Privacy Policy

Scope

Noto.ai, Inc. ("Noto", "we", "us", or "our") is committed to protecting the privacy of Personal Information (as defined below) and wants you to be familiar with how we collect, use and disclose Personal Information in accordance with the laws applicable to us. This Privacy Policy ("Policy") is intended to describe our practices regarding information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual (collectively "Personal Information"), for what purposes Personal Information may be used, and with whom we may share Personal Information. This Policy applies to any Personal Information we collect or receive about you, from any source, including our websites, mobile applications, the tools and services we provide (collectively the "Services") and platforms where the Policy is located (collectively the "Platform").

Our Platform is available only to users who can form legally binding contracts under applicable law. By using the Platform, you represent and warrant that you are: (i) at least eighteen (18) years of age, (ii) otherwise recognized as being able to form legally binding contract under applicable law, or (iii) using the Platform under your parent or guardian's supervision and with all appropriate consents. If you discover that information of anyone under eighteen (18) years of age was submitted to the Services without the necessary consent from a parent or guardian, please contact us using any methods in the "Contacting Us" section below and we will remove such information.

Overview of How Users Interact With Our Site

For visitors to our website, we do use tools such as cookies and pixels that enable us to make the site functional and help us with our marketing efforts, as discussed below. We do not use pixels and cookies to enable third parties to serve ads to our website visitors about their own products or services, nor do we sell or rent our website visitors' personal information to any third parties for their own advertising or marketing purposes. As discussed below, there is always the option to turn off cookies so that this tracking does not occur.

Types of Personal Information We Collect

Noto collects the following categories of information from you and about you that may, alone or in combination with other information, constitute Personal Information. We may have collected the following Personal Information about you within the past 12 months:

Internet or Electronic Network Activity Information. Like most companies, we work with third parties, such as Facebook and Google, to collect information on page visits via cookies and pixels so that we can serve our members ads about our Services. This includes information regarding your interactions with advertisements and other websites, the type of device you use to access our Platform, and other unique or online identifiers like your device hardware model, IP address, or mobile operating system.
Geolocation Data. We do not use location tracking. We can see data broadly related to location, such as emergency address and ip address, but the location tracking feature is not enabled.

How We Use Personal Information About You

Examples of how we may use the Personal Information that we collect we collect include:

To Improve Our Platform and Services. We may use Personal Information about you to make our Platform and Services better. We may also use Personal Information to customize your experience with us.
To Respond to Your Requests or Questions. This may include responding to your feedback.
For Marketing Purposes. We use Personal Information about you to send you ads or other news about our Services. For more information about your choices related to these communications and marketing practices, see the Choices and Rights Regarding Personal Information About You sections below.
For Security Purposes. This could include protecting our company and consumers who use our Services. It may also include protecting our Platform.
As Otherwise Permitted By Law or As We May Notify You.

How We Share Personal Information About You

We do not sell Personal Information about you.

The California definition of selling data includes disseminating Personal Information for valuable consideration, and may be interpreted to include having a contract with a third party with which you share data. We do share data with third parties as needed for treatment, and we share limited non-treatment related data with third parties with which we have contracts to help with our marketing and analytics efforts, through cookies and pixels. This practice may be considered 'selling' data according to the CCPA's broad definition, even though it is not a "sale" under the conventional definition of the word or under the laws in Virginia and Utah. Additionally, as further clarification, we do not use cookies to enable third parties to serve ads to our website visitors about their own products or services.

We may share Personal Information about you in the following ways:

With Our Service Providers. We may share Personal Information about you with third parties who perform services on our behalf and with whom we have a contract that includes appropriate privacy obligations. For example, this may include companies that serve marketing advertisements about our Services on our behalf or other operating systems that help us run our Platform.
With Data Analytics Providers for Targeted Advertising. Like many established companies, we work with third parties like Meta (Facebook) and Google to help us with our marketing efforts. These third parties use technologies, like pixels or cookies, to gather Personal Information about you when you visit our Platform so that we know when to send you messages about our Services. This includes information about your website activity and does not include any information about your health or treatment. We work with these third parties to serve you with our ads and content only—we do not sell or share Personal Information about you with any third parties for their own advertising or marketing purposes. For information about how to manage or opt out of targeted advertising, please see the below Rights Regarding Personal Information About You.
With Any Successors to All or Part of Our Business or One of Our Brands. For example, if Noto assesses or actually merges with, acquires or is acquired by, or sells a brand or part of its business to another business entity. This may include an asset sale, corporate reorganization, or other change of control. We may transfer our customer information as part of such a transaction or as stand-alone assets. You hereby consent to such transfers and Noto may assign and transfer all of the rights, benefits, duties, and obligations of this Policy, under the circumstances described in this paragraph.
To Comply with the Law or To Protect Ourselves. For example, this could include responding to a court order or subpoena. It could also include sharing information if a government agency or investigatory body requests. We might share information when we are investigating a potential fraud. This could include fraud we think has occurred during a sweepstakes or promotion. Such uses shall only be as necessary or appropriate, and only as permitted applicable law: (a) to comply with legal process; (b) to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (c) to protect our operations or those of any of our affiliates, including in connection with investigating security incidents; or (d) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others.
For Such Other Purposes as You May Consent.
For Other Reasons We May Describe to You.

