Legal
Privacy Policy
Last updated: October 19, 2026
This policy explains what personal data NOLGIA collects, why, who receives it, and your choices. Each section starts with a short summary; the full text is what counts.
- We use your data to run the Service for you. We do not sell it or train AI models on your content. Ad measurement with Meta and TikTok happens only with your permission.
- To make an Output, your prompt and reference files go to the company that runs the model.
- The face identity check runs only on photos you agree to. Face templates are never stored; only a match score is kept.
- Nothing you make is public unless you share it or enter a challenge.
- You can download or delete your content, and delete your account in Settings.
1. Who we are
In short: Nolgia Inc. runs NOLGIA and is responsible for your personal data.
Nolgia Inc., a Delaware corporation at 8549 Wilshire Blvd, Suite 1180, Beverly Hills, CA 90211, United States ("NOLGIA", "we"), operates nolgia.ai, NOLGIA Agent, Studio, Characters, the NOLGIA API, CLI and MCP server, and related services (the "Service"), and is the controller of the personal data described here. "Inputs" and "Outputs" mean what our Terms of Service say they mean.
If you use NOLGIA through an organization (a Team or Enterprise workspace), its admins can see the shared Library, members' credit use and a log of organization actions. Our Data Processing Addendum covers personal data we process on your organization's behalf.
2. What we collect
In short: Your account details, the content you create, your NOLGIA Agent's activity, billing records, and technical data such as IP addresses.
| Category | What it includes | Source |
|---|---|---|
| Account | Name, email address, profile picture, sign-in method, organization and role, and the language and country you signed in from. Passwords are stored only as a one-way hash. | You, Google, or your organization's single sign-on, and your browser |
| Your content | Prompts, uploads, reference images, video and audio, Characters (name, description, reference photos, optional voice clip and your consent to use it), projects, timelines and Outputs. | You |
| NOLGIA Agent | Your chats and attachments, voice messages, what the agent does for you and the results, files in its workspace, what it remembers, its settings and any credentials you give it, and your feedback on replies. | You and your agent |
| Face identity check | Only for photos you agree to: match scores, notes about the photos, and a record of your consent (see section 5). | You, and computed by us |
| Billing | Plan, invoices, credit balance and credit history. Card details are held by Stripe, not by us. | You and Stripe |
| Usage | Each generation's prompt, settings, model, cost and result, the app or tool that started it, and your access tokens and connected apps. | Your use of the Service |
| Messages | What you send us, and, if you join our newsletter, your email address, the language you read nolgia.ai in, when you agreed and a hashed form of your IP address, until you confirm with the link we email you. | You |
| Feedback | Bug reports, feature requests and replies you send us, and any screenshots or recordings you attach (location and camera data removed). With each report, the details the form lists: the page address with private links removed, app version, browser, operating system, screen size, plan, recent generation ids and recent errors. Your prompt only if you choose to include it. | You and your browser |
| Technical | IP address, browser and device type, pages visited, cookies (section 12) and usage analytics. | Your browser and our servers |
You need to give us account details to use the Service; everything else depends on what you choose to do.
3. How we use it
In short: To provide the Service, bill you, keep it safe, support you and improve it, and, with your permission, measure our ads. We do not sell your data or train AI models on your content.
| Purpose | Legal basis (EU and UK) |
|---|---|
| Provide the Service: accounts, sign-in, generations, NOLGIA Agent, Studio, the API and your Library | Contract |
| Billing, credits, refunds and tax records | Contract; legal obligation |
| The face identity check (section 5) | Your explicit consent |
| Service emails, such as password resets, invites and completion emails you turn on | Contract |
| Support | Contract; legitimate interests |
| Security, abuse and fraud prevention, enforcing our Terms, legal requests | Legitimate interests; legal obligation |
| Understanding and improving the product through analytics and aggregated usage | Consent in the EU and EEA, the UK and Switzerland; legitimate interests elsewhere |
| Product tips and offers by email: tips for getting started, reminders about your trial or your credits, what is new, and offers. At most one a day, and you can turn them off in Settings or with the link in any of them | Legitimate interests (our existing customers, about our own service) |
| Our newsletter: about once a month, what is new on NOLGIA. You join by ticking the box on our form and confirming the email we send you; every issue has a one-click unsubscribe link, and the switch is in Settings. We run the list ourselves and Resend delivers the email | Consent |
| Measuring our ads: telling Meta and TikTok which of their ads led to a sign-up, a trial, a first creation or a purchase (section 12) | Consent (the Advertising choice in Cookie settings) |
We write product emails in the language you use on NOLGIA and send them during the day where you are. To learn whether they help, we look at what happens in the app afterwards (for example, whether you made something), and we leave a small share of people out of each email to compare. Our emails contain no tracking pixels or tracked links.
