NobleAI Privacy Policy

‍

I. Notice at Collection and Scope

This Privacy Policy describes how Noble Artificial Intelligence, Inc. (“NobleAI,” “we,” or “us”) handles personal information that we collect as a Controller in connection with our public website and our related marketing and business-development activities. It is directed to visitors to our website and to the business contacts who interact with us in those contexts. A separate privacy policy applies to personal information processed in connection with our products and services; this Policy does not cover that information. At or before the time of collection, we gather the categories of personal information described in Section 3 for the business purposes described in Section 4.

California Privacy Notice: This section applies solely to California residents and is provided pursuant to the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CPRA"). This notice supplements the information contained elsewhere in this Privacy Policy.

Categories of Personal Information Collected: Identifiers (including online and network identifiers such as IP addresses and device or browser identifiers); professional or employment-related information; and internet or network activity information. NobleAI does not collect sensitive personal information from website visitors.

Purposes of Collection: Personal information is collected for business purposes including operating and securing our websites and services, communicating with business contacts, managing contractual relationships, complying with legal obligations, and preventing fraud and misuse.

Retention: Personal information is retained only for as long as reasonably necessary to fulfill the purposes described above, taking into account the nature of the information, legal and regulatory requirements, and operational needs.

Categories of Personal Information Sold or Shared: NobleAI does not sell personal information for monetary consideration. However, we “share” identifiers and internet or network activity information for cross-context behavioral advertising, and our use of certain data enrichment services may constitute a “sale” of identifiers and professional information under the CPRA.

Categories of Third Parties: Advertising and retargeting partners; data enrichment providers; analytics providers; and service providers and their sub-processors. See Section 5 for further detail.

Your Right to Opt Out: California residents have the right to opt out of the sale and sharing of their personal information. You may exercise this right at any time through the “Do Not Sell or Share My Personal Information” link and cookie-preference tool on our website. We also recognize and honor opt-out preference signals, including the Global Privacy Control (GPC), as a valid request to opt out, and our website indicates when a GPC signal has been honored. In addition, we do not activate advertising, retargeting, audience-matching, visitor-identification, or data-enrichment technologies that collect network or device identifiers until you have consented to them, as described in Section 7.

II. Roles Under Data Protection Law

For the personal information described in this Policy, NobleAI is the "Controller" (or "Business" under U.S. law), meaning that we determine how and why that information is processed. This covers the information we collect for our own website-operation, security, analytics, advertising, and business-development purposes, such as when you visit our website or contact us for information. We are responsible for responding to the privacy rights requests described in Section 9.

III. Categories of Personal Information Collected

‍
We collect several categories of information to conduct our business, including:

Identifiers: Names, email addresses, and IP addresses, and online or device identifiers associated with your browser or device.

Commercial Information: Products or services you have inquired about or expressed interest in.

Internet or Network Activity: Browsing history and interactions with our website, and the routing, addressing, and signaling information generated when your browser communicates with our website and its tracking technologies.

Professional or Employment-related Information: Job titles and employer details.

We do not collect sensitive personal information through our website.

IV. Purposes and Legal Bases for Processing

Under the GDPR and similar frameworks, we process your information based on the following legal foundations:

Contractual Necessity: Processing is necessary to respond to your request or to take steps at your request before entering into a contract, such as when you ask us to contact you or to provide information about our offerings.

Legitimate Interests: We process information to fulfill our legitimate interests in improving our products, maintaining system security, and conducting business-to-business marketing, provided these interests do not override your fundamental rights.

Legal Obligation: We process data to comply with legal mandates, such as tax or regulatory requirements.

Consent: We process data based on your explicit consent, such as when you opt-in to marketing communications or accept non-essential cookies or other tracking technologies.

Where we rely on consent, you may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Profiling, Lead Scoring, and Intent Data: We may analyze your interactions with our websites, communications, and marketing to evaluate and score your potential interest in our products, to prioritize and tailor business-to-business outreach, and to supplement this analysis with third-party intent and firmographic data. We carry out this profiling on the basis of our legitimate interests or, where required, your consent, and it does not produce legal or similarly significant effects concerning you. You may object to this processing as described in Sections 6 and 9.

V. Disclosures to Third Parties

In the preceding 12 months, we have disclosed identifiers, commercial information, and internet activity to specific categories of third parties for business purposes. These recipients include Service Providers (and their Sub-Processors) who assist in our daily operations—such as cloud hosting, CRM platforms, and security vendors—under strict confidentiality obligations. We also engage Analytics Providers who help us optimize website performance and understand user engagement.

In addition to the service providers described above, we work with the following categories of third parties, which may receive personal information in ways that constitute “sharing” or a “sale” under U.S. privacy laws:

Advertising and Retargeting Partners: We share online identifiers and information about your activity on our website with advertising partners — including LinkedIn (LinkedIn Insight Tag) and StackAdapt — to deliver cross-context behavioral advertising and to match or build audiences across other platforms.

Data Enrichment Providers: We may disclose business-contact identifiers to data enrichment providers — such as Apollo — to verify and supplement professional and firmographic information about prospective business contacts. Depending on how this exchange is structured, it may constitute a “sale” of personal information under the CPRA.

Visitor-Identification Technologies: We use technologies that help us identify organizations and, in some cases, individuals who visit our website, so that we can understand interest in our products and conduct business-to-business outreach. Where these technologies reveal the identity of an individual, we treat the resulting information as personal information subject to this Policy.

