Privacy Policy
Last updated: March 2026
Noah is designed to help you with tech problems. We take your privacy seriously and want to explain, in plain language, what information we collect and how we use it.
Key points
- •Screen images are processed in real time and never stored or recorded
- •We never sell your data or use your email for marketing
- •Payments are handled entirely by Stripe — we never see your card details
- •Screen content is sent to AI providers (OpenAI, Google, Anthropic) for real-time processing, then immediately discarded
- •You can export or delete all your data at any time
Data controller
G.U.M. Labs, micro-entreprise, SIRET 99519162400015, Sartrouville, France. For any privacy-related questions, contact us at: contact@noah-support.com.
What we collect
Screen images
When you share your screen, Noah sees a live image of what's on your screen. These images are processed instantly by our AI to give you help, and are not stored or recorded. Once the session ends, they're gone.
Device identifier
We create an identifier based on your browser settings (screen size, language, graphics capabilities). This may be stable across regular and private browsing sessions. Under GDPR, this is considered personal data. It helps us remember your session if you get disconnected and prevents abuse of the free trial.
Email (optional)
If you choose to share your email, we use it only to send you session-related messages: a reconnection link if you get disconnected, a session summary after your visit, or a reboot resume link. We never use your email for marketing.
Payment information
Payments are processed by Stripe. We never see or store your credit card number. We only receive confirmation that payment was successful.
Legal basis for processing
Under GDPR, we process your data based on the following legal grounds:
| Processing activity | Legal basis |
|---|---|
| Session delivery | Contract performance (Art. 6(1)(b)) |
| Payment processing | Contract performance (Art. 6(1)(b)) |
| Device fingerprinting | Legitimate interest — fraud and abuse prevention (Art. 6(1)(f)) |
| Email communications | Consent (Art. 6(1)(a)) |
| Analytics (PostHog) | Consent (Art. 6(1)(a)) |
| Advertising measurement (Bing) | Consent (Art. 6(1)(a)) |
How we use your data
- •To provide you with live tech support during your session
- •To reconnect you if your session is interrupted
- •To send you a session summary (if you gave us your email)
- •To prevent abuse of the free trial
What we never do
- ×We never store recordings of your screen
- ×We never sell or share your data with advertisers
- ×We never use your email for marketing messages
- ×We never ask for your passwords or personal information
Sub-processors
We use the following service providers to operate Noah:
- •OpenAI (USA) — voice transcription and text-to-speech
- •Google Gemini (USA) — AI vision and chat
- •Anthropic Claude (USA) — AI vision and chat
- •Stripe (USA) — payment processing
- •PostHog (EU) — usage analytics (with consent)
- •Firebase / Google Cloud Platform (EU) — data storage
- •SendGrid (USA) — email delivery
- •Microsoft / Bing (USA) — advertising measurement (with consent)
International data transfers
Some of our sub-processors are based in the United States. When your data is transferred outside the EU/EEA, it is protected by Standard Contractual Clauses (SCCs) and/or the EU-US Data Privacy Framework (DPF), as applicable.
AI processing of screen content
When you share your screen, images are sent in real time to third-party AI providers (OpenAI, Google Gemini, and/or Anthropic Claude) for analysis. These providers process the images to generate guidance for you. The images are not stored by Noah, and per our data processing agreements with these providers, they are not retained beyond the time needed to generate a response. By using Noah with screen sharing, you acknowledge and consent to this processing. Each provider's data handling policies also apply.
Data retention
We keep your data only as long as necessary:
- •Screen images: not stored — processed in real time and discarded
- •Chat messages: 90 days, then automatically deleted
- •Device fingerprint: 1 year
- •Email address: until you unsubscribe or request deletion
- •Payment records: 7 years (legal obligation)
- •Analytics data: 12 months
- •Consent records: 3 years (proof of consent)
- •Voice recordings: not stored — transcribed in real time and discarded
Cookies
We use a small number of cookies to remember your language preference and whether you've accepted this policy. We also use PostHog for anonymous usage analytics to improve the service. No advertising cookies are used.
Automated decision-making
We use automated processing to determine free trial eligibility based on your device fingerprint and email. If your trial is denied, you may contact us to contest this decision and request manual review.
Your rights (GDPR)
If you're in the European Union, you have the right to:
- •Access the data we have about you
- •Ask us to delete your data
- •Withdraw consent for email communications at any time
- •File a complaint with your local data protection authority
Manage your data
You can exercise your rights at any time:
Manage my dataData breach notification
In the event of a personal data breach, we will notify the French data protection authority (CNIL) within 72 hours. If the breach poses a high risk to your rights, we will also notify you directly.
Children's data
Noah is not intended for use by anyone under 18 years of age (or under 16, as applicable under GDPR). We do not knowingly collect personal data from children. If you believe a child has used Noah, please contact us and we will promptly delete their data.
Contact us
If you have questions about your privacy, please reach out to us through the Noah website.