Noderama · Legal
Privacy Notice
What information we use, why we use it, and the choices available to you.
1. Who is responsible for your information
All Angles Ltd operates Noderama. Contact info@noderama.ai for privacy questions or to exercise your rights. We are the controller for account administration, our customer relationship, service security and our own legal records.
For personal information an organisation places in its projects, that organisation generally decides why it is used and who can access it. We process that information to provide the workspace on its instructions. Contact your workspace owner about their policies; we can help identify or route the appropriate request. This notice does not replace an organisation’s own privacy notice or a required data-processing agreement.
2. Information we receive
Account information includes your email address, display name, organisation details, profile information and optional profile image. We record the terms version you accept and when that acceptance is received.
Workspace information includes projects, nodes, descriptions, task notes, dates, assignments, connections, groups, budgets, comments, uploaded images, audio and video, and other material you choose to add. Collaboration features also process membership, permissions, recent activity and presence information.
We receive subscription, plan, seat and transaction identifiers and billing status from Stripe. Stripe collects payment details through its checkout; Noderama does not receive your full payment-card number.
Technical information can include IP addresses, browser and device details, authentication events, request logs and usage counts needed to operate and protect the service. If you contact support, we receive your message and any attachments. Other members may provide your email for an invitation, assign work to you or include information about you in a project.
3. Why we use information
We use account and service information to perform our contract with you: sign you in, store and synchronise projects, provide collaboration and requested AI functions, administer plans and respond to support requests. Where an organisation is our customer, we also have a legitimate interest in administering its users and providing the service to them.
We rely on legitimate interests to protect accounts, prevent abuse, investigate faults and maintain a reliable service, taking your rights into account. We keep information needed to meet legal obligations, such as applicable accounting duties and responding to lawful requests. Where we rely on consent for an optional activity, we ask separately and you can withdraw it.
Account credentials are needed to create and secure an account. Billing details are needed for a paid purchase. Other information, such as a profile picture, is optional. Accepting the Terms of Service is not consent to marketing. We do not sell your personal information.
4. Who receives information
People with access to your workspace or project can see information according to their permissions. Owners and administrators manage those permissions. Check before sharing confidential or personal information.
We use Supabase for authentication, database and file storage; Vercel for application hosting and delivery; OpenAI for requested Nodi AI functions; Resend for invitation email delivery; and Stripe for billing and Managed Payments. Each receives information necessary for the function it performs. Stripe also processes purchase information under its own privacy notice and legal responsibilities.
We may share information with professional advisers or authorities where necessary to comply with law, protect rights or resolve disputes. We do not give every provider access to every project simply because you have an account.
5. What happens when you use Nodi
Browsing the built-in help guide does not require an AI request. Paid AI functions send your prompt and relevant conversation to OpenAI. Editing a graph also sends the project context needed to understand the requested change, which may include node titles, descriptions, groups, connections and dates. Research can generate search queries and retrieve public web sources.
Noderama requests store:false for its OpenAI Responses API calls. This does not mean that every provider security or abuse-monitoring record is immediately deleted. Provider retention rules still apply. Do not include confidential or sensitive information unless it is necessary and you are authorised to send it.
Nodi provides suggestions for you to review. We do not use it to make solely automated decisions about you with legal or similarly significant effects. We keep usage and credit records to administer AI allowances.
6. Storage, transfers and retention
Information is processed using cloud providers and may be processed outside the UK, including in the United States. Our providers’ published data-processing terms describe safeguards for restricted transfers, including Standard Contractual Clauses and applicable UK addenda. Contact info@noderama.ai for the arrangements relevant to your data and copies of available transfer documentation. This notice is not a promise that all data stays in the UK.
We keep active account and workspace data for as long as needed to provide the service. When deciding what to retain after closure or deletion, we consider whether it is still needed by an authorised shared workspace, to fulfil a legal duty, resolve a dispute, investigate abuse or complete a backup-retention cycle. We do not promise immediate deletion from every backup.
Subscription cancellation alone does not delete your account or project data. For an account or data-deletion request, email info@noderama.ai. We will assess what can be deleted and explain any reason some records must remain. Exported files and copies held by other authorised people are outside our direct control.
8. Your rights and choices
Depending on the law that applies and the reason for processing, you may request access, correction, deletion, restriction or a portable copy of your personal information. You may withdraw consent for processing based on consent without affecting its earlier lawfulness.
Your right to object: you may object to processing based on legitimate interests, and to direct marketing. Contact info@noderama.ai. We may need to verify your identity before responding, and will explain any lawful exception that applies.
You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, or the relevant data-protection authority where you live. You do not have to contact us first, although we welcome the opportunity to resolve a concern.
9. Changes to this notice
We will update this notice when our handling of information changes and communicate significant changes as appropriate. The version and date appear at the top. Contact info@noderama.ai if you need a copy or an explanation.