Noonum
LoginDemo

Privacy Policy

Effective date: January 16, 2019

Last updated: November 2, 2026

1. Who we are

Noonum, Inc., a Delaware C Corporation, based in Redmond, Washington (“Noonum,” “we,” “us”), publishes Noonum, an AI service to empower the construction and customization of portfolios and indexes. Noonum transforms an idea, a thought, or an investment objective expressed in plain English language into a ranked list of companies that are aligned to the objective with reasoning and independently verifiable evidence.

Noonum, Inc. is responsible for the personal information described in this policy. Under EU and UK data protection law, that makes us its “controller.”

This policy covers our website (https://noonum.ai), dashboard (https://dashboard.noonum.com), docs (https://docs.noonum.ai), REST API (https://api.noonum.ai), connector for AI assistants (https://mcp.noonum.ai/mcp), and the Noonum plugin, which adds skills for Claude, ChatGPT and Codex. When you use Noonum inside an AI assistant, the assistant provider’s privacy policy covers your conversation.

2. Information we collect

We collect only the information below.

Category Examples
Account Email address and the account identifier from our sign-in provider, Auth0. If you sign in with Google or Microsoft, your name and profile picture, which stay in your browser for display. If your organization sets up your account, your name and company.
Strategy content Strategy names, objectives, exclusions, waivers, tags and filters, and links and text you submit to draft or rewrite an objective. Every version you submit, and the results Noonum generates.
Portfolios Holdings you upload or build.
Usage Plan, credits and a record of each run.
Communications Emails you send us, dashboard feedback, demo requests on noonum.ai, email subscriptions, and questions you type into the docs assistant.
Technical and log data IP address, browser or client type, and requests and their times. API key records and connector sign-in details.
Website analytics Cookieless Cloudflare Web Analytics on noonum.ai and the dashboard.

Public information about companies. Noonum analyzes public documents about companies, such as regulatory filings, news and patents. They can name people, such as executives or inventors. We use them only to describe what companies do, and keep them as long as we do so. To object, email hello@noonum.com.

3. How we use information

Your private strategy content serves one purpose: providing the service to you. We use it to run your strategies and show the results, provide the features you ask for, support you when you ask, and keep the service secure. Noonum staff access it only for these reasons, and we share it only as Section 5 describes.

It stays out of AI training. Noonum does not train AI models on your private strategy content, and neither do our AI model providers, OpenAI and Google, under their API terms for business customers.

We use personal information only for the purposes below. The legal bases come from the EU General Data Protection Regulation (GDPR) and similar UK and Swiss law.

Purpose Legal basis
Create your account, sign you in, and connect the API and AI assistants Contract
Run your strategies, show results, keep each version reproducible, and provide features you ask for, with help from our AI model providers Contract
Track your plan and credits, and compile usage statistics for billing and operations Contract; legitimate interests (running our business)
Support you, and send service notices and changes to this policy Contract; legitimate interests (keeping you informed)
Reply to demo requests and arrange meetings Legitimate interests (answering business inquiries)
Send business and product updates and market insights to people who sign up for them or request a demo Consent, if you sign up; legitimate interests (keeping prospective customers informed), if you request a demo
Keep the service secure, prevent abuse and fix problems Legitimate interests (protecting the service and its users)
Understand traffic to our websites Legitimate interests (measuring site use)
Show our LinkedIn feed on the noonum.ai home page, if you choose to load it Consent
Support accounts that your organization manages Legitimate interests (letting organizations manage accounts)
Describe what companies do, using public documents Legitimate interests (company research)
Follow the law, and enforce or defend our rights Legal obligation; legitimate interests (protecting our rights)

You can object to uses based on legitimate interests (Section 9). An email address is required to create an account, and strategy content is required to run a strategy.

4. Using Noonum through AI assistants

You can connect Claude, ChatGPT, Codex and other AI assistants to Noonum’s connector by signing in or with an API key.

  • Noonum receives only the inputs of the Noonum tools the assistant calls, such as a strategy’s name and objective. When you sign in, we also receive your account identifier and, if provided, your email address.
  • Your conversation history, the assistant’s memory and files you share with the assistant stay with the assistant provider.
  • We save what the assistant sends to your Noonum account, and use, share and keep it like anything you enter in the dashboard (Sections 3, 5 and 7). We record connector requests in our service logs.
  • Tool results go back into your conversation, where the assistant provider’s privacy policy applies: Anthropic’s for Claude and OpenAI’s for ChatGPT and Codex.
  • In a shared workspace, such as Claude Team or Enterprise, each member uses their own Noonum account, and private strategies stay with their owner.
  • You can disconnect Noonum in your assistant’s settings at any time.

Keep API keys and passwords out of your conversations with AI assistants.

5. Who receives information

AI model providers. OpenAI and Google receive only the content each task needs, such as your strategy content, without your name or email address. Their API terms for business customers do not allow them to train on it.

Service providers. Our hosting and infrastructure, sign-in, email, website form, embedded content, web page loading and analytics providers process personal information for us. https://noonum.ai/subprocessors lists the providers that process customer data.

Google and Microsoft. When you use them to sign in, they act as independent controllers under their own privacy policies.

Other recipients:

  • Public catalog. Noonum publishes a catalog of strategies, with their objectives and results, for all signed-in users. Your strategies stay private unless you give us permission to publish them.
  • Public portfolios. Your portfolios are private unless you make one public. All signed-in users can then see it and its holdings, but not your name.
  • Your organization. If your organization manages your account, it can see your account details.
  • AI assistants you connect. They receive tool results at your direction.
  • Legal requests. We may disclose information if we believe in good faith that the law requires it, or to protect the rights, safety or property of Noonum, our users or others.
  • Corporate transactions. We may transfer information as part of a merger, acquisition, financing or sale of assets.