Our legitimate interests are running a secure, reliable service and making it better. We do not sell your personal data or use your content to train AI models. The only personal data we share with advertising platforms is the ad measurement described in section 12, only while your Advertising choice allows it, and you can turn it off at any time in Cookie settings.
We do not make decisions with legal or similarly significant effects about you by automated means alone. If you think an action we took on your account was wrong, contact us and a person will review it.
4. How AI models process your content
In short: To make an Output, we send your prompt and reference files to the company that runs the model. Those companies have their own terms and safety filters.
When you generate something or talk to NOLGIA Agent, we send the model what it needs, such as your prompt or message and any reference files, using short-lived private links or the files themselves, and store the result in your Library. If a model's usual provider is unavailable, we may use another provider of the same model.
We never send your name or email address to a model provider. Some requests carry a random account ID that does not name you.
We also use models behind the scenes to help the Service work, for example to improve a prompt or to help your agent understand files and remember context. When your agent searches or browses the web, or speaks aloud, the websites, search service or speech service involved receive what they need to respond.
Providers run their own safety systems and may refuse a request or block a result.
We do not train AI models on your content. Some providers reserve rights, under their own terms, to use data they receive to improve their models. We opt out where a provider offers it, and our Subprocessors page marks those providers.
5. Face identity check (biometric notice)
In short: Only if you agree, we check that images and videos made with a reference photo look like the person in it. Face templates are never stored; only a match score is kept.
The face identity check helps make sure that images and videos made with a Character, or with a face reference photo, actually look like the person in the photo. It runs only on photos you have agreed to have checked:
- We ask once for each photo, when you add it to a Character or use it as a face reference. NOLGIA Agent cannot agree on your behalf.
- When you agree, we note how many faces the photo shows and whether one faces the camera, so we can tell you whether it will work well.
- When you then generate with that photo, we create a face template, a set of numbers describing a face, from the photo and from the result, and compare them. If they do not match closely enough, we generate once more and deliver the closer result.
- Face templates exist only for the duration of the comparison. They are never stored, logged or shared with anyone, and never used to identify who a person is. We keep only the match score and whether it passed, with the Output.
- The comparison runs on our own systems, not through an outside face recognition company.
- If you do not agree, the photo is still used as a reference for your generations, including by the model provider, but no face is detected or compared and nothing about the face is stored.
We keep a record of each consent: who gave it, when, for which photo and Character, and the wording agreed to. It is kept while the photo exists and deleted with the photo or your account.
You can withdraw your consent at any time, on the Characters page or through the API or CLI. From then on, no face processing happens for those photos. Scores already stored are deleted on the schedule below.
Retention and destruction: face templates are destroyed as soon as each comparison ends. Match scores and photo notes are deleted with the Output or photo they belong to (deleted items are erased when they leave the trash after 30 days) or with your account, and in any case three years after the photo or its Character was last used. We never sell, lease or trade face data.
Face templates can count as biometric data under laws such as the Illinois Biometric Information Privacy Act, Texas and Washington law, and the GDPR. When you agree to the check, you also confirm that you are the person in the photo or have their permission (see our Terms of Service).
7. What becomes public
In short: Nothing is public unless you share it or enter a challenge.
Your content stays private to you (and, for an organization Library, its members) unless you share it. We do not publish your work on our own.
A share link lets anyone with the link see that Output. The page shows the media, its title, part of the prompt, the model and any preset used, but not your name or email. Links expire, you can revoke them at any time, and they ask search engines not to index them.
A challenge entry is public to everyone, with the title and optional credit name you give it, and can appear in search results. You can withdraw it at any time.
8. When our team sees your content
In short: Authorized staff can view your content and agent chats only when needed.
Authorized NOLGIA staff can view account details, usage, content and NOLGIA Agent chats when needed to support you, investigate a problem, prevent abuse, handle a report, or comply with the law. We also read feedback you leave on agent replies to improve the agent, and the bug reports and ideas you send us, with their attachments, to fix and improve the Service. A feature request you choose to share appears on our Ideas board for other members to vote on, without your name or email address (an Insider is shown by their public handle).
9. International transfers
In short: We store your data in the United States. Some model providers process requests elsewhere.
We store your data in the United States. Some model providers process requests in other countries, including those shown on our Subprocessors page; a request goes to a provider only when you use its models. For transfers from the EU, UK or Switzerland we rely on the European Commission's Standard Contractual Clauses and their UK and Swiss equivalents, or another lawful mechanism.
