Privacy Policy

1. Introduction

With Notable, Inc. ("Notable," "we," "us," or "our") respects your privacy. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and your rights and choices. It applies to your use of our websites at withnotable.ai (and any subdomains), our applications, and the Notable Service (collectively, the "Service").

This Privacy Policy is incorporated by reference into our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service.

2. Personal Data We Collect

2.1 Information You Provide

When you use the Service, we collect information you provide directly, including:

• Account information: name, email address, password (managed by our authentication provider Clerk), and authentication identifiers.

• Professional profile information: brokerage name, city, state, neighborhoods of practice, property types and buyer types you serve, website URL, social profiles, and other professional information you provide.

• Brokerage roster information (Brokerage Customers): names, email addresses, and professional profile data of the agents you add to your roster.

• Payment information: billing name, billing address, and partial payment method details. Full payment method details are collected and stored by our payment processor (Stripe) and are not stored by Notable directly.

• Communications: messages you send to us (e.g., support requests, feedback, sales inquiries).

• Content: any content you submit to the Service, including profile descriptions, blog post drafts, recommendations completed, and similar.

2.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Usage data: pages visited, features used, scan history, button clicks, timestamps, and similar product analytics.

• Device and connection data: IP address, browser type and version, operating system, device identifiers, and referring URLs.

• Cookies and similar technologies: see Section 6 below.

• Authentication and security signals: login events, multi-factor authentication events, and suspicious-activity signals from our authentication provider.

2.3 Information from Third-Party Sources

To deliver the Service, we collect information about you from third-party sources, including:

• AI platform outputs: responses generated by third-party AI platforms (such as ChatGPT, Perplexity, and Gemini) in response to queries about you, your brokerage, your competitors, or your market. These outputs may include information about you that originated from public sources or other third parties.

• Search engine results: SERP results returned by search APIs (such as Serper.dev) for queries about you, your brokerage, or your market.

• Public profile data: publicly available information from Google Business Profile, Bing Places, real estate platforms, news sites, and your own website.

• Authentication provider data: identifiers and basic profile information from third-party identity providers (such as Google) if you sign in using single sign-on.

2.4 Sensitive Information

We do not intentionally collect sensitive categories of personal data (such as racial or ethnic origin, religion, health, sexual orientation, biometric data, or precise geolocation). Please do not submit such information to the Service. We do collect government-issued identifiers only to the extent your payment processor requires for tax or compliance reasons.

3. How We Use Personal Data

We use personal data to:

• Provide, operate, and maintain the Service, including running scans, generating recommendations, producing content, and surfacing competitive intelligence.

• Authenticate you and protect your account.

• Process payments and manage subscriptions.

• Communicate with you about the Service, including transactional messages (e.g., billing receipts, password resets, scan completion notifications), customer support, and product announcements.

• Send marketing emails about Notable, where permitted (you can unsubscribe at any time).

• Improve, evaluate, debug, and develop the Service, including improving our prompts, scoring methodologies, and product features.

• Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service or Acceptable Use Policy.

• Comply with legal obligations, respond to lawful requests, and protect the rights, property, or safety of Notable, our users, or others.

• Generate aggregated, anonymized, or de-identified statistics about Service usage. We may use, share, and publish this data without restriction.

We do not use Your Content to train any foundation AI model. We do not sell personal data.

4. Legal Bases for Processing (EEA / UK Residents)

If you are located in the European Economic Area, United Kingdom, or Switzerland, our legal bases for processing your personal data are:

• Performance of a contract: to provide the Service you have requested.

• Legitimate interests: to improve and secure the Service, market our services, and operate our business, where those interests are not overridden by your rights.

• Legal obligation: to comply with applicable laws and lawful requests.

• Consent: where you have given consent (which you may withdraw at any time).

5. How We Share Personal Data

5.1 Service Providers

We share personal data with vendors and service providers who help us operate the Service, including:

• Hosting and infrastructure: Vercel (application hosting), Supabase (database), GitHub Pages (hosting of Notable-owned Pro+ Website Builder Sites that display Your Content).

• Authentication: Clerk.

• Payments: Stripe.

• Email: Resend (transactional and marketing email).

• AI providers: Anthropic, OpenAI, Google AI, Perplexity (to deliver scan and content features).

• Analytics: Google Analytics, Meta (advertising pixel).

• Scan and SERP data: Serper.dev and other AI / search APIs that we may add over time.

These vendors are bound by contractual confidentiality and data protection obligations and may only use personal data to provide services to Notable. A current list of subprocessors is available at withnotable.ai/subprocessors (forthcoming).

5.2 Brokerage Customers

If you are a Brokerage-Managed Agent, a limited subset of your Service data is visible to your Brokerage Admin(s). Specifically, your Brokerage Admin can see: (a) your AI visibility scores; (b) scan results, including which third-party AI platforms mention you and how; and (c) AI mention data and citation information for you. Your Brokerage Admin does NOT see your roster or profile details beyond your name and brokerage attribution, competitive intelligence about you, your recommendation completion status, generated content drafts, your action history within the Service, or your personal communications with Notable support. We disclose this scope to you when you accept End User Terms. We may modify the scope of Brokerage Admin visibility over time; material changes that expand visibility into previously private categories will be communicated to affected End Users in advance. If you do not wish your brokerage to have any visibility into your data, do not accept the Brokerage Tier invitation; you may instead subscribe to the Individual Tier directly.

