Legal

Privacy Policy

Last updated: April 29, 2026

Noa is built to help organizations deploy AI-assisted customer conversations responsibly. This policy describes the personal information we process, why we process it, and the rights and choices available to users.

1. Scope of this policy

This Privacy Policy explains how Noa, also known as Network Overall Assistant, collects, uses, stores, and protects personal information when you visit our website, create an account, use our dashboard, install our chatbot widget, or communicate with us.

This policy applies to website visitors, account users, customer representatives, and end users who interact with a Noa-powered chatbot. If you use Noa on behalf of an organization, your organization may also provide additional privacy notices to its own customers or users.

2. Information we collect

We may collect account information such as name, email address, company details, billing profile details, authentication data, and language preferences.

We may collect service information such as project settings, website URLs submitted for onboarding, chatbot configuration, conversation content, usage logs, device and browser details, IP address, approximate location, timestamps, support requests, and analytics events.

When a visitor interacts with a chatbot powered by Noa, we may process the messages and related conversation metadata needed to provide the requested support, answer questions, route the conversation, or improve the configured chatbot experience.

3. How we use information

We use personal information to provide and secure the Noa platform, create and manage accounts, authenticate users, operate chatbot projects, process onboarding requests, deliver support, improve product performance, and communicate administrative or service-related information.

We may use aggregated or de-identified data to understand product usage, measure reliability, develop features, improve automation quality, and produce business insights. We do not use aggregated or de-identified data to identify an individual.

4. Google API data usage and limited use

Noa uses Google APIs only to provide user-authorized functionality within the platform, including connecting a Google account, identifying the connected user, checking calendar availability, and creating, updating, or cancelling calendar events when requested through Noa.

Noa's use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy.

5. Legal bases for processing

Where applicable law requires a legal basis, we process personal information to perform our contract with you, comply with legal obligations, protect legitimate business interests, prevent misuse, maintain platform security, and honor consent where consent is required.

You may withdraw consent where processing is based on consent. Withdrawal does not affect processing that occurred before withdrawal or processing that continues under another lawful basis.

6. Cookies and similar technologies

We may use cookies, local storage, and similar technologies to keep users signed in, remember preferences, measure website performance, protect the service, and understand how visitors interact with our pages.

You can manage cookies through your browser settings. Some platform features may not work correctly if strictly necessary cookies or local storage are disabled.

7. Sharing and subprocessors

We do not sell personal information. We may share information with service providers that help us host infrastructure, process payments, deliver analytics, send communications, provide customer support, and maintain security.

We may disclose information if required by law, regulation, legal process, or enforceable governmental request, or if disclosure is necessary to protect rights, safety, security, and the integrity of the Noa platform.

8. Data retention

We retain personal information for as long as needed to provide the service, comply with legal and accounting obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business operations.

Retention periods may vary by data category, account status, customer configuration, and legal requirement. When information is no longer needed, we delete it or de-identify it using reasonable measures.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure.

No online service can guarantee absolute security. You are responsible for safeguarding your login credentials, limiting account access to authorized users, and promptly notifying us of suspected unauthorized activity.

10. International transfers

Noa may process and store information in countries other than the country where you are located. Those countries may have data protection laws that differ from your local laws.

Where required, we use appropriate safeguards for international transfers, such as contractual protections or other lawful transfer mechanisms.

11. Your privacy rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, or objection to certain processing of personal information.

To exercise privacy rights, contact us using the contact details made available through the Noa website or dashboard. We may need to verify your identity before responding to a request.

12. Children's privacy

Noa is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can take appropriate action.

13. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised last updated date.

Material changes may be communicated through the website, dashboard, email, or another reasonable channel.