Privacy Policy

Notioo (“we”, “us”) provides an AI personal assistant you talk to over WhatsApp and Telegram. For the purposes of the EU/UK GDPR we are the data controller for the personal data described here. You can reach us about anything in this notice at privacy@notioo.ai.

• Account & contact: your phone number, and (if you provide them) your name and email address.
• What you send us: the messages, voice notes and images you send the assistant, and the replies it generates.
• Things you ask us to remember: facts, preferences and reminders you create.
• Connected accounts (optional): if you connect Google or Microsoft, the calendar, email and file data we access on your behalf to carry out your requests. We do not bulk-copy your mailbox; we fetch what is needed, when you ask.
• Payments: handled by Razorpay. We receive confirmation and subscription status, not your full card details.
• Technical & usage data: minimal operational logs (e.g. which AI model served a reply, latency), and monthly totals of how much your account used our AI models and what that cost. These never contain your message content.

• To run the assistant — understand your messages, reply, set reminders, recall what you saved. Basis: performance of our contract with you (Art. 6(1)(b)).
• Email & calendar integration — reading and acting on your connected mailbox/calendar. Basis: your explicit consent, given at the provider’s connect screen, which you can withdraw at any time by disconnecting.
• Payments & fraud prevention. Basis: contract and our legitimate interests.
• Keeping the service secure and working. Basis: our legitimate interests.

We do not sell your data, and we do not use your private messages to advertise to you. We do not knowingly solicit special-category data (e.g. health); please avoid sending it.

To generate replies, the assistant sends your message text and recent conversation context (and, when you explicitly ask it to read or act on an email, that email’s content) to third-party AI model providers listed below. We route to providers that offer no-training and short-retention terms for API data where available. Your saved memories and reminders are processed to give the assistant context.

We share data only with the service providers we need to run Notioo:

Our backend, primary database and uploaded media are hosted on Oracle Cloud in Madrid (EU), so the bulk of your data stays in the EU. Some providers above (AI models in the US, Razorpay in India) process data outside the EU; such transfers rely on appropriate safeguards (e.g. Standard Contractual Clauses) with those providers.

• Chat history is automatically pruned after a rolling retention window.
• Memories & reminders are kept until you delete them or erase your data.
• Connected-account tokens are kept (encrypted) until you disconnect that account.
• Operational telemetry is deleted after 30 days, except the monthly usage and cost totals per account (which AI models were used, how much, and what it cost). Those are kept until the account is deleted.

You can, at any time:

• Get a copy of your data — message the assistant “export my data” and it will give you a private, one-time link to download everything we hold on you as a file (right of access & portability).
• Delete your data — message “delete my data”. We’ll confirm first, then permanently erase your memories, chat history, reminders and profile and disconnect your mailboxes. There is no backup and it cannot be undone. Your account and any paid subscription are not cancelled automatically — cancel the subscription separately.
• Correct anything inaccurate, or withdraw consent for an integration by disconnecting it.
• Object or complain — contact us, or lodge a complaint with your local data-protection authority.

For any request, email privacy@notioo.ai. We aim to respond within one month.

Connections to Notioo use encryption in transit (HTTPS). Sensitive content — your messages, saved memories, reminders and connected-account tokens — is encrypted at rest with AES-256-GCM. The semantic search that powers your memories runs locally on our server, so that step sends nothing to third parties.

Notioo is not intended for, and should not be used by, anyone under 18.

If we make material changes we’ll update this page and the “last updated” date above, and where appropriate let you know in chat.