5.3 Business Transfers

If Notable is involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction. We will require the recipient to honor commitments made in this Privacy Policy or notify you of material changes.

5.4 Legal Requirements; Safety

We may disclose personal data if required by law, subpoena, court order, or other legal process, or if we reasonably believe disclosure is necessary to (a) protect the rights, property, or safety of Notable, our users, or others, (b) investigate fraud or abuse, or (c) enforce our Terms.

5.5 With Your Direction

We share personal data at your direction (e.g., publishing your Website Builder site, sending an email through a template, exporting your data).

5.6 We Do Not Sell Personal Data

Notable does not sell personal data, and we do not "share" personal data for cross-context behavioral advertising as those terms are defined under California law. If we ever change this practice, we will update this Privacy Policy and offer a clear opt-out.

6. Cookies and Similar Technologies

We and our service providers use cookies, pixels, local storage, and similar technologies to operate the Service, remember your preferences, analyze usage, and (with your consent, where required) deliver marketing. Categories include:

• Strictly necessary: required to provide the Service (authentication, security, basic functionality). These cannot be turned off.

• Analytics: help us understand how the Service is used (e.g., Google Analytics).

• Marketing: enable us to measure ad effectiveness and reach the right audiences (e.g., Meta Pixel).

Where required by law, we will request your consent to non-essential cookies through a banner the first time you visit the site. You can change your preferences at any time. Your browser may also let you block or delete cookies.

7. Data Retention

We keep personal data only as long as necessary for the purposes described, or as required by law. Specifically:

• Account data: while your account is active and for up to ninety (90) days after termination, after which we delete or anonymize, except as needed for legal, tax, or audit purposes.

• Scan and historical performance data: for the duration of your subscription, then up to ninety (90) days after termination.

• Payment records: as required by tax, accounting, and anti-fraud regulations (typically seven (7) years).

• Backups: retained on a rolling basis (typically thirty (30) days) and overwritten in the ordinary course of operations.

• Aggregated and de-identified data: may be retained indefinitely.

8. Your Rights and Choices

8.1 Account Settings

You can review and update most account information through the Service. You can request account deletion through your account settings or by emailing privacy@withnotable.ai.

8.2 Marketing Preferences

You can unsubscribe from marketing emails using the link in any marketing email. Transactional messages (billing, security alerts, scan results) are part of the Service and cannot be opted out without canceling your subscription.

8.3 Cookies

You can manage cookie preferences through our cookie banner or your browser settings.

8.4 California Residents (CCPA / CPRA)

If you are a California resident, you have the right to (a) know what personal data we collect, use, and disclose; (b) request a copy of your personal data; (c) request deletion of your personal data; (d) correct inaccurate personal data; (e) opt out of "sale" or "sharing" of personal data for cross-context behavioral advertising (we do not sell or share as defined); and (f) not be discriminated against for exercising these rights. To submit a request, email privacy@withnotable.ai with "California Privacy Request" in the subject. We will verify your identity before fulfilling the request.

8.5 EEA / UK Residents (GDPR)

If you are located in the EEA, UK, or Switzerland, you have rights to access, rectify, erase, restrict processing of, port, and object to processing of your personal data. To exercise these rights, email privacy@withnotable.ai. You also have the right to lodge a complaint with your local supervisory authority.

8.6 Other U.S. State Privacy Rights

Residents of certain other U.S. states (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others) may have similar rights. Email privacy@withnotable.ai to exercise them. We will respond as required by applicable state law.

9. Security

We use commercially reasonable administrative, technical, and organizational measures to protect personal data, including encryption in transit (TLS) and at rest where supported, access controls, audit logging, secure development practices, and role-based access to production systems. No system is perfectly secure. If a security incident materially affects your personal data, we will notify you and applicable authorities as required by law.

10. International Transfers

Notable is based in the United States. If you access the Service from outside the U.S., your personal data is transferred to and processed in the U.S. and may be processed in other countries where our service providers operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

11. Children

The Service is not directed to children under 18. We do not knowingly collect personal data from children under 18. If you believe a child has provided personal data to us, please email privacy@withnotable.ai and we will delete it.

12. Third-Party Services and Links

The Service may link to or integrate with third-party platforms (such as AI providers, search platforms, brokerage CRMs, or social media). This Privacy Policy does not apply to those third parties' practices. Review their privacy policies separately.

13. Information About Third Parties in Scan Results

Scan results may include information about third parties (such as competitor agent names or publicly available citations). This information is gathered from public sources and third-party AI platforms. If you believe scan content about you is inaccurate or violates your rights, contact privacy@withnotable.ai. Notable does not control third-party AI platform outputs and cannot guarantee removal or correction of information held by those platforms.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on our website with a revised "Last Updated" date and, for material changes, notify you by email or through the Service.

15. Contact Us

To contact us about this Privacy Policy or exercise any rights described, email privacy@withnotable.ai. Notable may update this address by posting a new address in this Privacy Policy.