Privacy Policy
Last updated: March 30, 2026
1. Who We Are
Nobell ("we", "us", "our") operates the gonobell.com platform, a QR-based digital doorbell and visitor communication service. We are committed to protecting the privacy of everyone who uses our platform — whether as an operator (business user) or as a visitor scanning a QR code.
For questions about this policy, contact us at: privacy@hechr.be
2. What Data We Collect
Visitors (people scanning a QR code)
When a visitor scans a QR code and initiates a ring session, we collect:
- Visitor name — entered by the visitor before the session starts
- Session data — messages and timestamps exchanged during the conversation
- Browser/device fingerprint — a temporary identifier used to maintain the session
We do not require visitors to create an account or provide an email address.
Operators (business users)
When an operator registers and uses the platform, we collect:
- Account information — name, email address, and password
- Organisation details — team name, location names and configuration
- Device tokens — push notification tokens for the mobile app (iOS/Android)
- Usage data — ring session logs, notification history, integration settings
3. How We Use Your Data
We use collected data to:
- Enable real-time communication between visitors and operators
- Send push notifications to the Nobell mobile app
- Route notifications via connected integrations (Slack, SMS, WhatsApp)
- Maintain and improve the platform
- Authenticate operators and secure access to the platform
- Comply with legal obligations
We do not sell personal data to third parties.
4. Third-Party Services
To deliver the platform, we share data with the following third-party services:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Firebase (Google) | Push notifications to the mobile app | firebase.google.com/support/privacy |
| Pusher | Real-time messaging during ring sessions | pusher.com/legal/privacy-policy |
| Slack | Forwarding visitor messages to operator Slack channels | slack.com/intl/en-gb/trust/privacy/privacy-policy |
| Twilio | SMS and voice notifications | twilio.com/en-us/legal/privacy |
| WAHA / WhatsApp | WhatsApp message notifications | whatsapp.com/legal/privacy-policy |
Data is only shared with these services to the extent necessary to provide the functionality you or your organisation has configured.
5. Data Retention
- Visitor session data is retained for a limited period to allow operators to review recent conversations. Sessions are deleted after 90 days.
- Operator account data is retained for as long as the account is active. Upon account deletion, personal data is removed within 30 days.
- Push notification tokens are removed when the operator logs out or uninstalls the app.
6. Cookies and Tracking
We use session cookies to maintain visitor sessions during a ring flow (storing visitor name and a temporary fingerprint). These cookies are strictly necessary for the service to function and are not used for tracking or advertising.
We do not use third-party analytics or advertising cookies.
7. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. All data is transmitted over encrypted connections (HTTPS/TLS). Operator accounts are protected by password authentication via Laravel Sanctum.
8. Your Rights (GDPR)
If you are located in the European Economic Area, you have the following rights:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your personal data
- Restriction — request that we limit processing of your data
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interests
To exercise any of these rights, contact us at privacy@gonobell.com. We will respond within 30 days.
You also have the right to lodge a complaint with your local data protection authority.
9. Children's Privacy
Our platform is not directed at children under the age of 16. We do not knowingly collect personal data from children.
10. Changes to This Policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify operators via email.
11. Contact
Nobell privacy@hechtr.be gonobell.com