Privacy Policy

Nouna is operated by NURSOL + CO LTD ("NURSOL", "we", "us"). NURSOL + CO LTD is the data controller for Nouna, and this policy is between you and NURSOL + CO LTD. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketing platform and related services.

By accessing or using Nouna, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access the platform.

Personal Information

We may collect personal information that you voluntarily provide when registering for an account, including:

• Name and email address
• Company name and business information
• Payment and billing information
• Brand assets and marketing materials you upload
• Whether you ticked the box to receive product news (off by default)

Usage Data

We automatically collect certain information when you use our platform:

• Device and browser information
• IP address and location data
• Pages visited and features used
• Time spent on the platform
• When the app reports an error, a one-way hash of your IP address, kept for 90 days to limit abuse

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send administrative notifications and updates
• Respond to customer service requests
• Personalize your experience on the platform
• Generate AI-powered marketing content based on your brand information
• Analyze usage patterns to improve our features

If you opted in, we may send you product news; you can opt out at any time. We do not currently send marketing email.

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party AI model, search, image and infrastructure providers under contract, including hosting, sign-in, database and billing services, processing only what the service needs. To make and check your marketing we send brand and product information, your instructions and the content being produced to those providers; each processes that data under its own terms. We do not send your data to a provider a workflow does not need.
• Connected Platforms: With platforms you choose to integrate (Facebook, Shopify, etc.)
• Google, to count visits: Only if you accept cookies on nouna.io, as described below
• Meta, to measure our ads: Only if you accept cookies on nouna.io, as described below
• Legal Requirements: When required by law or to protect our rights

Visit counting with Google Analytics

If you accept cookies on nouna.io, Google Analytics sends Google the pages you view on nouna.io and the page that brought you there, a sign-up event when you create an account, your browser and device information, an approximate location from your IP address, and its cookie IDs (_ga and _ga_<ID>). We use this only to count visits and see which pages and links bring people to Nouna. Google signals and ad personalisation are off, so the data is not used to show you ads.

Advertising measurement with Meta's pixel

If you accept cookies on nouna.io, Meta's pixel sends Meta the pages you view on nouna.io, a sign-up event when you create an account, your browser and device information, your IP address, and Meta's cookie IDs (_fbp, and _fbc when you arrive from one of our Meta ads). We use this only to measure which of our ads bring visits and sign-ups. Meta receives the data under its own privacy policy and may link it to a Facebook or Instagram account you are signed in to.

For both, the legal basis is your consent. Without it neither script is loaded and nothing is sent to Google or Meta. You can withdraw your consent at any time with Cookie settings in the footer of our public pages: both stop at once and their cookies are deleted from nouna.io. Withdrawing does not undo what was sent before. The cookies involved are listed in our Cookie Policy.

When you connect a Google account, Nouna asks only for the access its features use, and uses it only for those features:

• Google Analytics (read only): your website's visits, users, conversions and traffic sources, to show your results and to measure which of Nouna's posts brought visitors to your site.
• Google Search Console (read only): the clicks, impressions, search queries and pages for your site, to show how your site appears on Google and to choose which pages to improve.
• Google Ads: your campaigns' results, and the campaigns you approve in Nouna, which we create in your Google Ads account. A campaign is never created or started without your approval, and you can stop it from Nouna at any time.
• Gmail (send and read): to send the messages to creators that you approve (or, if you turn on fully autonomous mode, that your department sends within your settings) from your own address, and to read the replies in those conversations. Nouna reads only the email threads it started; it does not read the rest of your mailbox.
• Your Google email address: to show you which Google account is connected.

Access tokens are encrypted before they are stored. Readings from Google Analytics, Search Console and Google Ads, and the creator conversations, are kept for 400 days. Disconnecting Google or Gmail in Nouna deletes the tokens at once, and you can also remove Nouna's access at myaccount.google.com/permissions.

We do not sell Google user data, use it for advertising, or use it to develop, improve or train generalized AI or machine learning models. We share it only with the AI model and infrastructure providers that process it, under contract, to produce the work you asked for (for example, your search queries when your department writes a page), or when the law requires it. People at Nouna do not read it unless you ask us to for support, it is needed for security, or the law requires it.

Nouna's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We implement appropriate technical and organizational security measures to protect your personal information. However, no method of transmission over the Internet is 100% secure. We strive to protect your data but cannot guarantee absolute security.

Depending on your location, you may have the following rights:

• Access and receive a copy of your personal data
• Rectify inaccurate personal data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability
• Withdraw consent at any time

We retain your personal information for as long as your account is active or as needed to provide services. We may retain certain information as required by law or for legitimate business purposes.

When you delete your account we immediately cancel billing, disconnect every channel and revoke your sessions. Thirty days later an automated job permanently deletes your uploads, your brands and everything else stored against your account, including your sign-in. Records of paid-ad spend attached to a running campaign are kept sealed for those 30 days as evidence, then deleted. Invoices held by our payment processor stay with it under its own retention.

Operational records are deleted on a schedule while your account is open:

• Activity logs and error logs: within 30 days; error reports (including the IP hash): 90 days
• Conversations with your department: 90 days
• Comments, replies and other channel interactions: 90 days
• Posts imported from your own social accounts: 90 days to 400 days, depending on what they are used for
• Performance analytics and reports: 400 days
• Messages sent through the contact form: one year
• Image data received from image providers: kept only briefly, then stripped to the record of the request

If you have questions about this Privacy Policy or our data practices, please contact us at privacy@nouna.io