Privacy Policy

Noa Technologies, Inc. ("Noa," "we," "us," or "our") is a Delaware corporation that operates an AI-assisted, human-verified technology due diligence platform for private equity firms, venture capital funds, and transaction advisory firms. Our platform is accessible at runnoa.ai.

Noa is the data controller for personal information collected through runnoa.ai and from platform users. For customer data submitted to the platform in connection with due diligence engagements, Noa acts as a data processor on behalf of the customer.

Questions about this policy may be directed to hi@runnoa.ai.

This Privacy Policy applies to:

• Visitors to runnoa.ai and any related subdomains
• Individuals who register for or use the Noa platform as authorized users on behalf of a customer organization
• Individuals who contact us directly, request information, or sign up for communications

This policy does not apply to:

• Customer Data — data about Target Companies (code repositories, cloud environments, personnel profiles) submitted by customers for due diligence analysis. That data is governed by the applicable customer agreement and processed solely as instructed by the customer.
• Third-party services — websites or services linked from our platform that have their own privacy policies.
• Employee data — personal information collected from Noa employees and contractors, governed by separate internal policies.

Information You Provide

Information Collected Automatically

Information from Third Parties

We may receive information about you from third-party sources, including:

• CRM and enrichment providers (such as Apollo or HubSpot) that supplement contact data for outreach
• Channel partners and referral sources that introduce prospective customers
• Publicly available professional profiles (such as LinkedIn) used to verify identity or enrich account records

We use the information we collect for the following purposes:

Providing and Operating the Platform

• Creating and managing accounts and user access
• Delivering technology due diligence reports and platform features
• Processing payments and managing subscriptions
• Authenticating users and maintaining session security
• Providing customer support and responding to inquiries

Improving the Platform

• Analyzing usage patterns to improve features, workflows, and user experience
• Training and improving AI and machine learning models using anonymized, de-identified data
• Developing new products, features, and services
• Conducting internal research and generating aggregated benchmarks

Communications and Marketing

• Sending transactional communications: account confirmations, invoices, platform updates, security alerts
• Sending marketing communications about Noa products, insights, and industry content, subject to your preferences
• Responding to demo requests, sales inquiries, and partnership opportunities

Legal and Compliance

• Complying with applicable laws, regulations, and legal processes
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of Noa, our customers, and others
• Detecting, investigating, and preventing fraud, abuse, and security incidents

Legal Basis (for EEA/UK users)

Where applicable data protection law requires a legal basis, we process personal data under the following bases: contractual necessity (providing the platform), legitimate interests (security, fraud prevention, product improvement), compliance with legal obligations, and consent (marketing communications).

We do not sell personal information. We share information only as described below.

Service Providers

We share information with third-party vendors and service providers that perform services on our behalf, including cloud hosting, payment processing, analytics, email delivery, CRM, and customer support tooling. These providers are contractually obligated to use information only as directed by Noa and to maintain appropriate security measures.

Channel Partners

If you were referred to Noa through a channel partner (such as a transaction advisory firm), we may share engagement status and account information with that partner in connection with the referral relationship.

Business Transfers

If Noa undergoes a merger, acquisition, reorganization, or sale of all or substantially all of its assets, personal information may be transferred as part of that transaction. We will notify affected users by email or platform notice and describe any choices available.

Legal Requirements

We may disclose information if we believe in good faith that disclosure is required by applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Noa, our customers, or others.

With Your Consent

We may share information for other purposes with your explicit consent.

Noa as Data Processor

When you submit Customer Data — including code repositories, cloud environment credentials, personnel profiles, and other Target Company materials — Noa acts as a data processor on your behalf. We process that data solely to provide the services described in your agreement and do not use it for our own independent purposes beyond aggregated, anonymized analysis as described below.

Your Responsibilities

As the data controller for Customer Data, you are responsible for ensuring you have the legal right to submit Target Company data to Noa, including any required consents or authorizations under applicable NDAs, transaction process letters, or data protection laws.

