Privacy
This notice explains what personal data Noboss handles, why, and what you can do about it.
The website
When you visit noboss.app our hosting provider handles the technical data any website needs (your IP address, browser and the pages you asked for) to deliver the page and keep it secure. When you try the free preview we also receive what you type (your business idea or website, the answers you tap, the town you choose), a random device id stored in your browser, the page you came from and any campaign tags in the link. A bot check from Cloudflare runs when you start a preview. If you leave your email to hear when we open, we keep that email and the business and town you were looking at.
If we use an advertising cookie to measure which ads bring people here, visitors in the EU, the EEA, the UK and Switzerland are asked first, and a Global Privacy Control signal is respected.
Your account
When you sign in we receive your name, email address and profile picture from Google. While you use Noboss we store your business details, the messages your team writes and receives, your contacts and lists, your settings, and the accounts you connect (your mailbox, calendar, LinkedIn and others), with the access you grant. Payment details are handled by Stripe; we only see the result and the last digits of the card.
We use this data to run your team for you, to bill you, to keep the service safe and to answer your questions. The legal basis is the contract with you, and our legitimate interest in keeping the service secure and improving it. AI models process your business details and conversations to write and plan the work.
People your team contacts (notice under Article 14 GDPR)
If you received a message from a business that uses Noboss, this part is for you. The team of that business found your business through public sources: your company website, public business directories and listings, and public professional profiles such as LinkedIn. It may hold your name, your role, your business email address or public business contact details, your company name and location, and short notes on why your business may be a fit.
That business sends you a message about its own offer, follows up if you do not answer and replies if you do. The business that wrote to you decides to contact you; Noboss provides the tools and processes the data on its behalf, and processes it for its own purposes only to keep the service safe, for example to remember opt outs across all businesses that use it. The legal basis is the legitimate interest in offering a relevant service to a business.
You can object at any time. Reply "stop" or say you are not interested and no business using Noboss writes to you again on that channel. We keep the minimum needed to honour that (your address or profile link and the date). Other contact data is kept only as long as the business that found you needs it for this purpose. You can also ask us which data we hold about you, or ask us to delete it, through the app.
Who we share data with
Only with the companies that help us run Noboss, listed on the sub-processor list, under data processing terms, and with authorities where the law requires it. We do not sell personal data. Some of these companies are outside the EU and the UK; where that applies, data is transferred under the European Commission's standard contractual clauses or an adequacy decision.
How long we keep it
Account data stays while your account is open. When you delete your account we delete your data, except records we must keep by law (such as invoices). Preview and waitlist entries are kept only as long as needed to run the preview and to tell you when we open.
Your rights
You can ask for a copy of your data, have it corrected or deleted, object to its use, restrict it, or take it with you. You can complain to your local data protection authority. To use any of these rights, contact us through the app.
Contact
through the app, once you are signed in