VI. Sale and Sharing of Personal Information; Your Opt-Out Rights

NobleAI does not sell your personal information in exchange for money. However, because we use third-party advertising, retargeting, and audience-matching technologies, we "share" personal information—such as online identifiers and information about your activity on our website—for cross-context behavioral advertising, as those terms are defined under the CCPA as amended by the CPRA. In addition, certain disclosures of identifiers to data enrichment providers may constitute a "sale" of personal information. We do not knowingly sell or share the personal information of individuals under the age of 16.

You have the right to opt out of the sale and sharing of your personal information. To exercise this right, use the “Do Not Sell or Share My Personal Information” link or the cookie-preference tool available on our website. We also recognize and honor opt-out preference signals, including the Global Privacy Control (GPC): when you enable GPC, we treat it as a valid request to opt out of the sale and sharing of personal information for the browser or device from which the signal is sent, and our website will indicate that the signal has been honored. Where required, we will stop the associated advertising and enrichment technologies from operating once you opt out or send a GPC signal. EEA and UK residents may object to processing carried out on the basis of our legitimate interests and may withdraw any consent previously given.

VII. Cookies, Pixels, and Tracking Technologies

We and our partners use cookies, pixels, tags, software development kits, and similar tracking technologies to operate and secure our website, to remember your preferences, to measure and analyze traffic and engagement, and to deliver and measure advertising. These technologies fall into several general categories: strictly necessary cookies, which are required for the website to function; analytics and performance cookies, which help us understand how visitors use the site; and advertising and targeting cookies (including the LinkedIn Insight Tag and StackAdapt), which support the cross-context behavioral advertising and audience matching described in Sections 5 and 6.

Network and Device Identifiers (Pen Register / Trap-and-Trace Notice). Some of the technologies described above operate by collecting routing, addressing, or signaling information — such as your IP address, the approximate location derived from it, and identifiers associated with your browser or device — and transmitting that information to us or to our advertising, analytics, visitor-identification, and data-enrichment partners. We provide this notice, and obtain your consent as described below, in recognition of California’s pen register and trap-and-trace provisions (California Penal Code § 638.51) and similar laws. Strictly necessary technologies that use this information only to deliver and secure the website operate as part of providing the service you request.

Your Consent to These Technologies. We rely on your consent for the use of non-essential cookies and for any tracking technology that collects network or device identifiers for advertising, retargeting, audience-matching, visitor-identification, analytics, or data-enrichment purposes. We configure our website so that these technologies are not activated until you provide that consent through our cookie-consent tool, and we treat an opt-out preference signal, including the Global Privacy Control, as a withdrawal of that consent. You may review and change your choices at any time.

You can review and change your preferences at any time using the cookie-consent tool available on our website. The choices available to you depend on your location.

In the United States, we do not activate advertising, retargeting, audience-matching, visitor-identification, or data-enrichment technologies — or other technologies that collect network or device identifiers for those purposes — until you have consented through our cookie-consent tool. You may withdraw consent, opt out of the sale or sharing of your information, and opt out of non-essential cookies at any time through the consent tool or the “Do Not Sell or Share My Personal Information” link, and we honor the Global Privacy Control as described in Section 6. Strictly necessary cookies operate without consent.

In the European Economic Area and the United Kingdom, non-essential cookies and other tracking technologies are not placed until you provide affirmative, opt-in consent, and you may accept, reject, or customize them through the consent banner.

Where we rely on consent for marketing communications or for non-essential processing, we obtain that consent separately and do not treat the submission of a contact or web form, by itself, as consent to marketing or to the advertising and enrichment activities described in this Policy.

VIII. International Data Transfers

NobleAI is based in the United States, and the service providers, advertising partners, and data enrichment providers described in Section 5 may be located in the United States or other countries. This Section describes how we protect personal information when we, acting as a Controller, transfer it onward to those recipients; it does not create, and should not be read as, a transfer arrangement between you and NobleAI. Where personal information originating in the European Economic Area (EEA), the United Kingdom, or Switzerland is transferred onward to a recipient in a country that has not been recognized as providing an adequate level of protection, we rely on an appropriate safeguard—such as certification under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) or the European Commission’s Standard Contractual Clauses—so that the information continues to receive an essentially equivalent level of protection.

IX. Your Global Privacy Rights

Whether you are a resident of California or the European Economic Area, you possess the right to request access to the specific pieces of personal information we hold, the right to request the deletion of your data, and the right to correct inaccuracies. California residents also have the right to opt out of the sale and sharing of personal information, as described in Section 6. European residents additionally have the right to data portability, the right to object to processing based on legitimate interests, and the right to restrict processing in certain circumstances.

How to Exercise Your Rights. To exercise your rights, you may submit a request by emailing us at privacy@noble.ai or by submitting a request through our form. To protect your privacy, we will verify your identity by matching the information you provide in your request with the data we already maintain in our systems.

Authorized Agents. You may designate an authorized agent to submit a request on your behalf. We will require the agent to provide proof of your signed permission to act on your behalf, and we may also require you to verify your own identity directly with us.

X. Security and Data Retention

NobleAI implements industry-standard physical, technical, and administrative safeguards designed to protect your Personal Data from unauthorized access or disclosure. We retain each category of information only for as long as is reasonably necessary to fulfill the purposes for which it was collected, to resolve disputes, or to comply with our legal, tax, and reporting obligations. We may also retain information based on the criteria used to determine such retention periods.

XI. Contact Information and Complaints

For questions regarding this policy or to exercise your rights, please contact:

Noble Artificial Intelligence, Inc.

Attn: Privacy Department

2041 East St, PMB 412

Concord, CA 94520

Email: privacy@noble.ai

‍

If you are located in the EEA or UK, you also have the right to lodge a complaint with your local Data Protection Authority.

‍