Anonymized Benchmarking

Noa may use Customer Data in fully anonymized and aggregated form — stripped of all company names, identifiers, and personal information — to generate industry benchmarks, improve scoring models, and develop product features. No identifiable information about you, your firm, or any Target Company is included in such aggregated data.

Analyst Access

Company analysts access Customer Data solely to perform human-in-the-loop review as part of the diligence process. Analyst access is logged, access-controlled, and governed by confidentiality obligations.

Retention

Customer Data is retained for the duration of the active subscription and for ninety (90) days thereafter, after which it is securely deleted. See Section 8 for full retention details.

We use cookies and similar tracking technologies on runnoa.ai and within the platform. The types of cookies we use include:

You can control cookies through your browser settings. Disabling certain cookies may affect functionality. For the marketing site, we honor browser-level Do Not Track signals and global privacy controls where technically feasible.

We retain personal information for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

When retention periods expire, we securely delete or anonymize personal information. You may request earlier deletion of your personal information as described in Section 11.

We implement administrative, physical, and technical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. Our security measures include access controls, encryption of data in transit (TLS) and at rest, audit logging, and regular security assessments.

No security measure is perfect or impenetrable. While we work diligently to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

If you believe you have discovered a security vulnerability in the Noa platform, please report it responsibly to hi@runnoa.ai.

Noa is headquartered in the United States. If you access the platform from outside the United States, your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we transfer personal data to the United States pursuant to applicable transfer mechanisms, including Standard Contractual Clauses adopted by the European Commission. Where required, we will enter into appropriate data transfer agreements upon request.

By using the platform, you acknowledge that your information may be transferred to and processed in the United States.

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

To exercise any of these rights, contact us at hi@runnoa.ai with the subject line "Privacy Request." We will respond within thirty (30) days. We may need to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.

If you are located in the EEA or UK and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection authority.

Opting Out of Marketing

You may opt out of marketing emails at any time by clicking the unsubscribe link in any email or by contacting us at hi@runnoa.ai. Opting out of marketing does not affect transactional communications related to your account or active engagements.

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides additional rights.

Categories of Personal Information Collected

In the preceding twelve months, we have collected the following categories of personal information as defined by the CCPA: identifiers (name, email, IP address); commercial information (subscription and billing records); internet or network activity (usage data, log data); professional or employment-related information (job title, company name); and inferences drawn from the above to create user profiles for platform functionality.

No Sale or Sharing for Cross-Context Advertising

Noa does not sell personal information and does not share personal information for cross-context behavioral advertising purposes. You do not need to submit a "Do Not Sell or Share" request because we do not engage in these practices.

Exercising Your Rights

California residents may exercise rights to know, delete, correct, and limit use of sensitive personal information by contacting us at hi@runnoa.ai or through any method described in Section 11. We will respond within forty-five (45) days, with an option to extend by an additional forty-five (45) days with notice.

Authorized Agents

You may designate an authorized agent to submit requests on your behalf. We will require written proof of authorization and may verify the request directly with you.

The Noa platform is designed for and directed exclusively at business professionals. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected personal information from a minor, we will promptly delete it. If you believe a minor has provided us with personal information, please contact us at hi@runnoa.ai.

The Noa platform and runnoa.ai may contain links to third-party websites and may integrate with third-party services (such as cloud providers used for data submission). This policy does not apply to those third-party sites or services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of Noa.

We are not responsible for the privacy practices of third-party websites or services, even if accessed through links on runnoa.ai.

We may update this Privacy Policy from time to time to reflect changes in our practices, the platform, or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page and, where required, notify you by email or by displaying a prominent notice within the platform at least thirty (30) days before the changes take effect.

Your continued use of the platform after the effective date of any updated policy constitutes your acceptance of the changes. If you do not agree with the updated policy, you should stop using the platform and contact us to close your account.

Prior versions of this policy are available upon request at hi@runnoa.ai.

For questions, concerns, or requests related to this Privacy Policy or our data practices, contact us at:

We aim to respond to all privacy inquiries within thirty (30) days.