Privacy Policy
1. Background
410 Labs, Inc. (d/b/a Noosphere) (“410 Labs,” “we,” “our,” or “us”) understands that your privacy matters and that you care about how your information is used and shared. This Policy describes the information we collect through the Noosphere website at getnoosphere.com, the Noosphere application programming interface, the Noosphere Model Context Protocol server, and the Noosphere browser extension (together, the “Service”), and what we do with it. It applies from your first use of the Service.
This Policy should be read alongside the Terms of Use, which describe the Service itself and, in particular, how information extracted from your submissions is contributed to a shared graph.
2. Information We Collect
Information you provide
- Account information. You sign in with Google Single Sign-On. From that sign-in we receive your name, email address, a Google account identifier, and your profile image. We do not receive or store your Google password.
- Content you submit. The documents, files, media, web addresses, and page text you send to the Service, along with the sketches, collections, groups, and annotations you create.
- Communications. Anything you send us when you request support or give feedback.
Information collected automatically
- Technical information. IP address, browser type and version, operating system, language preference, referring page, and the date and time of requests. We record the IP address associated with each upload as part of its provenance record.
- Usage information. Which features you use, what you upload and when, and how you navigate the Service, so that we can operate and improve it.
- Cookies. A session cookie that keeps you signed in, and preferences such as your chosen theme. See Section 10.
3. How We Use Information
We use the information we collect to:
- provide, operate, maintain, secure, and improve the Service;
- process the Content you submit — extracting entities and relationships from it and building the graph;
- authenticate you and keep your account secure;
- record the provenance of each contribution so that graph claims can be traced to their sources;
- respond to your support requests and communicate with you about your account;
- detect, investigate, and prevent abuse, fraud, and security incidents; and
- comply with legal obligations and enforce our Terms of Use.
4. Content and the Shared Graph
This is the most important section of this Policy for understanding what Noosphere does with what you submit.
Noosphere maintains a single shared graph. When we process your Content, the entities and relationships extracted from it — names of people and organizations, places, events, the described connections among them, and the citations supporting each — are added to that shared graph and are readable by other registered users of the Service. Where an extracted entity matches one already present, the two are resolved into a single node, and evidence contributed by different users may attach to the same node.
Your original uploaded files, and the sketches and collections you create, are private to your account unless you choose to share them with a group or publish them to a public link. The extracted graph data described above is not private in that way.
Because Content you submit may describe identifiable people, please submit only material you have the right to submit, and consider that the facts extracted from it will be visible to other users of the Service.
5. The Browser Extension
The Noosphere browser extension transmits information to the Service only when you press its button. At that point it sends the address of the page you are viewing and its readable text, along with the credential identifying your account. The extension does not collect your browsing history, does not run on pages you have not explicitly captured, and does not transmit information to any party other than Noosphere.
6. Artificial-Intelligence Processing
To extract entities and relationships, and to transcribe audio, we send Content to third-party artificial-intelligence model providers acting as our processors under contract. These providers process the Content to return results to us. We do not authorize them to use your Content to train their general-purpose models, and we select providers whose terms support that position.
Automated extraction is probabilistic and can be wrong. See Section 7 of the Terms of Use for what that means for how you should rely on the output.
7. Google User Data
Noosphere’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google sign-in solely to authenticate you and to populate your account profile. We do not sell Google user data, and we do not use it for advertising.
8. How We Share Information
We do not sell your personal information. We share information only in these circumstances:
- With other users of the Service, in the manner described in Section 4, and where you have chosen to share a sketch or collection with a group or publish it to a public link.
- With service providers who process information on our behalf under contract — cloud hosting, storage, and artificial-intelligence model inference — and who are restricted from using it for their own purposes.
- With your consent, when you direct us to share something.
- For legal reasons, when we believe in good faith that disclosure is required by law or legal process, or is necessary to protect the rights, property, or safety of 410 Labs, our users, or the public.
- In a business transfer, in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy continuing to apply to the transferred information.
9. No Advertising Use
410 Labs does not use Content you submit, or information derived from it, to serve advertising, including retargeted, personalized, or interest-based advertising. We will not rent or sell personally-identifying information to anyone.
10. Cookies
We use cookies to keep you signed in, to remember preferences such as your chosen theme, and to understand aggregate usage of the Service. You can block or delete cookies in your browser settings; if you block the session cookie you will not be able to stay signed in. We do not currently respond to “Do Not Track” browser signals, as no common standard for them has been adopted.
11. Security
We take reasonable technical and organizational measures to protect information against unauthorized access, alteration, disclosure, and destruction, including encryption of traffic in transit and access controls on our systems. No system is perfectly secure, however, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.
12. Retention and Deletion
We retain your account information and Content while your account is active and for as long as needed to provide the Service. You can delete individual uploads, sketches, and collections from within the Service at any time.
You may request deletion of your account by writing to info@410labs.com. When an account is deleted we retain its data for up to three months to allow the account to be restored, after which we delete or de-identify it. As explained in Section 4, entities and relationships previously contributed to the shared graph, and material other users have independently corroborated or built upon, may persist in the graph after your account is closed. We may also retain information for longer where required by law or to resolve disputes.
13. Your Rights (GDPR)
If you are in the European Economic Area or the United Kingdom, we process personal data on lawful bases including your consent, the performance of our contract with you, compliance with legal obligations, and our legitimate interests in operating and securing the Service. You have the right to:
- access the personal data we hold about you;
- have inaccurate personal data corrected;
- request erasure of your personal data;
- restrict or object to certain processing;
- receive your personal data in a portable form;
- withdraw consent where processing is based on consent; and
- lodge a complaint with your national data protection authority.
To exercise any of these rights, write to info@410labs.com. We will respond within the period required by law.
14. Your Rights (California)
If you are a California resident, you have the right to know what personal information we collect, use, and disclose; to request deletion or correction of that information; and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act. Submit requests to info@410labs.com.
15. Children
The Service is not directed to, nor designed to be attractive to, children under 13, and we do not knowingly collect personal information from them. If we learn that we have collected personal information from a child under 13, we will delete it. If you believe a child has provided us information, contact info@410labs.com.
16. International Transfers
410 Labs is based in the United States, and the Service is operated from the United States. If you use the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection law may differ from that of your country. We rely on appropriate safeguards for such transfers where required by applicable law.
17. Changes to This Policy
410 Labs may change this Privacy Policy from time to time and in its sole discretion. When we do, we will update the “Last updated” date above and, for material changes, give additional notice through the Service. Continued use of the Service after a change takes effect constitutes acceptance of the revised Policy.
18. Contact
Questions about this Policy, or requests concerning your information, may be directed to:
410 Labs, Inc.
822 Guilford Ave, Suite 114
Baltimore, MD 21202
United States
info@410labs.com