Privacy Policy

NOAL AI DATA PRIVACY POLICY
Last Updated: March 9, 2026

NOAL AI, INC. ("NOAL AI," "we," "us," or "our") is committed to protecting the privacy and security of the data provided by our users. This Data Privacy Policy ("Policy") explains how we collect, use, disclose, and safeguard your information when you use our product suite at noal.ai.

1. DATA COLLECTION
   1.1 Subscriber-Provided Data. We collect data you explicitly provide, including:

• Account Information: Name, email, and company details for Team Management.
• Financial Assets: T12 statements, rent rolls, and loan documents uploaded for Portfolio Analysis.
• Payment Data: Credit card and billing information processed securely via Stripe.
  1.2 Automated Data Collection. We collect technical data, including IP addresses, browser types, and usage patterns (tokens consumed) to monitor performance and prevent unauthorized access.

2. USE OF DATA
   2.1 Service Provision. We use Subscriber Data to generate underwritings, proformas, and "Buy, Hold, or Sell" recommendations.
   2.2 AI Model Optimization.

• Your Data is Yours: We do not sell your raw financial data to third parties.
• Anonymized Aggregation: We may use de-identified, aggregated data to improve our machine learning models and provide submarket benchmarks.
  2.3 Communication. We use contact information to send onboarding materials and critical system alerts.

3. DATA SHARING & DISCLOSURE
   3.1 Authorized Users. Your data is shared within your designated team based on the roles you assign.
   3.2 Third-Party Processors. We share data with trusted sub-processors necessary for the service, including cloud infrastructure, payment processing, and dedicated LLM API providers.
   3.3 Legal Requirements. We may disclose information if required by law or in response to a valid subpoena from a court in Franklin County, Ohio.

4. DATA SECURITY
   4.1 Encryption. All data is encrypted at rest (AES-256) and in transit (TLS 1.2+).
   4.2 Access Control. We implement strict internal access controls to ensure NOAL AI employees only access Subscriber Data when necessary for technical support or as requested by the Subscriber.

5. DATA RETENTION & DELETION
   5.1 Active Subscription. We retain data as long as your account is active.
   5.2 Termination. Upon termination of your Agreement, you have 30 days to export your data. After 30 days, all Subscriber Data is programmatically purged from our production databases.
   5.3 Right to Deletion. Users may request the deletion of their personal account data at any time by contacting support@noal.ai.

6. OHIO PRIVACY RIGHTS
   Consistent with Ohio consumer protection standards, we provide transparency regarding our data practices. While Ohio does not currently have a comprehensive "CCPA-style" state law, we adhere to high standards of data stewardship to protect your corporate and personal information.

7. LIMITATION OF LIABILITY FOR UNCONTROLLABLE EVENTS (FORCE MAJEURE)
   7.1 Unconditional Protection. Notwithstanding any other provision in this Policy or the Terms of Service, NOAL AI, INC. shall not be held liable for any data breach, unauthorized access, loss, or corruption of Subscriber Data resulting from events beyond our reasonable control.
   7.2 Scope of Exempt Events. These events include terrorism, cyber-warfare, ransomware, zero-day exploits, governmental access mandates, natural disasters, and large-scale infrastructure or cloud outages.
   7.3 Assumption of Risk. By using the NOAL AI product suite, the Subscriber acknowledges that no digital environment is 100% secure and expressly waives claims for damages arising from the uncontrollable events listed above.