Privacy

Privacy

Last updated: 1 June 2026

1. Introduction

NoorSentinel (“NoorSentinel”, “we”, “us”, or “our”) is built on a simple principle: your capture is yours. We analyze the file you upload and then delete it — we operate it on a zero-retention basis and do not keep it after your Report is delivered. This Privacy Notice explains what information we handle when you use the NoorSentinel website and wireless capture analysis service (the “Service”), how and why we use it, with whom we share it, and the rights you have over it. It should be read together with our Terms of Service.

2. Definitions

“Capture” means a wireless packet-capture file you submit for analysis. “Report” means the outputs generated from a Capture. “Customer Content” means the Captures and any other materials you submit. “Personal Data” means information that identifies, or can reasonably be linked to, an individual. “Paddle” means our third-party payment provider, which acts as Merchant of Record for purchases.

3. A note on how the Service works

NoorSentinel analyzes Captures offline and passively. The Service operates only on the file you upload; it does not connect to, scan, or monitor any live network, and it does not observe activity beyond the contents of the Capture you provide. A Capture may itself contain technical identifiers (for example, device hardware addresses) present in the wireless traffic you recorded; you are responsible for ensuring you are authorized to submit that material for analysis.

4. Information we collect

We collect the following categories of information:

  • Customer Content. The Captures you upload, any optional authorized BSSID/SSID list you provide, and the Reports generated from them.
  • Contact and communications. Information you provide when you email us or request support, such as your email address and the content of your message.
  • Transaction information. Records of your purchases, such as the product selected, amount, and a job reference. Payment-card details are collected and processed by Paddle, not by us — we do not receive or store full card numbers.
  • Technical and usage data. Basic operational data such as request and error logs, sanitized file metadata, file sizes, hashes, timestamps, download counts, and security events, generated when you interact with the Service.

5. How we use information

We use information only for the following purposes:

  • To provide the Service — to process your Capture, generate and deliver your Report, and make it available for download.
  • To process payments and provide receipts, through Paddle.
  • To provide support and respond to your requests.
  • To operate, secure, and improve the Service, including maintaining reliability and detecting, preventing, and investigating abuse or security incidents.
  • To comply with our legal obligations and enforce our Terms.

We do not sell your Personal Data, we do not use Customer Content for advertising, and we do not use your Customer Content to train artificial-intelligence models.

6. Legal bases for processing

Where data-protection law such as the GDPR applies, we process Personal Data on the following legal bases: performance of a contract (to deliver the Service you purchase); legitimate interests (to secure, maintain, and improve the Service, balanced against your rights); compliance with a legal obligation (for example, retaining transaction records); and consent, where we ask for it. You may withdraw consent at any time without affecting processing already carried out.

7. Our role as controller and processor

For contact, transaction, and technical data, NoorSentinel acts as a controller. For Customer Content that you submit for analysis, NoorSentinel acts as a processor on your behalf, processing it only to provide the Service and on your instructions as expressed through your use of the Service.

8. How we share information

We do not sell your information and we share it only as needed to run the Service:

  • Service providers (sub-processors). We use trusted providers to host and operate the Service, including cloud infrastructure for processing and delivery and Paddle for payments. They may process data only on our instructions and under confidentiality and security obligations.
  • Legal and safety. We may disclose information where required by law, to respond to lawful requests, or to protect the rights, safety, and integrity of the Service, our users, or the public.
  • Business transfers. If NoorSentinel is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Notice.

9. International data transfers

NoorSentinel is based in the Hashemite Kingdom of Jordan and relies on cloud infrastructure and payment providers that may store and process data in the United States or other countries. Where data is transferred across borders, we rely on appropriate safeguards recognized under applicable law, such as standard contractual clauses offered by our providers.

10. Data retention — zero retention of your capture

Your capture is deleted as soon as its analysis is complete and your Report has been delivered. We do not retain it, we do not archive it, and we do not keep a copy “just in case.” This zero-retention approach is deliberate: the less of your evidence we hold, the safer it is.

  • Your capture: processed in a temporary workspace and deleted immediately after the analysis is complete and the Report is delivered. It is never retained or reused.
  • Your Report: made available to you for a limited download window, after which it is removed.
  • Minimal operational record: the only data that remains is a small business record — identifiers, file size, hash, timestamps, status, download counts, and a receipt reference — kept solely for billing, security, and legal compliance. It never includes the contents of your capture.

11. Security

We use technical and organizational measures appropriate to the sensitivity of the data, including encryption in transit, access controls limited to operational need, time-limited download links, and a zero-retention design that deletes your capture as soon as its analysis is complete. No method of transmission or storage is completely secure, but the strongest protection is simple: we do not keep your capture, so there is nothing left to expose.

12. Cookies and local storage

We do not use third-party advertising or analytics cookies, and we do not track you across other websites. The Service uses your browser’s local storage only for essential, first-party functionality — for example, to remember your light or dark theme preference. Payment pages presented by Paddle are governed by Paddle’s own privacy practices.

13. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your Personal Data; to object to or restrict certain processing; and to lodge a complaint with your local data-protection authority. To exercise any of these rights, contact us at admin@noorsentinel.com — please include the job reference if your request relates to a specific Report. We will respond within the timeframe required by applicable law and may need to verify your identity before acting on a request. For information held by Paddle in connection with payments, please also refer to Paddle’s privacy policy.

14. Changes to this Notice

We may update this Privacy Notice as the Service evolves or as legal requirements change. When we make material changes, we will revise the “Last updated” date above and post the updated Notice on this page. Your continued use of the Service after an update constitutes acceptance of the revised Notice.

15. How to contact us

If you have questions about this Notice or how we handle your information, or wish to exercise a privacy right, contact us at admin@noorsentinel.com.