Choices Regarding Personal Information About You

You have certain choices about how we use Personal Information about you. Certain choices you make are browser and device-specific.

Marketing Communications:

You can opt-out of receiving our marketing communications. Note that you will still receive transactional messages from us, including information about your account and responses to your inquiries. To opt-out of receiving our marketing communications, you can follow the instructions included with the communication.

Cookies & Other Tracking Technologies:

Cookies are small text files that websites place on your device as you are browsing, which are stored by your web browser. By storing data, cookies serve crucial functions for websites. If you prefer not to share data, you can disable them. If, however, you do not accept cookies, you may experience some inconvenience in your use of the Services. One helpful summary of the different types of cookies websites use is available on the European Union's privacy legislation website, which explains:

Strictly necessary cookies — These cookies are essential for you to browse the website and use its features, such as accessing secure areas of the site. Cookies that allow web shops to hold your items in your cart while you are shopping online are an example of strictly necessary cookies. These cookies will generally be first-party session cookies. While it is not required to obtain consent for these cookies, what they do and why they are necessary should be explained to the user.
Preferences cookies — Also known as "functionality cookies," these cookies allow a website to remember choices you have made in the past, like what language you prefer, what region you would like weather reports for, or what your user name and password are so you can automatically log in.
Statistics cookies — Also known as "performance cookies," these cookies collect information about how you use a website, like which pages you visited and which links you clicked on. None of this information can be used to identify you. It is all aggregated and, therefore, anonymized. Their sole purpose is to improve website functions. This includes cookies from third-party analytics services as long as the cookies are for the exclusive use of the owner of the website visited.
Marketing cookies — These cookies track your online activity to help advertisers deliver more relevant advertising or to limit how many times you see an ad. These cookies can share that information with other organizations or advertisers. These are persistent cookies and almost always of third-party provenance.

To learn more, you can review the EU's Cookies explanation here.

Your browser may give you the ability to control cookies or other tracking tools. How you do so depends on the type of tool. If you do not want information collected through the use of cookies, there is a simple procedure in most browsers that allows you to automatically decline cookies or be given the choice of declining or accepting the transfer to your computer of a particular cookie (or cookies) from a particular site. You may also wish to refer to aboutcookies.org/how-to-control-cookies.

Our Do Not Track Policy:

Some browsers have "do not track" features that allow you to tell a website not to track you. These features are not all uniform. We do not currently respond to those signals. If you block cookies, certain features on our sites may not work. If you block or reject cookies, not all of the tracking described here will stop.
Options you select are browser and device-specific.

Legal Basis for Processing Personal Information About Residents of the United Kingdom and/or the European Economic Area

Noto will process Personal Information about residents of the United Kingdom ("UK") or the European Economic Area ("EEA") only if and to the extent that at least one of the following applies:

The processing is necessary for the purposes of the legitimate interests pursued by Noto; or
The processing is necessary for the performance of a contract to which you are a party; or
You have given consent to the processing of Personal Information for a specific purpose; or
The processing is necessary for Noto's compliance with a legal obligation.

Rights Regarding Personal Information

You have the following rights ("Data Subject Right") in relation to Personal Information that we hold about you. These rights may differ depending on where you live (including specifically in California, Virginia, Colorado, Connecticut, Utah, the UK, or the EEA), but we will endeavor to respect these rights no matter your country or state of residence.

