1. Who this policy covers
Noble Base, Inc. operates Astrolabe. This policy covers information about visitors and account users, people whose information customers upload, and people included in enrichment and prospect data.
We determine how to use information for our account administration, billing, security, and other operations. When we process personal information on a customer's behalf and instructions, the DPA applies. Data providers also collect and use information under their own policies. The parties' legal roles depend on the actual processing and applicable law.
2. Information and its sources
- From account users: contact information, organization and team membership, authentication details, business context, support messages, and settings.
- From customers' uploads: contact identifiers and customer activity, such as names, email addresses, telephone numbers, postal information, purchases, dates of activity, and customer-provided categories or text, depending on the upload.
- From Versium: matching and prospect identifiers and demographic, household, geographic, and interest attributes. Attributes may be inferred and may be inaccurate. We do not ingest the provider's religion or ethnic-origin fields.
- From processing: matches, audience distributions, personas, saved assignments, retention comparisons, reports, strategies, prompts, and generated content.
- From using the service: IP addresses, browser and device information, requests, authentication events, usage counts, logs, and error diagnostics. Customer-provided text can appear in diagnostic records.
- From Stripe: billing contacts, payment and subscription status, invoice references, and related payment metadata. Payment card details are collected by Stripe.
3. Why we use information
We use information to authenticate users, manage organization access, enrich uploaded lists, generate prospect audiences and reports, compare activity over time, deliver downloads, take payments, communicate about the service, answer requests, investigate problems, prevent abuse, and meet legal obligations.
For individuals whose information we process as a controller and where a legal basis is required, we rely on the applicable basis for the purpose: performing our agreement with an account user, legitimate interests in operating and securing the service where those interests are not overridden by individual rights, legal obligations, or consent where required. Customer-directed processing depends on the customer's lawful instructions; accepting our Terms does not provide consent on behalf of everyone in a list.
We do not train models for other customers using identifiable Customer Inputs or results, or make a customer's private uploads and reports available to other customer organizations. AI requests may include aggregate measures and selected customer-provided text; we do not describe all of those requests as anonymous.
4. Who receives information
Authorized users in a customer organization receive that organization's inputs and analysis. We use providers for enrichment, AI generation, hosting, storage, payments, transactional email, error monitoring, and operational logs. See our service provider list for their purposes and the information involved.
Our service obtains enrichment and prospect information from Versium and supplies results to paying customers. Depending on the applicable law and processing, providing that information can constitute a sale or other regulated disclosure. We do not make a blanket claim that all of this activity is exempt from sale or sharing rules. Contact us using the choices below about information relating to you.
We may disclose information when required by law, to respond to valid legal process, to protect people or the service, or as part of a merger or business transfer subject to applicable confidentiality and legal requirements. Customers who download data or send it to their own service providers are responsible for those subsequent uses.
5. Retention
- Provider source records and files: a 30-day result download window from first readiness, followed by deletion from active service storage through our cleanup process for accounts enrolled in automatic source deletion. Failed or abandoned processing has a separate seven-day processing deadline.
- Customer inputs and derived analysis: retained for the customer's ongoing service, including historical comparisons. Derived reports and saved assignments can remain linked to customer records after provider sources expire.
- After paid subscription access ends: uploaded lists, customer records, enrichment and prospect data, generated reports, saved prompts, and related analysis are scheduled for deletion from active service storage within 30 days. Reactivation only cancels deletion before cleanup starts. Wrapped account closure and other deletion requests are handled by contacting us.
- Account and operational records: account identity, membership, acceptance, billing, and usage records are retained based on the needs of account administration, accounting, security, legal obligations, and resolving disputes. Operational logs and email copies have separate provider retention arrangements.
- Inaccessible backups: may age out normally. Applicable cleanup must be applied before restored customer data becomes accessible.
Automatic source deletion is enabled for new customer accounts and existing accounts that have completed our retention review. Other existing accounts are not yet enrolled: their expired provider sources may remain in active storage pending review and enrollment. The 30-day download limit applies even when automatic deletion has not been enabled. Contact us to check your account's status or request deletion.
A customer may request deletion earlier, subject to authority verification and legal requirements. Customer-held downloads are not recalled. Ending an account or downloading a file again does not extend the source download window.
6. Your choices and privacy requests
Email hello@noblebase.ai to ask about your information or request access, correction, deletion, or an opt-out of sale, sharing, or targeted advertising. You may also write to our business address. Noble Base handles these requests internally.
Depending on your location and the applicable law, you may also have rights to a portable copy, to limit sensitive-information use, to object to or restrict processing, to withdraw consent, to appeal a decision, or to complain to a privacy regulator. We will not unlawfully discriminate against you for exercising a privacy right.
Tell us the type of request, your location so we can assess the applicable requirements, and enough context to locate the information. Do not send government identity documents or sensitive records with an initial request. We may request proportionate verification when required, or evidence of an authorized agent's authority. We will respond within the applicable legal deadlines and explain any permitted extension, exception, or denial. You can ask us to reconsider a denial by replying to the response with an appeal.
If information was provided by a business you deal with, you may contact that business directly. You can also contact us; where we act on its behalf, we will route the request to the appropriate customer and assist it as required. Removing information from Astrolabe does not itself remove the provider's independent source database or copies already held by other businesses.
7. Cookies and service messages
We use cookies and similar session mechanisms for sign-in, session continuity, and security. You can control cookies in your browser, but blocking necessary cookies may prevent the service from working. Service emails include account, billing, and result notifications. Contact us about communication preferences; messages needed to administer your account may still be necessary.
8. Security and international processing
We use access controls, organization-scoped authorization, encrypted web connections, and operational safeguards designed to protect information. No service can guarantee absolute security. If a personal-data breach requires notice, we will notify affected customers directly and comply with applicable notification requirements.
Astrolabe is operated from the United States. Information may be processed in the United States and other countries where our providers operate. Those countries may have different protections from your country. Where applicable law requires a transfer safeguard, it must be established for that processing; using Astrolabe or agreeing to these documents is not a substitute for a required transfer mechanism. Contact us for information about the safeguards relevant to your data.
9. Children, changes, and contact
Astrolabe is a business service for adults. Our Terms prohibit uploading information about people under 18. Tell us if you believe such information has been supplied so we can investigate and arrange removal.
We will update this policy as practices change and provide notice of material changes as required. Where consent is required for a new use, we will obtain it before that use.
Privacy contact: Noble Base, Inc., hello@noblebase.ai, 600 W Peachtree St NW, Ste 1700 PMB 289, Atlanta, GA 30308.