |
| Vercel | Application hosting | EU (Frankfurt/Dublin) |
| Anthropic | AI processing of conversation text | US * |
| OpenAI | Text-to-speech (TTS) | US * |
| Cartesia | Text-to-speech (alternative) | US * |
| Resend | Sending emails | US * |
| Upstash | Temporary IP storage (rate limiting) | EU |
* Parties based outside the EU: transfers are safeguarded via Standard Contractual Clauses (SCCs, 2021) in accordance with Art. 46 GDPR.
6. How long do we retain your data?
- Active account — for as long as your account is active
- After cancellation or 12 months of inactivity — your account and all conversations are retained for 90 days, then automatically deleted
- Accounting records (coupon use) — 7 years under statutory retention requirements
- IP address (rate limiter) — maximum 60 seconds
- Voice audio — not stored; deleted immediately after processing
7. Your rights
Under the GDPR you have the following rights:
- Access (Art. 15) — you can request a copy of all data we hold about you
- Rectification (Art. 16) — you can have inaccurate data corrected
- Erasure (Art. 17) — you can have your account and all associated data deleted
- Portability (Art. 20) — you can request a machine-readable export file
- Objection (Art. 21) — you can object to processing based on legitimate interest
- Withdrawal of consent — you can withdraw consent at any time (without retroactive effect)
Send your request to privacy@noorensam.nl. We will respond within 30 days.
You also have the right to lodge a complaint with the Dutch Data Protection Authority: autoriteitpersoonsgegevens.nl.
8. Cookies
We only place strictly necessary cookies — no tracking, no advertising.
| Cookie | Purpose | Retention |
|---|---|---|
| sb-[project]-auth-token | Login session (Supabase authentication) | Session or 1 week |
| guest_token | Anonymous guest session (for use without an account) | 30 days |
Because these cookies are strictly necessary for the service to function, no consent is required for them.
9. AI processing
Noor and Sam are AI interviewers, not real people. Your conversations are processed by AI systems (Anthropic Claude) to write your biography. The AI has no independent decision-making authority over you — all output is for your own review.
10. Changes
We may update this privacy policy. For significant changes we will notify you by email and ask for renewed consent. The date at the top of this document shows when the most recent version took effect.
11. Payments and refunds
Noor and Sam offers prepaid gift vouchers and time-limited subscriptions. The following terms apply:
- Gift voucher (one-time credit) — credit is valid until the expiry date. If you delete your account, any remaining credit is forfeited with no refund.
- Subscription (recurring) — a subscription runs until the end of the current billing period. After cancellation or account deletion, no further charges are made. No refund is given for the remaining period.
Questions about your payment? Contact us at privacy@noorensam.nl.