Privacy Policy

Effective Date: January 1, 2025
Last Updated: January 20, 2026

Noverload ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service. It is designed to comply with applicable privacy laws including GDPR and CCPA.

1. Scope

This Privacy Policy applies to:

  • The Noverload web application at https://noverload.com
  • The Noverload Chrome extension
  • Any related services and APIs

By using Noverload, you acknowledge that you have read and understood this Policy.

2. Who We Are

Noverload is an AI-powered knowledge management tool that transforms your saved content into actionable insights. We help you save and understand content from YouTube, X (Twitter), Reddit, articles, and PDFs.

🔒 You own your data. Full stop.

We do not sell your data, use it for advertising, or train AI models on your personal content.

Data Controller:
Noverload
Email: contact@noverload.com
Website: https://noverload.com

3. Information We Collect

Account Information

  • Email address (for authentication and communication)
  • Authentication credentials (managed by Supabase Auth)
  • Account preferences and settings

Content You Save

  • URLs and titles of saved content
  • Extracted text from articles and web pages
  • YouTube video transcripts
  • X (Twitter) posts and Reddit threads
  • AI-generated summaries and insights
  • Tags and organizational data

Usage Data

  • Goals you create and track
  • Action items and completion status
  • Feature interactions and usage patterns
  • Chat conversations with your content

Technical Information

  • Browser type and version
  • Device and operating system
  • IP address (for security purposes)

Payment Information

Payments are processed by Stripe. We do not store credit card numbers or banking details directly.

4. Chrome Extension

Our Chrome extension ("Noverload - Save & Extract") has specific data handling practices:

Data Processed Locally

  • Page content extracted using Mozilla Readability (runs in your browser)
  • Page URL and title detection
  • YouTube transcript extraction

Data Stored in Browser

  • Authentication token (in browser.storage.local)
  • User preferences

Data Sent to Our Servers

  • Extracted text content (not raw HTML)
  • URLs and titles of pages you save
  • YouTube transcripts when you save a video

Extension Permissions

activeTabExtract content from the current page when you click save
storageStore your authentication token securely
contextMenusProvide right-click "Save to Noverload" option
notificationsShow confirmation when content is saved
scriptingRun content extraction on web pages

The extension only activates when you explicitly save content. It does not run in the background or track your browsing.

5. How We Use Your Information

  • Service Delivery: Provide, maintain, and improve our content management service
  • AI Processing: Generate summaries, insights, and actionable tasks from your saved content
  • Search & Discovery: Enable semantic search across your saved content
  • Account Management: Manage your account, usage, and preferences
  • Communication: Send service updates, security alerts, and support messages
  • Security: Detect and prevent fraud, abuse, and unauthorized access

6. AI Processing & Content Privacy

  • Processing: Your content is processed by AI to extract summaries, key insights, and tags
  • No Training: We never use your personal content to train AI models
  • Data Minimization: We only extract what's necessary to provide insights
  • User Control: You can delete any content and its associated data at any time

7. Legal Basis for Processing

  • Contract Performance: To provide the services you've requested
  • Legitimate Interests: To improve our services and ensure security
  • Consent: For optional features and marketing communications
  • Legal Obligations: To comply with applicable laws

8. Data Storage & Security

  • Database: Supabase (PostgreSQL) with encryption at rest
  • Transmission: HTTPS/TLS encryption for all data in transit
  • Authentication: Supabase Auth with secure token management
  • Access Control: Row Level Security (RLS) ensures you can only access your own data

Transparency Note

Your content data is protected by infrastructure-level encryption and access controls, but is not end-to-end encrypted. We recommend not saving highly sensitive or confidential information.

9. Third-Party Services

ServicePurpose
SupabaseDatabase, authentication, and file storage
Claude (Anthropic) and OpenAIAI processing for summaries and insights
StripePayment processing
VercelWeb application hosting
PostHogAnonymous usage analytics

All third-party providers are bound by data processing agreements.

10. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards including standard contractual clauses and data processing agreements.

11. Data Retention

Data TypeRetention Period
Account dataWhile your account is active
Saved contentUntil you delete it or close your account
AI-generated insightsUntil you delete the associated content
Technical logsUp to 90 days
Deleted dataRemoved within 30 days

12. Your Privacy Rights

Depending on your location, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data
  • Portability: Export your data in JSON format from Settings → Privacy
  • Restriction: Limit how we process your data
  • Objection: Object to certain processing
  • Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us at contact@noverload.com. We will respond within 30 days.

13. Marketing Communications

When you create an account, you may receive marketing emails about product updates and features. You can opt out at any time:

  • Through your account notification settings
  • By clicking unsubscribe in any marketing email
  • By contacting us at contact@noverload.com

Essential service communications (security alerts, account notifications) cannot be opted out of.

14. Cookies

We use essential cookies to:

  • Maintain your session and authentication
  • Remember your preferences
  • Ensure security and prevent fraud

We do not use third-party tracking or advertising cookies.

15. Children's Privacy

Noverload is not intended for children under 13 (or 16 in the EU). We do not knowingly collect information from children. If we discover such data, we will delete it immediately.

16. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. We will notify you of material changes via email or through the service. The latest version will always be dated at the top.

17. Contact Us

If you have questions or wish to exercise your privacy rights:

Privacy Inquiries
Noverload
Email: contact@noverload.com
Website: https://noverload.com

You may also file a complaint with your local data protection authority if you believe your rights have been violated.