Introduction and Governing Terms
This Privacy Policy Agreement ("Privacy Policy") establishes the privacy practices and commitments between you and Notte Labs, Inc., a Delaware corporation ("Notte," "we," "us," or "our"). This document comprehensively describes how we collect, use, disclose, and protect your personal information when you access or utilize https://www.notte.cc, including any content, functionality, and services offered through https://console.notte.cc (collectively, the "Platform"), along with any additional platforms or portals necessary to operate the software and products provided by Notte. Your use of our Platform is governed by our Terms of Use, which fully incorporates this Privacy Policy by reference. All capitalized terms not specifically defined within this Privacy Policy carry the meanings assigned to them in our Terms of Use.
We maintain the right to modify this Privacy Policy at our discretion to reflect evolving practices or legal requirements. We will provide notice of significant changes through Platform notifications, email communications, or other reasonable methods. Your continued use of the Platform following any modifications indicates your acceptance of the revised Privacy Policy.
Information Collection and Categories
We collect various types of information to deliver and enhance our Services. When you interact with our Platform, we collect information that you voluntarily provide, including account registration details such as your name and email address, contact information when you communicate with our support team, payment information including financial account details and billing addresses, and user content that you submit, upload, or generate through Platform usage. Additionally, we automatically gather technical and usage information during your Platform interactions, including device information such as IP addresses, browser types, operating systems, and device identifiers, usage patterns covering pages visited, features utilized, and time spent on the Platform, and location data derived from your IP address or precise location if you enable location services. We may also receive information about you from third-party sources, including data from third-party services when you connect your account through those platforms, and information from service providers who assist us in delivering our services.
Information Utilization and Business Purposes
We utilize collected information for multiple business objectives. For service provision and operation, we create and maintain user accounts and profiles, process transactions and fulfill service requests, provide customer support and respond to inquiries, customize and personalize user experiences, and ensure technical functionality and platform security. Regarding business improvement and development, we analyze usage patterns to enhance our services and develop new features, conduct research and testing to improve user experience, monitor and prevent fraudulent activities and security breaches, and perform debugging and technical troubleshooting. For communication and marketing purposes, we send important service information including policy changes, market our services in accordance with user preferences, and communicate about support requests and service updates. Finally, for legal compliance and protection, we fulfill legal obligations and respond to lawful requests, protect rights, property, and safety for our organization, users, and the public, and enforce our agreements and policies.
Information Sharing and Disclosure Practices
We may share your information under specific circumstances. We engage third-party service providers to perform essential business functions, including infrastructure providers for hosting, storage, and content delivery network services, analytics providers to help understand Platform usage patterns, payment processors to handle financial transactions, customer support vendors to assist with service operations, and security providers to protect our Platform from malicious activity. We disclose information when required by legal obligations, such as responding to subpoenas, court orders, or other legal processes, complying with applicable laws, regulations, or governmental requests, and protecting against legal liability. In business transfer scenarios, we may transfer information during mergers, company asset sales, financing arrangements, or business acquisitions. We also share information with third parties when we have obtained explicit user consent for such disclosure.
AI and Automated Services Data Processing
Our Platform provides AI-assisted browser automation, web agents, and API services (including the Anything API and Agent Vaults) that process data on your behalf. When you use these services, the following data processing occurs:
Browser Session Data.When you run automated browser sessions, Notte processes the web pages your agent visits, including page content, URLs, screenshots, and interaction logs. This data is used solely to execute your requested automation and to provide session replay functionality. Session data is retained according to your plan's retention period and is then deleted.
AI Transparency (EU AI Act)
In accordance with the European Union Artificial Intelligence Act (Regulation (EU) 2024/1689), we provide the following transparency disclosures:
System Classification.Notte's browser automation and AI agent services are general-purpose automation tools and are not classified as high-risk AI systems under the EU AI Act. They do not fall within the categories listed in Annex III of the regulation.
How AI Is Used. The Platform uses AI models to interpret natural language instructions, navigate web pages, extract structured data, and perform automated browser interactions. AI operates as a tool executing tasks you define. It does not autonomously determine objectives or take actions outside your instructions.
Human Oversight. You maintain full control over what automated agents do on your behalf. You define the tasks, provide the instructions, and can terminate any session at any time. Notte does not deploy autonomous AI systems that act without user initiation.
Data Security, Retention, and Protection Measures
We implement comprehensive technical and organizational security measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These protective measures include encryption protocols, access control systems, secure network architecture, and regular security assessments. While we maintain robust security practices, we acknowledge that no method of internet transmission or electronic storage provides absolute security, and we cannot guarantee complete information protection. Users contribute to security protection by maintaining account credential confidentiality and promptly reporting unauthorized account access.
We retain personal information for durations necessary to fulfill collection purposes, including service provision, legal compliance, dispute resolution, and agreement enforcement. Our retention periods consider multiple factors: the time required to maintain service delivery, specific legal and regulatory retention mandates, information sensitivity and potential unauthorized use risks, and legitimate business purpose necessities. When information no longer requires retention, we securely delete or anonymize the data.
Cookies, Tracking, and User Rights
Our Platform employs cookies and similar tracking technologies to enhance user experience and analyze Platform usage. We utilize essential cookies required for basic Platform functionality such as maintaining login sessions, performance cookies that help understand visitor interactions, functional cookies that remember user preferences and settings, and analytics cookies that allow traffic and usage pattern analysis. For users in the European Economic Area and United Kingdom, analytics and non-essential cookies are not loaded until you provide explicit consent. On the Console, consent is obtained through acceptance of our Terms of Service during account registration. On our marketing website, a cookie consent banner is presented before any analytics cookies are set. Most web browsers also permit cookie control through settings preferences, allowing users to refuse cookies or receive cookie transmission notifications. However, disabling cookies may impair certain Platform features, and we currently do not respond to "Do Not Track" signals due to lacking industry standards.
Depending on user jurisdiction, certain personal information rights may apply. Users may access and update certain personal information through account settings and request access to held personal information. Data portability rights allow users to request personal information copies in structured, commonly used formats. Deletion rights permit users to request personal information removal, subject to legal exceptions. Marketing communication preferences allow users to opt-out of marketing communications through unsubscribe instructions. California residents may exercise additional rights under the California Consumer Privacy Act, including information collection knowledge, deletion rights, and personal information sale opt-out rights. Nevada residents may opt-out of certain personal information sales, though we currently do not sell personal information under Nevada law definitions.
Additional Provisions and Contact Information
Our Platform does not target children under 13 years, and we do not knowingly collect personal information from this age group. If you are under 13, refrain from using or providing information on our Platform. Upon discovering personal information collection from children under 13 without verified parental consent, we will delete such information. Suspected child information collection should be reported to support@notte.cc.
As a United States-based company, we primarily process information within the U.S. International users accessing our Platform from outside the United States should understand that their information may transfer to, store in, and process within the United States, where our servers and central database operate. Platform usage constitutes understanding and consent to information transfer to the United States and other jurisdictions potentially having different data protection standards than users' home countries.
For questions, concerns, or requests regarding this Privacy Policy or our privacy practices, contact us at support@notte.cc, through our website https://www.notte.cc, or via our company address. We respond to inquiries and requests within reasonable timeframes according to applicable laws. We may update this Privacy Policy periodically, with the "Last Updated" date indicating the latest revisions. We encourage regular Privacy Policy reviews to maintain awareness of our information practices. Continued Platform use following changes constitutes acceptance of revised terms.