Legal
Privacy Policy
Last updated: September 23, 2026
This policy explains what personal data NOLGIA collects, why, who receives it, and your choices. Each section starts with a short summary; the full text is what counts.
- We use your data to run the Service for you. We do not sell it, advertise with it, or train AI models on your content.
- To make an Output, your prompt and reference files go to the company that runs the model.
- The face identity check runs only on photos you agree to. Face templates are never stored; only a match score is kept.
- Nothing you make is public unless you share it or enter a challenge.
- You can download or delete your content, and delete your account in Settings.
1. Who we are
In short: Nolgia Inc. runs NOLGIA and is responsible for your personal data.
Nolgia Inc., a Delaware corporation at 8549 Wilshire Blvd, Suite 1180, Beverly Hills, CA 90211, United States ("NOLGIA", "we"), operates nolgia.ai, NOLGIA Agent, Studio, Characters, the NOLGIA API, CLI and MCP server, and related services (the "Service"), and is the controller of the personal data described here. "Inputs" and "Outputs" mean what our Terms of Service say they mean.
If you use NOLGIA through an organization (a Team or Enterprise workspace), its admins can see the shared Library, members' credit use and a log of organization actions. Our Data Processing Addendum covers personal data we process on your organization's behalf.
2. What we collect
In short: Your account details, the content you create, your NOLGIA Agent's activity, billing records, and technical data such as IP addresses.
| Category | What it includes | Source |
|---|---|---|
| Account | Name, email address, profile picture, sign-in method, organization and role. Passwords are stored only as a one-way hash. | You, Google, or your organization's single sign-on |
| Your content | Prompts, uploads, reference images, video and audio, Characters (name, description, reference photos, optional voice clip and your consent to use it), projects, timelines and Outputs. | You |
| NOLGIA Agent | Your chats and attachments, voice messages, what the agent does for you and the results, files in its workspace, what it remembers, its settings and any credentials you give it, and your feedback on replies. | You and your agent |
| Face identity check | Only for photos you agree to: match scores, notes about the photos, and a record of your consent (see section 5). | You, and computed by us |
| Billing | Plan, invoices, credit balance and credit history. Card details are held by Stripe, not by us. | You and Stripe |
| Usage | Each generation's prompt, settings, model, cost and result, the app or tool that started it, and your access tokens and connected apps. | Your use of the Service |
| Messages | What you send us, and your email address if you join our newsletter. | You |
| Technical | IP address, browser and device type, pages visited, cookies (section 12) and usage analytics. | Your browser and our servers |
You need to give us account details to use the Service; everything else depends on what you choose to do.
3. How we use it
In short: To provide the Service, bill you, keep it safe, support you and improve it. We do not sell your data, advertise with it, or train AI models on your content.
| Purpose | Legal basis (EU and UK) |
|---|---|
| Provide the Service: accounts, sign-in, generations, NOLGIA Agent, Studio, the API and your Library | Contract |
| Billing, credits, refunds and tax records | Contract; legal obligation |
| The face identity check (section 5) | Your explicit consent |
| Service emails, such as password resets, invites and completion emails you turn on | Contract |
| Support | Contract; legitimate interests |
| Security, abuse and fraud prevention, enforcing our Terms, legal requests | Legitimate interests; legal obligation |
| Understanding and improving the product through analytics and aggregated usage | Consent in the EU and EEA, the UK and Switzerland; legitimate interests elsewhere |
| Our newsletter | Consent |
Our legitimate interests are running a secure, reliable service and making it better. We do not sell your personal data, share it for cross-context behavioral advertising, or use your content to train AI models.
We do not make decisions with legal or similarly significant effects about you by automated means alone. If you think an action we took on your account was wrong, contact us and a person will review it.
4. How AI models process your content
In short: To make an Output, we send your prompt and reference files to the company that runs the model. Those companies have their own terms and safety filters.
