Legalnobuu

Privacy policy

Last updated 12 September 2026

nobuu is a chat app that does work for you. To do that it holds some of your data. This page says exactly what, exactly where, and exactly how to remove it — in plain language, because a policy you cannot read is not consent.

Two things live under nobuu.io: this website, and the app at app.nobuu.io. They collect different things and are described separately below.

The app (app.nobuu.io)

What is stored

  • Your account. When you sign in with Google we store your Google account id, your email address, and your name. That is all we receive and all we keep.
  • Your authenticator. Signing in also enrols a six-digit authenticator code, so a stolen Google session alone cannot open your account.
  • Your conversations. The messages you send, the replies you get, and the working transcript behind them. These are kept so a chat is still there when you come back.
  • Credentials for services you connect. When you connect Slack, Vercel, Linear, Notion, Sentry, Supabase or Railway, we store the access token that service issues for your account. We never see or store your password for any of them.

Connected-service tokens are kept apart from everything else — in a separate file readable only by the account the server runs as, never in the main data file, and scrubbed out of logs before anything is written. One person’s connections are never visible to another person’s account or to another person’s agent.

Who it is sent to

nobuu does not sell your data, and does not use your conversations to train models. It does pass data to the companies that make the product work:

  • Anthropic — your messages and the files an agent reads are sent to Claude in order to answer you. This is the core of how nobuu works; there is no version of it that does not send your conversation to a model.
  • Google — sign-in only.
  • Railway — hosts the app and stores its data.
  • Services you connect yourself — when you ask nobuu to read a Slack channel or list a Vercel deployment, it makes that request to that service as you. Nothing is sent to a service you have not connected.

How to remove it

  • A conversation — delete the chat. It and its transcript go.
  • A connected service — press Disconnect. The token we hold is deleted immediately.
  • Everything — email bryan@flowhighlevel.com and ask. Your account and its data will be removed.

Disconnecting deletes our copy, not the permission itself. nobuu removes the token it stored, and can no longer act as you — but the grant may still be listed in that service’s own settings until you revoke it there. We would rather say so than let you assume otherwise.

Nothing is deleted on a timer. What you have stays until you or we remove it.

This website (nobuu.io)

  • If you sign up for the closed beta, the email address and phone number you enter are stored in our own database, with the date you signed up and a note of whether the form thought the submission came from a person or from an automated one. They are not passed to an email provider or to anyone else, and no message is sent to you at the time. If that address is already on the list, the record we already hold is kept and the second one is discarded. Your private access key is emailed when closed beta opens on 1 October 2026.
  • Your IP address is looked at momentarily to stop one machine submitting the form hundreds of times. It is not written to a database and does not survive a restart.
  • No advertising or tracking cookies. The app sets cookies, but only the ones that keep you signed in.
  • This site is hosted by Vercel.

There is no unsubscribe link, because nothing is sent to you until the beta opens. To be taken off the list before then, write to bryan@flowhighlevel.com and the row is deleted.

We do not check that an address or phone number belongs to the person who typed it, so anyone could in principle enter yours. If you find yourself on a list you did not join, write to the same address and we will delete it.

Children

nobuu is not intended for anyone under 16, and we do not knowingly collect their data.

Changes

If this policy changes in a way that affects what we collect or who we send it to, the date at the top changes and anyone with an account is emailed.

Contact

Questions, deletion requests, or anything else about your data: bryan@flowhighlevel.com.