Privacy Policy

Effective Date: August 10, 2025
Last Updated: October 10, 2026

Noverload ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service. It is designed to comply with applicable privacy laws including GDPR and CCPA.

1. Scope

This Privacy Policy applies to:

  • The Noverload web application at https://noverload.com
  • The Noverload Chrome extension
  • Any related services and APIs

By using Noverload, you acknowledge that you have read and understood this Policy.

2. Who We Are

Noverload is an AI-powered knowledge management tool that transforms your saved content into actionable insights. We help you save and understand content from YouTube, X (Twitter), Reddit, articles, and PDFs.

🔒 You own your data. Full stop.

We do not sell your data, use it for advertising, or train AI models on your personal content.

Data Controller:
Noverload
Email: contact@noverload.com
Website: https://noverload.com

3. Information We Collect

Account Information

  • Email address (for authentication and communication)
  • Authentication credentials (managed by Supabase Auth)
  • Account preferences and settings

Content You Save

  • URLs and titles of saved content
  • Extracted text from articles and web pages
  • YouTube video transcripts
  • X (Twitter) posts and Reddit threads
  • AI-generated summaries and insights
  • Tags and organizational data

Usage Data

  • Goals you create and track
  • Action items and completion status
  • Feature interactions and usage patterns
  • Chat conversations with your content

Technical Information

  • Browser type and version
  • Device and operating system
  • IP address (for security purposes)

Payment Information

Payments are processed by Stripe. We do not store credit card numbers or banking details directly.

4. Chrome Extension

Our Chrome extension ("Noverload - Save & Extract") has specific data handling practices:

Data Processed Locally

  • Page content extracted using Mozilla Readability (runs in your browser)
  • Page URL and title detection
  • YouTube transcript extraction

Data Stored in Browser

  • Authentication token (in browser.storage.local)
  • User preferences

Data Sent to Our Servers

  • Extracted text content (not raw HTML)
  • URLs and titles of pages you save
  • YouTube transcripts when you save a video

Extension Permissions

activeTabExtract content from the current page when you click save
storageStore your authentication token securely
contextMenusProvide right-click "Save to Noverload" option
notificationsShow confirmation when content is saved
scriptingRun content extraction on web pages

The extension only activates when you explicitly save content. It does not run in the background or track your browsing.

5. How We Use Your Information

  • Service Delivery: Provide, maintain, and improve our content management service
  • AI Processing: Generate summaries, insights, and actionable tasks from your saved content
  • Search & Discovery: Enable semantic search across your saved content
  • Account Management: Manage your account, usage, and preferences
  • Communication: Send service updates, security alerts, and support messages
  • Security: Detect and prevent fraud, abuse, and unauthorized access

6. AI Processing & Content Privacy

  • Processing: Your content is processed by AI to extract summaries, key insights, and tags
  • No Training: We never use your personal content to train AI models
  • Data Minimization: We only extract what's necessary to provide insights
  • User Control: You can delete any content and its associated data at any time

7. Legal Basis for Processing

  • Contract Performance: To provide the services you've requested
  • Legitimate Interests: To improve our services and ensure security
  • Consent: For analytics cookies (EU/EEA/UK/Switzerland visitors), optional features, and marketing communications
  • Legal Obligations: To comply with applicable laws

8. Data Storage & Security

  • Database: Supabase (PostgreSQL) with encryption at rest
  • Transmission: HTTPS/TLS encryption for all data in transit
  • Authentication: Supabase Auth with secure token management
  • Access Control: Row Level Security (RLS) ensures you can only access your own data

Transparency Note

Your content data is protected by infrastructure-level encryption and access controls, but is not end-to-end encrypted. We recommend not saving highly sensitive or confidential information.

9. Third-Party Services

ServicePurpose
SupabaseDatabase, authentication, and file storage
Claude (Anthropic) and OpenAIAI processing for summaries and insights
StripePayment processing
VercelWeb application hosting
Google (Gemini API)AI processing for large documents
RailwayContent extraction worker
Supadata and FirecrawlFetching transcripts and articles from the URLs you save
ResendAccount and product emails, and marketing emails if you opt in
UpstashRate limiting and caching
Cloudflare TurnstileBot protection on signup and the try-it form
PostHogProduct analytics and error tracking (US-hosted; no session recordings)

All third-party providers are bound by data processing agreements.

10. International Data Transfers

Noverload is based in the United States, and our service providers process data in the United States. If you are in the EU/EEA, the UK or Switzerland, your data is transferred to the US under one of these safeguards:

  • EU-U.S. Data Privacy Framework (and its UK Extension and the Swiss-U.S. Data Privacy Framework) for providers certified under it. Our analytics provider, PostHog, is certified.
  • Standard Contractual Clauses approved by the European Commission (with the UK Addendum where relevant), included in our data processing agreements, for providers that are not certified.

Contact us for a copy of the relevant safeguards.

11. Data Retention

Data TypeRetention Period
Account dataWhile your account is active
Saved contentUntil you delete it or close your account
AI-generated insightsUntil you delete the associated content
Technical logsUp to 90 days
Deleted dataRemoved within 30 days

12. Your Privacy Rights

Depending on your location, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data
  • Portability: Export your data in JSON format from Settings → Privacy
  • Restriction: Limit how we process your data
  • Objection: Object to certain processing
  • Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us at contact@noverload.com. We will respond within 30 days.

13. Marketing Communications

We only send marketing emails (product updates, tips and offers) if you opt in, by ticking the box when you sign up or unlock a try-it analysis, or by turning on Product Updates in your settings. You can withdraw at any time:

  • Through your account notification settings
  • By clicking unsubscribe in any marketing email
  • By contacting us at contact@noverload.com

Essential service communications (security alerts, account notifications) cannot be opted out of.

14. Cookies

We use essential cookies to:

  • Maintain your session and authentication
  • Remember your preferences and cookie choice
  • Ensure security and prevent fraud

With your consent (or, outside the EU/EEA/UK/Switzerland, unless you opt out), we also use PostHog analytics cookies and a first-touch attribution cookie to understand feature usage and where signups come from. We do not use advertising cookies or session recordings. See our Cookie Policy for the full list and to change your choice.

15. Children's Privacy

Noverload is not intended for children under 13 (or 16 in the EU). We do not knowingly collect information from children. If we discover such data, we will delete it immediately.

16. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. We will notify you of material changes via email or through the service. The latest version will always be dated at the top.

17. Contact Us

If you have questions or wish to exercise your privacy rights:

Privacy Inquiries
Noverload
Email: contact@noverload.com
Website: https://noverload.com

You may also file a complaint with your local data protection authority if you believe your rights have been violated.