When you generate something or talk to NOLGIA Agent, we send the model what it needs, such as your prompt or message and any reference files, using short-lived private links or the files themselves, and store the result in your Library. If a model's usual provider is unavailable, we may use another provider of the same model.
We never send your name or email address to a model provider. Some requests carry a random account ID that does not name you.
We also use models behind the scenes to help the Service work, for example to improve a prompt or to help your agent understand files and remember context. When your agent searches or browses the web, or speaks aloud, the websites, search service or speech service involved receive what they need to respond.
Providers run their own safety systems and may refuse a request or block a result.
We do not train AI models on your content. Some providers reserve rights, under their own terms, to use data they receive to improve their models. We opt out where a provider offers it, and our Subprocessors page marks those providers.
5. Face identity check (biometric notice)
In short: Only if you agree, we check that images and videos made with a reference photo look like the person in it. Face templates are never stored; only a match score is kept.
The face identity check helps make sure that images and videos made with a Character, or with a face reference photo, actually look like the person in the photo. It runs only on photos you have agreed to have checked:
- We ask once for each photo, when you add it to a Character or use it as a face reference. NOLGIA Agent cannot agree on your behalf.
- When you agree, we note how many faces the photo shows and whether one faces the camera, so we can tell you whether it will work well.
- When you then generate with that photo, we create a face template, a set of numbers describing a face, from the photo and from the result, and compare them. If they do not match closely enough, we generate once more and deliver the closer result.
- Face templates exist only for the duration of the comparison. They are never stored, logged or shared with anyone, and never used to identify who a person is. We keep only the match score and whether it passed, with the Output.
- The comparison runs on our own systems, not through an outside face recognition company.
- If you do not agree, the photo is still used as a reference for your generations, including by the model provider, but no face is detected or compared and nothing about the face is stored.
We keep a record of each consent: who gave it, when, for which photo and Character, and the wording agreed to. It is kept while the photo exists and deleted with the photo or your account.
You can withdraw your consent at any time, on the Characters page or through the API or CLI. From then on, no face processing happens for those photos. Scores already stored are deleted on the schedule below.
Retention and destruction: face templates are destroyed as soon as each comparison ends. Match scores and photo notes are deleted with the Output or photo they belong to (deleted items are erased when they leave the trash after 30 days) or with your account, and in any case three years after the photo or its Character was last used. We never sell, lease or trade face data.
Face templates can count as biometric data under laws such as the Illinois Biometric Information Privacy Act, Texas and Washington law, and the GDPR. When you agree to the check, you also confirm that you are the person in the photo or have their permission (see our Terms of Service).
7. What becomes public
In short: Nothing is public unless you share it or enter a challenge.
Your content stays private to you (and, for an organization Library, its members) unless you share it. We do not publish your work on our own.
A share link lets anyone with the link see that Output. The page shows the media, its title, part of the prompt, the model and any preset used, but not your name or email. Links expire, you can revoke them at any time, and they ask search engines not to index them.
A challenge entry is public to everyone, with the title and optional credit name you give it, and can appear in search results. You can withdraw it at any time.
8. When our team sees your content
In short: Authorized staff can view your content and agent chats only when needed.
Authorized NOLGIA staff can view account details, usage, content and NOLGIA Agent chats when needed to support you, investigate a problem, prevent abuse, handle a report, or comply with the law. We also read feedback you leave on agent replies to improve the agent.
9. International transfers
In short: We store your data in the United States. Some model providers process requests elsewhere.
We store your data in the United States. Some model providers process requests in other countries, including those shown on our Subprocessors page; a request goes to a provider only when you use its models. For transfers from the EU, UK or Switzerland we rely on the European Commission's Standard Contractual Clauses and their UK and Swiss equivalents, or another lawful mechanism.
