Privacy Policy

Effective date: March 28, 2026

Overview

Nolly ("we", "us", "our") operates getnolly.com and the Nolly application. This policy explains what data we collect, how we use it, and your rights regarding that data.

What We Collect

  • Account information. Your name, email address, and organization details when you sign up.
  • Uploaded content. Documents, audio files, and other materials you upload to your knowledge base.
  • Usage data. Pages visited, searches performed, and feature interactions. We use this to improve the product.
  • Google Drive data. If you connect Google Drive, we access files read-only and only import files you explicitly select. We do not scan or index your entire Drive.

How We Use Your Data

  • Providing and maintaining the Nolly service, including search and AI-powered responses.
  • Improving search quality and relevance based on how your organization uses the platform.
  • Generating AI responses from your uploaded knowledge base content.
  • Sending transactional emails related to your account.

Third-Party Services

We use the following third-party services:

  • Google OAuth. For authentication and optional Google Drive integration.
  • Supabase. Database hosting and authentication infrastructure.
  • UploadThing. File upload and storage.
  • Groq. AI processing for search, summaries, and responses.

Each of these services has its own privacy policy. We only share the minimum data required for each service to function.

Data Storage and Security

Your data is stored in secure, managed infrastructure. We use row-level security on our database so organizations can only access their own data. Authentication tokens are encrypted. We use HTTPS for all data in transit.

We take reasonable measures to protect your data, but no system is 100% secure. If we become aware of a breach affecting your data, we will notify you promptly.

Google Drive Integration

Google Drive access is entirely optional and user-initiated. When you connect your Drive, we request read-only access. We only import the specific files you select. We do not store your Google credentials directly. You can revoke Nolly's access to your Google Drive at any time through your Google account settings.

Your Rights

You have the right to:

  • Access the data we hold about you and your organization.
  • Delete your account and all associated data.
  • Export your uploaded content from the platform.
  • Revoke third-party integrations like Google Drive at any time.

To exercise any of these rights, contact us at nolly@getnolly.com.

Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify you by email or through the application. Continued use of Nolly after changes take effect means you accept the updated policy.

Contact

Questions about this policy? Reach us at nolly@getnolly.com.