Privacy policy

25 October 2026

noku runs at noku.al. The controller of this service is the operator of noku.al, based in the Republic of Albania. Contact: hello@noku.al. Write to that address for the current legal name, registered address, and NIPT/VAT number. You get a private office. Noku is there, and you add the workers you want. This page says what we keep, the legal basis, your rights, and what happens if you connect Gmail.

Who is responsible

The operator of noku.al is the data controller. Hosting is in the European Union. We process account data to run the contract for the service, and usage data to apply the monthly allowance. Where a legal duty applies (for example tax records of invoices), we keep what the law requires.

Your account

We store the email and password for your noku login, your plan, and the name you give Noku. Passwords are stored hashed. We also store usage of the included AI allowance so the monthly cap can be applied.

Work you give Noku

Messages, files, folders, and board jobs stay private to that Noku. Other customers cannot read them. Provider API keys you paste stay with us and are not sent to the browser.

Gmail

Connecting Gmail is optional. If you connect Google accounts, noku asks Google for access so Noku can read mail you ask him to handle and send mail you approve. Drafts wait in your inbox until you approve a send.

We store the Google connection on the server that runs your Noku so he can keep working after you close the browser. Message content is used only for the task you gave him.

When that task needs a model, the text required for it is sent to the AI provider on your worker — the included model, or the provider whose key you connected. That provider sees the task, not your whole mailbox.

We do not sell Gmail data. We do not use it for advertising. We do not use it to train models for other customers. Other noku customers cannot read it.

noku’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke noku’s access at any time from your Google Account permissions. Revoking access stops Noku from reading or sending with that account.

Other mail

You can also connect mail with SMTP credentials you provide. Those credentials stay on the server and are used only to send mail you approve.

How long we keep it

We keep account and worker data while your noku account is open. When an account is closed, we delete the worker and his work within 30 days, unless a legal duty requires a longer hold (for example invoice records). Google access ends when you revoke it, or when the account is closed. Backups may hold a copy for up to 14 days.

Your rights

You can ask to access, correct, delete, or export your account data, or to restrict or object to processing. You can complain to the Information and Data Protection Commissioner of Albania (KDIMDP) or to a supervisory authority in the EU country where you live or work. Email hello@noku.al; we will answer within one month.

Who else sees data

To run Noku we use a host in the European Union and an AI provider for included work. If you connect them, OpenAI, Anthropic, OpenRouter, and Google also see the parts a task needs. Write to hello@noku.al for the current list of subprocessors. We do not sell personal data.

Contact

Questions about this policy or about a Google connection: hello@noku.al.