Legal

Privacy Policy

Effective July 2026

1. Scope

This Privacy Policy explains how Noetra, a Nevada company (“Noetra,” “we,” or “us”), collects, uses, discloses, and protects personal information through its web application, Android application distributed through Google Play or APK, forthcoming iOS/TestFlight application, and related sales-coaching services (collectively, the “Service”).

2. Dealership recordings and our role

Recordings may include the voices and personal information of people who are not Noetra users, including a dealership’s customers. For this information, the dealership or other subscribing customer determines why and how it is processed and is the controller or business; Noetra processes it on the customer’s behalf as its processor or service provider. The customer is responsible for providing required notices, establishing a lawful basis, and obtaining recording consent. People appearing in a customer recording should direct privacy requests to that customer; we will assist the customer as appropriate.

3. Information we collect

Account and organization data

  • Name, email address, organization, role, team assignment, login credentials, and account settings.

Recordings and derived content

  • Audio recordings uploaded or created by customer representatives.
  • Transcripts, speaker information, summaries, AI coaching outputs, feedback, and scores.

Usage and technical data

  • Features used, recording timestamps and duration, interactions, log data, browser or device type, IP address, and diagnostic information.
  • Mobile device identifiers and Expo or platform push-notification tokens when notifications are enabled.

Billing data

  • Billing contact, plan, seat count, transaction status, and limited payment metadata. Stripe handles payment-card information; Noetra does not store full card numbers.

We also receive information directly from customers and users, automatically from the Service, and from service providers acting for us.

4. How we use information

  • Operate accounts and provide recording, transcription, coaching, analytics, and mobile notifications.
  • Authenticate users, administer seats, process subscriptions, and provide support.
  • Maintain security, prevent fraud and abuse, troubleshoot, and enforce our Terms.
  • Communicate about transactions, updates, and the Service.
  • Comply with law and protect rights, safety, and property.
  • Analyze and improve the Service using aggregated or de-identified information that does not reasonably identify an individual or customer.

5. Service providers and subprocessors

We disclose information to vendors that process it for the business purposes described above, subject to contractual protections where appropriate:

Deepgram

Audio transcription and related speech processing.

OpenAI

AI coaching analysis and generation from transcripts or related content.

DigitalOcean

Application hosting, infrastructure, and storage.

Stripe

Payments, subscription management, and billing.

Expo

Mobile application services and push-notification delivery.

We may also disclose information when required by law, in connection with a merger, financing, acquisition, or sale of assets subject to appropriate safeguards, or with the customer’s or individual’s direction. We do not sell personal information or share it for cross-context behavioral advertising.

6. Data retention and deletion

Recordings and transcripts are retained while the customer account is active or until the customer deletes them. After account closure, we delete recordings, transcripts, and associated customer content within a reasonable period, subject to backup cycles, legal obligations, dispute resolution, security needs, and records we must retain. Other personal information is kept only as long as reasonably necessary for the purpose collected, including account, transaction, legal, and security requirements. Customers can delete supported content in the Service or contact us for assistance.

7. Security

We use administrative, technical, and organizational safeguards designed to protect information, including encryption in transit using TLS/HTTPS, access controls, restricted production access, credential hashing, and organization-level access boundaries. No system is completely secure, and we cannot guarantee absolute security.

8. California privacy rights (CCPA/CPRA)

Subject to applicable exceptions and verification, California residents may request access to the categories and specific pieces of personal information we hold, deletion, and correction of inaccurate personal information. They may also request information about collection, use, and disclosure. Noetra does not sell personal information or share it for cross-context behavioral advertising, so there is no need to opt out of those practices. We will not discriminate against anyone for exercising applicable rights.

To submit a request, email [email protected]. Authorized agents may submit requests with proof of authority. Where Noetra processes information for a dealership or other customer, we may direct the request to that customer and assist it in responding.

9. Other choices and rights

Depending on location, individuals may have additional rights concerning access, correction, deletion, portability, restriction, or objection. Account holders may update certain details in the Service and may disable push notifications through device settings. We may need to verify a request and may deny it where permitted by law.

10. Children

The Service is a business product and is not directed to children under 16. We do not knowingly collect personal information directly from children under 16. If you believe a child provided information to us, contact us so we can take appropriate action.

11. Changes to this Policy

We may update this Policy as the Service or law changes. We will post the revised Policy with a new effective date and provide additional notice of material changes when appropriate.

12. Contact

For privacy questions or requests, contact Noetra at [email protected].