Last updated on October 16, 2026
Thats Noble, Inc. (“Noble”) helps brands change how AI assistants such as ChatGPT, Perplexity, Gemini, Google AI Overviews and Claude describe them. We find the third-party sources those AI tools rely on, secure mentions and placements for our clients in that content, and measure how AI answers about our clients change as a result. This policy explains what information we handle when you visit thatsnoble.com (the "Site") or work with us or use our platform (together, the "Services"), and how we handle it.
"Noble," "we," "us" and "our" mean Thats Noble, Inc., a Delaware corporation. "Client" means the business that engages Noble or subscribes to the Services. "You" means anyone who visits the Site or uses the Services.
Our role. This policy covers personal information Noble handles for its own purposes, as a controller: Site visitors, prospects, account users, and billing and support contacts. It does not cover information our Clients put into the Services. Noble processes that information on the Client's behalf, the Client is the controller, and our agreement with the Client (including any data processing addendum) governs it. Sections 4 and 7 describe how we handle Client content in general terms.
What Noble does not do. Noble does not build profiles of individuals, buy or sell contact lists, or enrich personal data about people. Our work focuses on brands, publications and AI-generated answers, not on individual consumers.
We keep personal information to the minimum the Services need. In practice, that is the business contact details of the people who use Noble.
| Category | What it includes | Where it comes from |
|---|---|---|
| Account information | Name, work email address, company name, login credentials (stored as salted one-way hashes) | You or your company's admin when an account is created |
| Client content | Brand messaging, competitors, topics and prompts to track, approved talking points, target publications, and placement and mention records | The Client, through the Services or in working with our team |
| AI response data | Responses that AI platforms return to the prompts we track, and the sources they cite | Generated by third-party AI platforms when we run tracked prompts |
| Publisher and editor contacts | Names, work emails and roles of editors, writers and site owners we contact about placements | Their public bylines and publication websites, or their replies to us |
| Inquiries and events | Name, work email, company, role, and anything else you share when you request a demo, sign up for updates, or register for an event or webinar | You |
| Communications | Messages you send us, such as support requests and feedback | You |
| Website and usage data | IP address and the general location inferred from it, browser and device type, pages viewed, referring site, and actions taken in the Services | Collected automatically by cookies and similar tools (see section 6) |
| Billing information | Billing contact and invoicing details. Card numbers are handled by our payment processor, not stored by Noble | You or your company |
What we no longer collect. Noble no longer collects, purchases or enriches personal contact data about third parties, and no longer sources data from contact-data providers. Any such data held under our previous business model has been deleted.
Please don't put sensitive personal data into the Services. The Services are built for brand and market information. Clients should not enter prompts or content containing sensitive personal data, such as health, financial or government ID information.
We use information only to run, secure and improve the Services and our business relationship with Clients:
Where EU or UK law applies, we rely on these legal bases: performance of our contract with you or your employer, our legitimate interests in running and securing a B2B service, compliance with legal obligations, and consent where required (for example, non-essential cookies).
We do not sell personal information, and we do not use it for cross-context behavioral advertising.
To see which sources shape AI answers about a client, and whether our placements change those answers, we send the prompts a Client tracks to third-party AI platforms and AI-visibility data providers and record the responses. Prompt text, and the brand and competitor names in it, is shared with those providers for this purpose. Account information is not.
We also use AI models from third-party providers to analyze responses, identify gaps and draft recommendations. When we do:
AI responses and the sources they cite are generated by third parties. Noble does not control their content.
We share information only in these cases:
We do not sell or rent personal information, and we do not share it with third parties for their own marketing.
The Site and Services use cookies and similar technologies in three ways:
Noble's marketing emails use open or click tracking: Our emails may contain pixels that tell us whether a message was opened or a link was clicked. You can block this by turning off automatic image loading in your email client. Browsers' "Do Not Track" signals have no agreed standard, so we do not respond to them.
Other websites. The Site and Services may link to websites and services we don't operate, including the AI platforms and sources cited in reports. Their own privacy policies apply to anything you share with them.
We keep account information and Client content for as long as the Client's engagement is active. When an engagement ends, we delete or de-identify Client content within 30 days, unless the Client asks for earlier deletion or the law requires us to keep it. Backups age out on a rolling 30-day cycle.
We keep billing records and communications as long as needed for tax, accounting and legal purposes. Website analytics data is kept for 14 months.
We protect information with administrative, technical and physical safeguards suited to a B2B service. These include encryption in transit (TLS) and at rest, salted one-way hashing of passwords, multi-factor authentication for administrative access, least-privilege access controls, logging and monitoring, regular vulnerability scanning, and periodic third-party penetration testing.
No system is perfectly secure. If we become aware of a security incident affecting your personal information, we will notify affected Clients without undue delay, and within the timeframes set by law and our agreements.
Depending on where you live, you may have the right to:
To make a request, email privacy@thatsnoble.com. We will verify your identity and respond within the time the law allows, typically 30 to 45 days. An authorized agent may submit a request for you with proof of authority.
If your information is in a Client's workspace, we may refer your request to that Client, since it controls that data. EU and UK residents can also complain to their local data protection authority.
Noble is based in the United States, and the Services are hosted on Amazon Web Services in the United States. If you use the Services from elsewhere, your information will be transferred to and processed in the U.S. and in other countries where our providers operate. Where EU, UK or Swiss law applies, we protect these transfers with the European Commission's Standard Contractual Clauses, the UK Addendum, or another lawful transfer mechanism.
The Site and Services are for businesses and are not directed to anyone under 16. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.
We may update this policy as the Services change. We will post the new version here with a new "Last updated" date. If a change is material, we will notify Clients by email or in the Services before it takes effect.
For questions or requests about this policy, contact us at privacy@thatsnoble.com, or write to:
Thats Noble, Inc.
Attn: Privacy
228 Park Ave S
PMB 82687
New York, New York 10003-1502 US
