Privacy policy

Noa is a company brain built by NotYourIdea. A workspace connects its team chat and Noa turns what people say into tasks, owners, deadlines and decisions. This page says what Noa reads, what it keeps, who else sees it, and how to have it removed. The workspace that uses Noa (your employer or team) decides what Noa reads; we process that data on its behalf.

What Noa reads

• Messages in the chat channels a workspace admin maps to a project. Nothing else in the server or workspace.
• Never direct messages between people. Noa ignores them at the door, before anything is stored.
• When someone edits a message, Noa keeps the new text. When they delete it, Noa erases its text too.
• WhatsApp messages you send to Noa’s own number. These are commands and questions to Noa, not team chat, and are not turned into work.

What Noa keeps

• Your account: name, work email, role, and a password hash if you set a password.
• The workspace’s org map: projects, people, who works on what, chat handles used to recognise people.
• Messages from mapped channels, with author and time, and what Noa derived from them: tasks, decisions, status and deadline changes, and a link from each back to its message.
• A history of changes to shared work (who changed what, when and why), and a log of those events so the company graph can be rebuilt.
• Your notification choices: channel, WhatsApp number if you give one, digest time and quiet hours, and the messages Noa sent you.
• Counts of AI calls (how many, how large) so admins can see costs. Not what was sent.

Who else processes it

Noa uses these services to run. Each sees only what its job needs.

• OpenAI, to extract work from messages and to answer questions, when the workspace turns this on. Message text from mapped channels is sent for that purpose.
• Kapso and Meta (WhatsApp Business Platform), to send and receive WhatsApp messages, for people who choose WhatsApp.
• Discord, to read mapped channels and send direct messages, for workspaces that connect it.
• Resend, to send email (invites, sign-in links, notifications).
• Our hosting and database providers, where the data is stored.

We do not sell personal data or use it for advertising.

Who can see what inside a workspace

People see only the workspace they belong to. Noa’s answers cite only what the person asking is allowed to see. Workspace admins manage members, channels and roles. NotYourIdea staff access workspace data only to run, secure and support the service.

How long we keep it

For as long as the workspace uses Noa. When a workspace is deleted, its data, including its graph, is deleted within 30 days, except where we must keep something by law. Backups roll over within the same period.

Your choices

• Choose how Noa reaches you, or turn notifications to in-app only, in Settings.
• Ask your workspace admin to stop reading a channel; they can turn it off in Settings.
• Ask for a copy of your data, a correction, or deletion. Write to us; for workspace data we will work with your workspace admin.

Security

Traffic is encrypted in transit. Sessions use secure, http-only cookies. Every request is checked against the workspace’s permissions. Webhooks from chat providers are verified by signature.

Contact

Questions or requests: privacy@notyouridea.com. We will update this page when Noa changes what it does with data, and change the date above.