These are the only recipients of your personal information. We never sell it or use it for targeted advertising.

6. Where we store information

Noonum is based in the United States, and we store your information there. Some of our providers also process it in other countries.

For personal information from the European Economic Area (EEA), the UK or Switzerland, our providers’ data processing terms include the Standard Contractual Clauses approved for these transfers. You can ask us for a copy. Organizations that need their own data processing or transfer terms with Noonum can contact hello@noonum.com.

7. How long we keep information

Information How long we keep it
Account information, including API key records For the life of your account
Strategies, versions and results Until you delete them. You can restore them for 30 days, then we permanently delete them.
Portfolios Until you delete them
Usage records As long as we need them for billing, security and legal obligations
Service logs 30 days
Connector sign-in Up to about one year from when you connect
Communications As long as we need them to answer you and keep a record of our dealings
Email updates Until you unsubscribe. We then keep only your email address on a do-not-email list.
Database backups Up to 3 days

Website analytics follow our analytics provider’s retention period.

When you close your account, we delete your account, strategies and portfolios within 30 days. Usage records, communications, connector sign-ins and database backups follow the periods above. We may keep information longer where the law requires it or to resolve a dispute.

8. Your choices

In the dashboard you can see, edit and delete your strategies, delete your portfolios, download each strategy’s companies as a CSV file, and create and revoke API keys. You can disconnect AI assistants in their settings. You can unsubscribe from our business and product updates at any time with the link in each email.

For a full copy of your data, to close your account, or for anything else, email hello@noonum.com from your account email.

9. Your rights

If you are in the EEA, the UK or Switzerland, you have the right to:

  • access, correct or delete your personal information;
  • restrict or object to how we use it;
  • get a copy in a structured, machine-readable format (portability);
  • withdraw consent at any time, where we rely on it;
  • complain to your local data protection authority.

Automated ranking. Noonum ranks companies, not people. It makes no automated decisions about you that have legal or similarly significant effects.

How to make a request. Email hello@noonum.com. We verify requests against your account email or, if you have no account, the details you gave us. Someone else can make a request for you with your signed permission, and we may ask you to confirm your identity directly. We reply within one month, and complex requests may take up to two more months. California requests get a reply within 45 days, extendable once by 45 days. We will tell you if we need more time.

10. California notice

For California residents under the California Consumer Privacy Act (CCPA), covering the last 12 months:

CCPA category What it includes at Noonum Disclosed for a business purpose to
Identifiers Email address, account identifier, IP address, and name in some cases Hosting, sign-in, email, website form, embedded content and analytics providers; your organization, if it manages your account
Customer records (Cal. Civ. Code § 1798.80(e)) Name and email address Hosting, sign-in, email and website form providers
Commercial information Plan, credits and run records Hosting providers
Internet or other electronic network activity Service logs and website analytics Hosting, analytics and embedded content providers
Audio, electronic, visual or similar information Profile picture from Google or Microsoft sign-in Sign-in provider
Professional or employment-related information Company name Hosting, email and website form providers; your organization, if it manages your account
Sensitive personal information Account log-in credentials Sign-in and hosting providers
Other information you provide Strategy content, portfolios and messages you send us Hosting, AI model, web page loading, website form and email providers

Sources: you; your sign-in provider (Auth0, and Google or Microsoft if you use them); your organization, if it sets up your account; your browser or device; the AI assistant you connect; and public documents about companies.

Purposes and retention: see Sections 3 and 7.

No sale or sharing. We do not sell or share personal information, and we have not done so in the last 12 months. We do not knowingly sell or share the personal information of consumers under 16.

Sensitive personal information. We use it only to authenticate you.

Your rights. You can ask to know what personal information we collect, use and disclose, and to delete or correct it (Section 9).

Non-discrimination. We will not treat you differently, such as by denying service or charging more, for using your privacy rights.

11. Cookies and browser storage

These are the only cookies and similar browser storage on our sites:

Category What it does Set by How long
Sign-in Keeps you signed in to the dashboard and the Auth0 sign-in pages, and remembers which AI assistants you approved on the connector consent screen Auth0 and Noonum From the length of a sign-in up to 1 year. Dashboard sign-in marker: 1 day. Sign-in tokens: until you sign out. Connector approvals: 1 year.
Preferences Remembers dashboard sidebar and display settings, your recent items, whether the docs assistant panel is open, and whether you chose to load the LinkedIn feed on the noonum.ai home page Noonum and Mintlify 7 days, or until you clear them
Embedded content Shows the LinkedIn feed on the noonum.ai home page, only after you choose to load it Elfsight Until you close the tab

noonum.ai and the dashboard measure traffic with Cloudflare Web Analytics, which works without cookies. None of the items above is used for advertising or to track you across other websites, so Do Not Track signals do not change how our sites work.

You can block or clear cookies and browser storage in your browser. Blocking them on the dashboard may stop you from signing in.

12. Security

  • Connections to our websites, the API and the connector are encrypted with TLS.
  • We store API keys only as one-way hashes, and connector sign-in tokens only in encrypted form.
  • Passwords stay with our sign-in provider, Auth0.
  • We check ownership on every request, so only you can see and change your private strategies. Noonum staff access them only as Section 3 describes.

To report a security vulnerability, email hello@noonum.com.

13. Children

Noonum is for people 18 and older. If we learn that we have collected personal information from someone under 18, we delete it.

14. Changes to this policy

When we update this policy, we change the dates at the top. If we make a material change, we will email you at your account email before it takes effect.

15. Contact us

Noonum, Inc., a Delaware C Corporation, based in Redmond, Washington.