Privacy Policy

1

Introduction and Roles

Welcome to Noda ("we", "our", "us"). This Privacy Policy explains how we collect, process, and protect your information when you use our AI-powered meeting transcription and memo generation application (the "Service").

Under global data protection frameworks (including GDPR), the User acts as the "Data Controller" of all uploaded audio and documents, and Noda acts strictly as the "Data Processor".

Territorial Scope / Территориальные ограничения

Noda operates globally excluding the Russian Federation.

This Service is not intended for, and is not available to, users who are residents or citizens of Russia.

We do not target, solicit, accept or process personal data of any persons located in or residents of the Russian Federation.

If you are located in Russia, please do not use our website or application.

2

Data Collection and Ephemeral Processing

Account Data: We collect your email address and basic profile information via Google Authentication to manage your subscription and quotas.

Audio and Documents: To provide our Service, we process your audio recordings and uploaded context documents (e.g., PDFs, Word files).

Ephemeral Storage (Security Guarantee): Raw audio files and uploaded context documents are stored temporarily on our secure US-based cloud servers strictly for processing. They are permanently and automatically deleted from our temporary storage immediately after the AI generates the text memo. We only store the final text transcripts and memos in our secure database.

3

Enterprise Artificial Intelligence Privacy

We utilize enterprise-grade AI models (Google Vertex AI) to process your data.

No AI Training: We respect your privacy. Your audio, documents, transcripts, and memos are NEVER used by us or our third-party AI providers to train, fine-tune, or improve public AI foundational models.

AI-Powered Features and Models

Noda relies on Google Vertex AI (Gemini Flash and Gemini Pro models) for the following AI-powered features:

Speech-to-text transcription of recorded audio
Generation of structured meeting protocols (key points, decisions, action items, sentiment summary)
Generation of single-image infographic summaries
Generation of audio recap (text-to-speech)
Q&A chat over your meeting transcripts
Generation of HTML-styled exports

What Data Is Sent to Vertex AI

When you trigger an AI feature, the following data may be transmitted to Google Vertex AI for processing:

Audio recordings — only during transcription.
Generated transcripts — during protocol generation, infographic creation, audio recap, Q&A chat, and HTML export.
Documents you attach as meeting context (PDF, DOCX, XLSX).
Brand style settings (company name, brand colors, logo) — only when used for HTML or infographic generation.
Your in-app questions — in the Q&A chat feature.
Optional user customization prompts — when you provide them to tune memo generation.

No personally identifiable account data (email address, password, billing information) is sent to Vertex AI. The data sent is limited to what is functionally necessary to perform the requested AI operation.

Your Consent

You explicitly consent to this data being sent to Google Vertex AI when you check the consent checkbox on the Login screen during account creation. The checkbox text identifies Google Vertex AI (Gemini) by name and confirms that your data is never used to train AI models.

In addition, in-app disclosure banners appear on the Recording, Pre-Meeting, and Chat screens, reminding you that the data you provide will be sent to Google Vertex AI before each AI-powered action. Tapping a banner opens this Privacy Policy. No AI processing occurs without your direct user action — recording, file upload, or button press.

Equivalent Privacy Protection by Google Vertex AI

Google Vertex AI processes your data under our Google Cloud enterprise agreement, which provides privacy and security protections that are equivalent to or stronger than the standards described in this Privacy Policy. Specifically:

No training on customer data: Your audio, transcripts, documents, prompts, and generated outputs are never used to train, retrain, or fine-tune Google's foundation AI models or any other public AI model.
US-based processing: All Vertex AI processing for Noda occurs in Google Cloud data centers located in the United States.
Encryption in transit and at rest: Data is encrypted with TLS 1.2+ in transit and AES-256 at rest within Google's infrastructure.
No third-party redistribution: Google does not share your data with any third party other than as required by law.
Limited retention: Vertex AI does not retain content of inputs or outputs beyond the duration required to fulfil the request, in accordance with Google's published Vertex AI data governance policy.
Access control: Only the Noda backend service account has authenticated access to your data within Vertex AI; Google personnel access is governed by the Cloud Data Processing Addendum and limited to break-glass support.

More details about Google Vertex AI's privacy commitments are available in Google's Vertex AI Data Governance documentation and Cloud Data Processing Addendum.

No Other Third-Party AI

Noda does not use OpenAI, Anthropic, Meta, Microsoft Cognitive Services, or any other third-party AI provider. Google Vertex AI is the sole external AI processor for this app.

4

International Data Transfer & Storage

All our infrastructure, servers, and databases are physically located in the United States of America.

This Service is not offered to users in Russia and does not process personal data of Russian residents. For all other users, by using the Service you consent to the transfer, processing, and storage of your personal data in the United States.

5

Data Retention and Deletion

You may request the complete deletion of your account and all associated text data at any time via the app settings.

6

Contact Us

For any privacy-related inquiries, please contact us at: info@natlex.it