Last updated: May 13, 2026
Introduction
Nodiom is operated by Fastend Ltd, a company registered in England and Wales. Nodiom ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our browser extension and web application.
Other apps operated under the Nodiom brand may have their own app-specific privacy policies. MIGA has its own policy at /apps/miga/privacy and LumaFrame has its own policy at /apps/lumaframe/privacy.
Information We Collect
Information You Provide
- Account Information: Email address, password, and any profile details you add to your account
- Knowledge Content: Text, transcripts, prompts, AI chat content, and notes you explicitly choose to capture and save
- Source References: URLs and related page references for content you explicitly capture
Automatically Collected Information
- Authentication Information: Session cookies or tokens needed to keep you signed in securely
- Local Extension Data: Preferences, selected workspaces, cached workspace data, temporary capture state, and theme settings stored in browser extension storage
- Service Operation Data: Limited technical logs such as browser type, timestamps, and error information used to operate and secure the service
How We Use Your Information
- Provide Services: Store, organize, retrieve, and display the knowledge you choose to save
- Authentication: Verify your identity and maintain secure sessions across the web app and extension
- AI Processing: Generate summaries, tags, metadata, and semantic search results from the content you save
- Security and Reliability: Detect abuse, debug failures, and keep the service functioning correctly
- Communication: Send service updates and support messages when necessary
Data Storage and Security
- All data transmission uses HTTPS encryption
- Your workspace data is isolated by access controls and workspace membership rules
- We use secure authentication controls, including HttpOnly cookies for web sessions
- We store temporary extension state locally in your browser when needed to complete capture and retrieval flows
- We use AI and infrastructure providers to process your saved content so the service can generate summaries and retrieval results
Data Sharing and Disclosure
We do not sell your personal information. We may share your information only in the following circumstances:
- Workspace Members: Content you create is shared with other members of your workspace
- Service Providers: Trusted infrastructure, database, authentication, hosting, and AI providers that help us operate the service
- Legal Requirements: When required by law, court order, or government request
- Business Transfers: In connection with a merger, acquisition, or sale of assets
We do not sell user data and we do not use or transfer user data for purposes unrelated to Nodiom's user-facing knowledge capture and retrieval features.
Browser Extension Permissions
Our Chrome extension requires the following permissions:
- contextMenus: Adds "Save to Nodiom" actions to the right-click menu so you can capture selected content
- sidePanel: Displays the extension interface in the browser sidebar
- storage: Stores preferences and cached data locally on your device
- host permissions: Allows secure communication with the Nodiom web app and API. Site-specific access for YouTube, ChatGPT, Claude, and Gemini is limited to those supported pages.
The extension only accesses website content when you explicitly trigger a capture or retrieval action, or when the extension UI is running on supported pages such as YouTube, ChatGPT, Claude, or Gemini. Text captured from arbitrary websites comes from the browser context menu selection you invoke yourself. We do not passively monitor your browsing history.
The extension does not request Chrome's cookies permission. Authentication uses standard browser cookie handling for eligible requests to the Nodiom web app, while the server validates your session.
Your Rights
- Access: View all your knowledge nodes and account information at any time
- Edit: Modify or update your content and profile
- Delete: Remove individual nodes or delete your entire account from Settings
- Export: Request a copy of your data
Account deletion is permanent. We aim to remove deleted account data from our active systems within 30 days, subject to reasonable backup and legal retention constraints.
Children's Privacy
Our service is not intended for children under 13. We do not knowingly collect information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date above and, where appropriate, by email.