10. How long we keep data
In short: Most data stays while your account is open. Deleted items go to the trash for 30 days. When you delete your account, your data is erased within 30 days, except anonymized records we keep for tax and accounting.
| Data | How long |
|---|---|
| Uploads and Outputs | Until you delete them. Deleted items stay in the trash for 30 days so you can restore them, then are erased, along with their share links. You can also delete an item permanently straight away. |
| Generation and credit history | While your account is open, as your billing history. After your account is deleted, we keep these records for tax and accounting with your prompts, references and other content removed. |
| NOLGIA Agent chats, workspace and memory | Until you delete them or ask your agent to forget them, or your account is deleted. Working copies of media are cleaned up once saved to your Library. |
| Face identity check | See section 5. |
| Feedback | While your account is open, so we can follow up on it. Deleted with your account, attachments included. |
| Email settings and product emails | Your email settings while your account is open. A record of which product emails we sent you and whether you came back afterwards, anonymized when your account is deleted. |
| Account | While your account is open. After it is deleted, we keep an anonymized record with your name, email address and picture removed. |
| Server logs | About 30 days. |
| Backups | Backups are kept for 7 days, so deleted data leaves them about a week after it is deleted. |
| Billing and tax records | As long as the law requires, even after your account is deleted. Our payment processor keeps invoices and payment records as tax records. |
Deleting your account. You can delete your account in Settings. When you do, you are signed out everywhere, your access tokens and connected apps stop working, your share links are revoked, your challenge entries are withdrawn, any paid subscription is cancelled, and your NOLGIA Agent is stopped. The account stays locked for 7 days; if you change your mind, email contact@nolgia.ai within that time and we can restore it.
After 7 days we permanently delete your Library and its files, Characters and consent records, projects and Studio work, NOLGIA Agent chats, memory and workspace, sign-in credentials, tokens and keys, and your saved payment details. Organizations you own on your own are closed. We keep only anonymized records we need for tax and accounting, such as generation and credit history with your name, email address, prompts and content removed. Deleted data leaves our backups and logs within 30 days of your request.
If you own an organization that still has other members, transfer ownership before deleting your account. Work you created in someone else's organization stays with that organization. If you subscribed to our newsletter, you are unsubscribed straight away and removed from the list.
11. Your rights and choices
In short: You can access, download, correct and delete your data. Email us for anything you cannot do in the app.
In the app you can download and delete your content and chats, revoke share links and tokens, turn off emails, and delete your account (section 10). For a copy of your data or a correction, email contact@nolgia.ai. We reply within 30 days (45 where US state law allows) and may need to confirm your identity.
EU, UK and similar laws give you the right to access, correct and delete your data, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time without affecting earlier use. You can complain to your local data protection authority.
California and other US states: you can ask what personal information we collect and why, and to access, correct or delete it, and we will not treat you differently for doing so. In the last 12 months we collected the categories in section 2 from the sources listed there, for the purposes in section 3, and disclosed them only to the recipients in section 6. We do not sell personal information. With your permission (the Advertising choice in Cookie settings) we share the ad measurement described in section 12 with Meta and TikTok, which some US state laws treat as sharing for cross-context behavioral advertising; turning Advertising off in Cookie settings opts you out, and we honor that choice wherever you are. We use sensitive information (sign-in credentials and face identity check data) only to provide the Service. You can use an authorized agent, and you can appeal a refused request by replying to our answer. If we contacted you about NOLGIA for your work, section 15 covers your information.
13. Security
In short: We protect your data with encryption and access controls. No system is perfectly secure.
Data is encrypted in transit and at rest, files are kept in private storage, passwords and access tokens are stored only in hashed form, and access to production systems is limited to authorized staff. No system is completely secure; if a breach affects your personal data, we will notify you and the authorities as the law requires.
14. Children
In short: NOLGIA is for adults only.
The Service is not for anyone under 18, and we do not knowingly collect children's personal data. If you believe a child has given us personal data, contact us and we will delete it.
15. Business contacts
In short: If you work at a company we think could use NOLGIA, we may collect your work contact details from public sources and Apollo.io and contact you about NOLGIA. You can opt out at any time. We never sell this information.
