Privacy Policy

  1. Home
  2. Privacy Policy

Privacy Policy

Effective Date: November 12, 2024

Last updated: 2026-10-20

At NOGL ("we," "us," or "our"), accessible from https://app.nogl.ai, we prioritize the protection of your personal information and privacy rights. This Privacy Policy explains our practices regarding the collection, use, and protection of your data.

Information Collection and Use

Personal Information You Provide

When you create an account or interact with our platform, you voluntarily provide us with personal data including:

  • Name, email address, and contact details
  • Company name and business information
  • Phone number and billing address
  • Payment and billing information (processed securely through third-party providers)
  • Communication preferences and marketing consent

Automatically Collected Data

We automatically collect certain information when you visit our website or use our services:

  • Log data (IP address, browser type, date and time of requests)
  • Device information (device type, operating system, unique device identifiers)
  • Usage data and interactions with our platform
  • Referral sources and navigation patterns

How We Use Your Information

We use the collected data to provide and administer our services, respond to your requests, and communicate with you regarding service usage. Specifically, we use your information to:

  • Process and fulfill your service requests and transactions
  • Provide customer support and technical assistance
  • Conduct analytics to understand how visitors interact with our site and services
  • Improve our services and ensure optimal presentation
  • Send marketing communications (with your explicit consent)
  • Comply with legal obligations and regulatory requirements

Data Security and Protection

We implement industry-standard security measures to protect your personal information, including:

  • End-to-end encryption of sensitive data
  • Secure data storage systems with regular backups
  • Multi-factor authentication and access controls
  • Regular security audits and vulnerability assessments
  • Employee training on data protection best practices

Your Privacy Rights and Choices

Under applicable data protection laws, you have the following rights regarding your personal data:

Your Data Protection Rights

  • Access: Request a copy of your personal information and details about how we process it
  • Rectification: Request corrections to inaccurate or incomplete personal data
  • Erasure: Request deletion of your personal information (right to be forgotten)
  • Portability: Receive your data in a structured, machine-readable format
  • Restriction: Request limitation of processing under certain circumstances
  • Objection: Object to processing based on legitimate interests or for marketing purposes
  • Withdrawal: Withdraw consent at any time where processing is based on consent

How to Exercise Your Rights

You can exercise these rights by contacting us at [email protected]. We will respond to your request within 30 days and may request additional information to verify your identity.

  • Provide your full name and email address associated with your account
  • Clearly describe the specific right you wish to exercise
  • Include any relevant account information to help us locate your data

Note: Some rights may be limited in certain circumstances, such as when we have a legal obligation to retain data or when the request is manifestly unfounded or excessive. We will explain any limitations when responding to your request.

Data Sharing and Disclosure

We may share your personal data with vendors and service providers who assist in our business operations, including:

  • Hosting Services: Cloud infrastructure providers for secure data storage and processing
  • Payment Processors: Secure transaction handling and billing services
  • Email Communication: Service providers for transactional and marketing communications
  • Customer Support: Third-party support platforms and tools
  • Analytics Services: Website and service usage analysis providers
  • Marketing Services: Advertising and remarketing platforms (with your consent)

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the business transaction. We will ensure that any such transfer is subject to appropriate safeguards and that your privacy rights are protected.

Legal Requirements

We may disclose your personal data when required by law, to comply with legal obligations, or to protect our rights, property, or safety, as well as that of our users or others.

Data Protection: All third-party partners are contractually obligated to protect your data and comply with applicable privacy laws. We ensure that any data sharing is subject to appropriate safeguards and data processing agreements.

Data Retention

We retain your personal information only for as long as necessary to:

  • Fulfill the purposes outlined in this policy
  • Comply with legal obligations and regulatory requirements
  • Resolve disputes and enforce our agreements
  • Maintain business continuity and service quality

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to recognize repeat users and track web usage behavior. Our use of cookies includes:

Types of Cookies We Use

  • Strictly Necessary Cookies: Essential for site navigation and functionality, including authentication and security features.
  • Analytics Cookies: Help us understand how visitors interact with our site and services to improve performance and user experience.
  • Functionality Cookies: Remember your preferences and settings to provide personalized experiences.
  • Marketing and Remarketing Cookies: Used for targeted advertising and remarketing campaigns (with your consent).

Managing Your Cookie Preferences

You have several options for managing cookies:

  • Use our cookie consent banner to accept or decline non-essential cookies
  • Adjust your browser settings to block or delete cookies
  • Use browser extensions or privacy tools to manage tracking

Note: Disabling certain cookies may affect the functionality of our website and services. Essential cookies cannot be disabled as they are necessary for basic site operations.

International Data Transfers

We are based in Germany and may process personal data in the United States and other countries through our service providers. When we transfer personal data from the EEA/UK to countries that do not provide an adequate level of protection, we implement appropriate safeguards to ensure your data remains protected.

Safeguards for Data Transfers

  • Standard Contractual Clauses (SCCs): EU-approved contractual terms ensuring adequate protection
  • Certified Frameworks: Where applicable, certified frameworks such as the EU–US Data Privacy Framework
  • Technical and Organizational Measures: Additional security measures to protect transferred data
  • Data Processing Agreements: Contractual obligations ensuring third-party compliance with privacy laws

Service Providers: We use service providers such as Amazon Web Services and payment processors in the United States, which are certified under appropriate data protection frameworks. Copies of our data transfer safeguards are available upon request.

Do Not Sell or Share My Personal Information (CPRA)

We do not sell or share personal information as those terms are defined under the California Privacy Rights Act (CPRA). If our practices change, we will update this policy and provide a clear opt-out mechanism.

Children's Privacy

We do not knowingly collect information from children under 13 years of age. If we discover that we have collected personal information from a child under 13, we will delete it immediately. If you believe we have collected information from a child under 13, please contact us immediately.

Updates to This Policy

We regularly review and update this policy to reflect changes in our practices and legal requirements. We will notify you of significant changes via email or prominent website notice at least 30 days before the changes take effect. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

For privacy-related inquiries, data subject requests, or questions about this policy, you can reach us through multiple channels:

[email protected]

Primary privacy contact

[email protected]

General support and assistance

+49-40-12345678

Business hours: Monday-Friday, 9:00-17:00 CET

Hamburg, Germany

Our registered office

Data Subject Rights Requests

To exercise your rights under GDPR (access, rectification, erasure, portability, etc.), please contact us with:

  • • Your full name and email address
  • • Description of the specific right you wish to exercise
  • • Any relevant account information

Data Protection Officer: Nogl GmbH
Response Time: We will respond to your inquiry within 30 days of receipt
Verification: We may request additional information to verify your identity

Supervisory Authority (EU/EEA)

If you are located in the EEA/UK, you have the right to lodge a complaint with your local supervisory authority. In Germany (Hamburg), please see the Hamburg Commissioner for Data Protection and Freedom of Information: datenschutz-hamburg.de.

Privacy Policy | NOGL