Privacy policy
Last updated: Nov 8, 2026
Naoday Ltd. ("we", "us" or "our") respects your privacy and we are committed to protecting it through our compliance with this Privacy Policy. This document informs you of our policies regarding the collection, use and disclosure of personal data and the choices you have associated with that information.
This Privacy Policy applies to all personal data collected through any written, electronic, or oral communications, as you access the website located at https://naoday.com, https://naoday.ai and all corresponding webpages that link to this Privacy Policy (the "Site") and utilize our Service.
Before using our Services, please carefully read our Terms of service and this Privacy Policy. By using our services, you consent to the collection and use of your personal data in accordance with this Privacy Policy and our Terms of service. If you do not feel comfortable with any part of this Privacy Policy or our Terms of service, you should not use or access our Services. We may modify this Privacy Policy at any time, without prior notice, and changes may apply to any personal data we hold about you, as well as any new personal data collected after the Privacy Policy is modified. The date of the last revision is included at the top of the page.
1. Information we collect
We may collect the following information from and about you, including information that you provide, automatically collected information, and information from other sources. When you interact with our Services, you may provide certain personal information voluntarily, including but not limited to:
- Registration Information: When you register for an account, we may collect details such as your name, username, email address, and/or telephone number. If you register as a representative of an organization, we may also collect your name, business email address, phone number, country, physical address, and, if applicable, your organization's details.
- User Content: We collect the content you create, upload, generate, or otherwise make available through the Services. This may include profile information (such as username), user-generated content, images, prompts, and any other material you create and/or share using the Services.
- Payment Information: When you purchase Paid Services (as defined in our Terms of service), we use Airwallex as our payment processor to handle your payment transactions. Airwallex may collect your credit card details or other financial information. We do not store your payment details, but we may retain transaction confirmation or records required for compliance and accounting purposes.
- Correspondence Information: When you contact us for support, feedback, or inquiries—whether by email, chat, or other communication channels—we collect the information you choose to provide, including the content of your messages and any associated details.
- Surveys and Promotions: With your consent, we may collect information when you participate in surveys, research studies, promotions, marketing campaigns, or events that we organize or sponsor.
2. How we use your information
We will only use your personal data as described in this Privacy Policy or as disclosed to you prior to such processing taking place. The purposes for which we may use your personal data include:
- Providing the service.
- Contacting you regarding the administration of any features or functions of the Site or Service you have registered to use.
- Providing you with notices about your account.
- Notifying you about changes to our Site, our policies, terms or any products or Service we offer or provide through it.
- Sending you marketing and promotional emails.
- Responding to your questions or other requests.
- Allowing you to participate in the interactive features of the Site and Service.
- Tailoring your experience on the Site or Service.
- Saving your user account, registration and profile data or other personal data (so you do not have to re-enter it each time you visit or use the Site or Service).
- Tracking your return visits to and use of the Site and Service.
- Accumulating and reporting aggregate, statistical information in connection with the Site and the Service and user activity.
- Determining which features and services users like best to help us operate, enhance and improve our Site.
- Improving and enforcing our security measures.
- Maintaining legal and regulatory compliance.
- Enforcing compliance with our Terms of service and other policies.
- Investigating and resolving disputes.
- Investigating and preventing fraud, abuse, and violations of our Terms of service and other policies, unlawful or criminal activity, unauthorized access to or use of personal data or our systems and networks.
- Protecting you, others and our business.
- For any other purpose disclosed to you prior to you providing us your personal data or which are reasonably necessary to provide the Service or other related products and/or services requested.
3. How we share your information
We do not sell your personal information. We may share or disclose your personal data in the following circumstances:
- Service providers. We engage trusted third-party vendors and partners to help us operate, improve, and support the Services. These may include payment processors that handle transactions securely, hosting and cloud service providers that store and manage our infrastructure, or marketing partners, where allowed by law and in line with your preferences. All such third parties are bound by strict contractual obligations to process data only on our behalf and in accordance with this Policy.