This section covers people we may contact about NOLGIA for their work, such as people at studios, agencies and production companies. We currently contact only people at companies in the United States. If you also have a NOLGIA account, the rest of this policy covers your account.
| Category | What it includes | Source |
|---|---|---|
| Identifiers | Your name, work email address, work phone number and LinkedIn profile address. | Public websites, Apollo.io, our founders' professional networks (their LinkedIn connections and their own notes), and you: when you reply, email our team, contact us through our website, or meet with us |
| Professional information | Your job title and role, the company you work for, its size and location, and public facts about your company's work, such as its projects, news, hiring and the tools it uses. | Public websites and Apollo.io |
| Our contact history | The emails we send you and your replies, emails you send our team, what you send through our contact form, notes from our calls and meetings (and, when note-taking is turned on in a meeting, its transcript or notes), and whether you asked us to stop. | Us and you |
We use this information only to decide whether NOLGIA could help your company, to contact you about it by email, phone or LinkedIn, to prepare for and follow up on our conversations, and to follow up if you reply. If you are in one of our founders' professional networks, we keep your name, company, title and how we know you only so that founder can ask you, personally, for an introduction; we never send you marketing because of it. Every email is checked against our rules before it is sent: a person at NOLGIA approves it, or, for routine emails, an automated review does, and emails to large companies or to anyone we are already talking with are always approved by a person. Our sales emails contain no tracking pixels or tracked links. We dial business numbers by hand; we do not use autodialers or prerecorded messages, and we do not send text messages.
Companies that help us with this: Apollo.io, which supplies and checks business contact details (we send it company names, web domains and the names of people we look up); Google Workspace, which sends and receives our email and hosts our calendars and meeting notes; and Google Cloud, which hosts our systems and runs reCAPTCHA, a spam and bot check on our contact and sign-up forms. They may use the information only to provide their service to us. We research companies, draft emails and summarize our conversations with AI models running on private servers that one of our co-founders operates for NOLGIA; no outside AI company receives this information. That model also reads, read-only, the business emails people send our founders so we can keep track of our conversations; it skips personal messages, and we do not store them.
| Situation | How long |
|---|---|
| We have not contacted you | Deleted 180 days after we add it. |
| We contacted you and you did not reply | Deleted 12 months after our last contact. |
| You replied, contacted us or met with us | Deleted 24 months after our last conversation, unless your company becomes a customer. |
| Your company becomes a customer | Kept while it is a customer and for 24 months after. |
| Public facts about your company | Deleted after 24 months. |
| Your request to stop | Kept so we never contact you again. If you ask us to delete your information, we keep only a one-way hash of your email address for this. |
Every sales email comes from a named person at NOLGIA and includes our postal address. To stop hearing from us, reply to any of our emails ("no thanks" is enough) or email contact@nolgia.ai. We stop as soon as we receive your request, and we will not contact you again.
California and other US state laws give you the right to know what personal information we have about you and where it came from, to get a copy, to correct it, and to have it deleted. Email contact@nolgia.ai or write to Nolgia Inc., Attn: Privacy, 8549 Wilshire Blvd, Suite 1180, Beverly Hills, CA 90211, United States. We reply within 45 days and may need to confirm that the request comes from you. In the last 12 months we collected the categories in the table above from the sources listed there, used them for the purposes above, and disclosed them only to the companies above. We do not sell this information or share it for cross-context behavioral advertising, we collect no sensitive personal information about business contacts, and we will not treat you differently for using your rights.
16. Changes to this policy
In short: We will tell you before material changes take effect.
We post each new version here with its date and list it in the change history below. For material changes we tell you in the app or by email before they take effect.
17. Contact us
Privacy questions, requests or complaints: email contact@nolgia.ai, use our contact page, or write to Nolgia Inc., Attn: Privacy, 8549 Wilshire Blvd, Suite 1180, Beverly Hills, CA 90211, United States.
Change history
- October 19, 2026: Added ad measurement with your permission (section 12): Meta's and TikTok's pixels and server-side conversions, what we send and the cookies they set, the Advertising choice in Cookie settings, Google signals demographics in Google Analytics, and the campaign attribution cookie. Our newsletter now runs on our own system with a confirmation email (double opt-in) instead of Kit: what we keep about a subscription, and how to unsubscribe. Kit left the subprocessor list.
- October 17, 2026: Added product tips and offers by email: what we send, the language and country we keep to send it at a sensible time, how we measure it without tracking pixels, and how to turn it off.
- October 13, 2026: Business contacts (section 15): added our founders' professional networks (used only for personal introductions), emails you send our team, our contact form and meeting notes or transcripts as sources; how we check emails before sending; reCAPTCHA spam checks on our forms; and how to opt out by replying.
- October 9, 2026: Added business contacts (section 15): the work details we collect about people we may contact about NOLGIA, where they come from, who helps us, how long we keep them, how to opt out, and your rights.
- October 8, 2026: Added the feedback you send us: bug reports, feature requests, attachments, the diagnostic details captured with them, and the Ideas board.
- September 23, 2026: Rewritten to cover NOLGIA Agent, Characters and the face identity check, all sign-in methods, analytics, model providers and the new Subprocessors page, public sharing, retention and your rights.
- July 1, 2026: First version.