10. How long we keep data
In short: Most data stays while your account is open. Deleted items go to the trash for 30 days. When you delete your account, your data is erased within 30 days, except anonymized records we keep for tax and accounting.
| Data | How long |
|---|---|
| Uploads and Outputs | Until you delete them. Deleted items stay in the trash for 30 days so you can restore them, then are erased, along with their share links. You can also delete an item permanently straight away. |
| Generation and credit history | While your account is open, as your billing history. After your account is deleted, we keep these records for tax and accounting with your prompts, references and other content removed. |
| NOLGIA Agent chats, workspace and memory | Until you delete them or ask your agent to forget them, or your account is deleted. Working copies of media are cleaned up once saved to your Library. |
| Face identity check | See section 5. |
| Account | While your account is open. After it is deleted, we keep an anonymized record with your name, email address and picture removed. |
| Server logs | About 30 days. |
| Backups | Backups are kept for 7 days, so deleted data leaves them about a week after it is deleted. |
| Billing and tax records | As long as the law requires, even after your account is deleted. Our payment processor keeps invoices and payment records as tax records. |
Deleting your account. You can delete your account in Settings. When you do, you are signed out everywhere, your access tokens and connected apps stop working, your share links are revoked, your challenge entries are withdrawn, any paid subscription is cancelled, and your NOLGIA Agent is stopped. The account stays locked for 7 days; if you change your mind, email contact@nolgia.ai within that time and we can restore it.
After 7 days we permanently delete your Library and its files, Characters and consent records, projects and Studio work, NOLGIA Agent chats, memory and workspace, sign-in credentials, tokens and keys, and your saved payment details. Organizations you own on your own are closed. We keep only anonymized records we need for tax and accounting, such as generation and credit history with your name, email address, prompts and content removed. Deleted data leaves our backups and logs within 30 days of your request.
If you own an organization that still has other members, transfer ownership before deleting your account. Work you created in someone else's organization stays with that organization. If you subscribed to our newsletter, you are unsubscribed straight away and removed from the list.
11. Your rights and choices
In short: You can access, download, correct and delete your data. Email us for anything you cannot do in the app.
In the app you can download and delete your content and chats, revoke share links and tokens, turn off emails, and delete your account (section 10). For a copy of your data or a correction, email contact@nolgia.ai. We reply within 30 days (45 where US state law allows) and may need to confirm your identity.
EU, UK and similar laws give you the right to access, correct and delete your data, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time without affecting earlier use. You can complain to your local data protection authority.
California and other US states: you can ask what personal information we collect and why, and to access, correct or delete it, and we will not treat you differently for doing so. In the last 12 months we collected the categories in section 2 from the sources listed there, for the purposes in section 3, and disclosed them only to the recipients in section 6. We do not sell or share personal information for cross-context behavioral advertising, and we use sensitive information (sign-in credentials and face identity check data) only to provide the Service. You can use an authorized agent, and you can appeal a refused request by replying to our answer.
13. Security
In short: We protect your data with encryption and access controls. No system is perfectly secure.
Data is encrypted in transit and at rest, files are kept in private storage, passwords and access tokens are stored only in hashed form, and access to production systems is limited to authorized staff. No system is completely secure; if a breach affects your personal data, we will notify you and the authorities as the law requires.
14. Children
In short: NOLGIA is for adults only.
The Service is not for anyone under 18, and we do not knowingly collect children's personal data. If you believe a child has given us personal data, contact us and we will delete it.
15. Changes to this policy
In short: We will tell you before material changes take effect.
We post each new version here with its date and list it in the change history below. For material changes we tell you in the app or by email before they take effect.
16. Contact us
Privacy questions, requests or complaints: email contact@nolgia.ai, use our contact page, or write to Nolgia Inc., Attn: Privacy, 8549 Wilshire Blvd, Suite 1180, Beverly Hills, CA 90211, United States.
Change history
- September 23, 2026: Rewritten to cover NOLGIA Agent, Characters and the face identity check, all sign-in methods, analytics, model providers and the new Subprocessors page, public sharing, retention and your rights.
- July 1, 2026: First version.