- AI providers. To answer you, the conversation you ask in, its files and images, and anything else from your map that Nao opens to answer are sent to the company that runs the AI model. Nao's default model and voice transcription reach those companies through OpenRouter, and we ask OpenRouter to use only providers that do not collect user data. Images are generated through OpenRouter too. Nao's web searches and the web pages it reads go through DeepSeek, which receives the search terms and page addresses and stores data in the People's Republic of China.
- Safety checks. Before a command runs on your Mac, its browser is acted on or a web page is read, that action and up to the last six messages of the conversation are sent to TypeSafe AI, Inc., hosted in the United States, to check that it is what you asked for. TypeSafe states that it does not train models on what it receives.
- Providers you choose. If you add your own AI provider, or your team does, what Nao reads when answering with its models is sent to that provider under your agreement with it. We store its key encrypted. Claude Code and Codex run on your Mac with your own accounts: what they read goes to Anthropic or OpenAI under your agreement with them.
- International transfers. Some of these companies are in the United States or China, so your data may be processed outside your country.
- Affiliates and corporate partners. We may share your personal data with our subsidiaries, affiliates, and partners.
- Corporate transactions. To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which personal data held by us about our Site users is among the assets transferred, and you agree to and do hereby consent to our assignment or transfer of rights to your personal data.
- Consent. We may disclose your personal data for any purpose with your consent.
- As required by law. We may disclose your information to law enforcement, regulators, courts, or other third parties when we believe in good faith that disclosure is necessary to: comply with applicable law, legal processes, or lawful requests; enforce our Terms of service and other agreements, or investigate potential violations; detect, prevent, or address fraud, security, or technical issues; or protect the rights, property, or safety of our company, users, or the public.
4. Your rights and choices
We strive to provide you with choices regarding the personal data you provide to us. If you do not wish to have your email address or other contact information used by us to promote our Service, you can opt out by sending an email stating your request to support@naoday.com. You may also choose to stop receiving our promotional or marketing communications by following the "unsubscribe" instructions included in these messages.
We are committed to ensuring that your personal data is kept accurate and up to date. However, it is up to you to update it with any changes. You can review and change your personal data by logging into the Site and visiting your account profile section.
Depending on where you live and the laws that apply in your country of residence, you may have certain rights regarding your personal data, as described here. While we strive to prioritize the protection of personal data and comply with all applicable laws, we may decline a request from you if we have a lawful reason for doing so.
- You can request confirmation as to whether we process your personal information and obtain a copy of the data we hold about you.
- You have the right to request that we correct inaccurate or incomplete personal information.
- In certain circumstances, you can request that we delete your personal information, subject to legal or contractual obligations.
- You may request that we limit the processing of your personal information in specific situations.
- Where technically feasible, you can request a copy of your personal information in a structured, commonly used, and machine-readable format and ask us to transfer it to another controller.
- Where processing is based on your consent, you have the right to withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.
- In some cases, you may object to our processing of your personal information, including for direct marketing purposes.
- You have the right to lodge a complaint with your local data protection authority if you believe your privacy rights have been violated. If you have questions about these rights or how to exercise them, please contact us at support@naoday.com. We will respond to your request in accordance with applicable laws.
5. Data security
We take reasonable and appropriate technical and organizational measures to help protect personal data from unauthorized access, use, disclosure, alteration, and destruction. Unfortunately, the transmission of information via the internet is not completely secure, and we cannot guarantee the security of your information transmitted via the Services; any transmission is at your own risk.
6. Data retention
We generally retain your information for as long as it is necessary to serve the purpose(s) for which such information was collected, including to provide you with the Services. However, there are occasions where we are likely to keep this information longer in accordance with our legal obligations or where it is necessary for the establishment, exercise, or defense of legal claims.
After you have terminated your use of our Services, we may store your information in an aggregated and anonymized format. Notwithstanding the foregoing, we may also retain any information as reasonably necessary to comply with our legal obligations, to allow us to resolve and litigate disputes, and to enforce our agreements.
7. Eligibility
The Services are not directed at children under the age of 13 (or equivalent minimum age in the relevant jurisdiction). If you believe that we have personal data about or collected from a child under the relevant age, please contact us at support@naoday.com.
8. Contact us
If you have any questions about our practices related to the protection of your personal information, please feel free to contact us at support@naoday.com.