Right of Access: If you ask us, we will confirm whether we are processing Personal Information about you and, if so, provide you with a copy of all Personal information you are lawfully entitled to receive along with certain other details. If you require additional copies, we may need to charge a reasonable fee. In addition, you may request the categories of third parties with whom we share that Personal Information, and if we disclosed Personal Information about you, the categories of Personal Information that each category of recipient obtained.
Right to Request Rectification: If you believe Personal Information is inaccurate or incomplete, you are entitled to request that we correct or complete it. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared Personal Information about you so you can contact them directly.
Right to Erasure: You may ask Noto to delete or remove Personal Information, such as where you withdraw your consent, where applicable. If we shared Personal Information about you with others, we will tell them about the erasure as directed by law.
Right to Restrict Processing: You may ask us to restrict or 'block' the processing of Personal Information in certain circumstances, such as where you contest the accuracy of the data, or object to us processing it (please read below for information on your right to object). We will tell you before we lift any restriction on processing. If we shared Personal Information with others, we will tell them about the restriction as directed by law. If you ask us, and where possible and legally required, we will also tell you with whom we shared Personal Information about you so you can contact them directly.
Right to Data Portability: You have the right to obtain Personal Information from us that you consented to give us or that was provided to us as necessary in connection with our contract with you, and that is processed by us by automated means. We provide the Personal Information we have collected about you in a structured, commonly used and machine-readable format. You may reuse it elsewhere.
Right to Object: You may ask us at any time to stop processing Personal Information about you, and we will do so:
- If we are relying on a legitimate interest to process Personal Information about you — unless we demonstrate compelling legitimate grounds for the processing; or
- If we are processing Personal Information about you for direct marketing.
Right to Withdraw Consent: If we rely on your consent to process Personal Information about you, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect any processing of your data before we received notice that you wished to withdraw consent.
Rights in Relation to Automated Decision-Making: Individuals residing in the European Union ("EU")/ European Economic Area ("EEA") and UK have the right to be free from decisions based solely on automated processing of Personal Information about you, (including profiling) unless this is necessary in relation to a contract between you and us or you provide your explicit consent to this use.
Right to Lodge a Complaint with the Data Protection Authority: Individuals residing in the EEA and UK that have a concern about our privacy practices, including the way Noto handles Personal Information about you, can report it to the data protection authority that is authorized to hear those concerns.
Right to Non-Discrimination: We will not discriminate against you for exercising these rights, but we may charge a reasonable fee as permitted by law in fulfilling these rights.

If you or your authorized agent wish to exercise any of these Data Subject Rights, please contact us via at the information provided in the HOW TO CONTACT US section below. Before responding to your request to exercise Data Subject Rights, we may require you to confirm your name, email address on file, and potentially additional information to verify your identity or clarify your specific request. We will try to comply with your request as soon as reasonably practicable and in compliance with applicable law. Where appropriate, we will transmit the amended information to third parties having access to Personal Information about you.

We may deny your request to exercise any of your Data Subject Rights above as permitted by law, including if any such exercise of those rights might prevent Noto from:

Complying with legal obligations.
Detecting security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
Debugging products to identify and repair errors that impair existing intended functionality.
Making other internal and lawful uses of that information that are compatible with the context in which you provided it.

Transfers of Personal Information

All Personal Information that we collect is stored in the US, is subject to US laws, and may be subject to disclosure to US governments, courts, law enforcement, or regulatory agencies pursuant to those laws. Noto is based in the United States. If you are using Noto's Services from or in another country with laws governing processing of Personal Information, please note that Personal Information about you will be transmitted to our servers in the United States as necessary to provide you with the information that you requested, administer our contract with you or to respond to your requests as described in this Policy, and such Personal Information may be transmitted to our service providers supporting our business operations. The United States may have data protection laws less stringent than or otherwise different from the laws in effect in the country in which you are located. When we transfer Personal Information about you out of your country, we will take steps to ensure that Personal Information about you receives an adequate level of protection where it is processed, and your rights continue to be protected.

Links

This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third party operating any site or service to which the Services link. The inclusion of a link on the Services does not imply endorsement of the linked site or service by us or by our affiliates. In addition, we are not responsible for the information collection, use, disclosure or security policies or practices of other organizations, such as Facebook, Apple, Google, Microsoft, RIM or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider or device manufacturer, including with respect to any Personal Information you disclose to other organizations through or in connection with the Services.

How to Contact Us

If you have any questions, comments, or concerns with respect to our privacy practices or this Policy, wish to update Personal Information about you, or would like to exercise your Data Subject Rights, please feel free to contact us at privacy@noto.ai.

You may also write to us at the following address:

Noto
Attention: Privacy Officer
225 N Michigan Ave, Suite 1430
Chicago, IL 60601

Changes in Policy

From time to time, we may change our Policy. We will notify you of any material changes to our Policy as required by law. We will also post an updated copy on our Platform.

Last Updated and Effective: January 23, 2026