Nora Privacy Policy
Last updated: September 17, 2026
Nora is a personal assistant provided by the Nora team at mynora.ai. This policy explains how we handle information for Google sign-in, Gmail and Google Calendar assistance, and related conversations through Nora's website and Telegram bot. For privacy questions or deletion requests, contact [email protected].
1. Information we collect
Google account information. When you sign in with Google, we receive your account identifier, email address, and display name. Connecting Gmail and Google Calendar requires a separate authorization. Nora uses OAuth credentials to access the services you authorize; we do not receive your Google password.
Email information. When you connect Gmail, Nora accesses message text and metadata, including senders, recipients, subjects, timestamps, and labels.
Calendar information. When you connect Google Calendar, Nora accesses events on your primary calendar, including titles, descriptions, times, locations, conferencing links, organizers, attendees, and recurrence information. Meeting-time suggestions also use busy time intervals from your calendar and participant calendars your Google account is permitted to access.
Conversations and actions. Nora processes your instructions, conversations, generated responses and summaries, and records of actions performed on your behalf. These records may include information from your email or calendar.
2. How we use your information
We use this information to identify your account and provide the email and scheduling features you use. Nora can search, read, and summarize email; prepare drafts and replies; send messages; mark messages as read, star them, or archive them; review your schedule; create, update, or delete primary-calendar events; respond to invitations; and suggest meeting times.
Actions follow your instructions and configured permissions, including ongoing instructions. While Google remains connected, Nora may synchronize and process information in the background without a new message from you each time. This keeps information available for your assistant's responses and ongoing tasks.
3. Third-party processing and sharing
Third-party artificial intelligence and large language model services. Nora shares relevant email and calendar content, your instructions, and conversation context with these services to understand your requests, summarize information, prepare email responses, and assist with scheduling, including identifying calendar conflicts. Processing may also support background tasks and conversation summaries. Google access credentials are not included in model prompts.
Model services process and retain submitted content according to their applicable service terms and account settings. Restrictions on use for model training and fixed deletion periods have not been verified for every model service Nora uses.
Hosting and infrastructure. Services that host or operate Nora process information stored or handled by the application.
Google and recipients. Sending an email or calendar invitation shares its content through Google with the recipients you select or authorize through your instructions and permissions.
Telegram. If you connect the Telegram bot, Telegram processes the messages you send and the assistant responses delivered through that channel. Those responses may contain information from your email or calendar.
4. Storage and security
Nora stores synchronized email text and metadata, calendar events, conversation history, generated responses and summaries, and action history on servers. Action history may include message content, event changes, and previous values needed to track or undo an action. Records are associated with the relevant user account.
Google OAuth refresh tokens are encrypted in a dedicated token store. Short-lived Google access tokens are held in memory.
5. How long we keep information and how to request deletion
Nora retains synchronized emails, calendar records, conversations, summaries, and action history to provide the assistant and maintain continuity across your requests. These records have no fixed automatic expiry period and may remain stored until a deletion request is completed.
To request deletion of your Nora account information, synchronized email and calendar data, conversation history, summaries, action records, and related copies, email [email protected]. State the account concerned and whether you want all associated data or particular information deleted. Do not send your password or access tokens.
The Nora team handles deletion requests manually through the contact address above. There is currently no self-service account deletion option or fixed completion period. The time needed depends on the scope of your request and the systems involved, including any backups or third-party copies. Contact us for information about your request. Deletion from Nora does not automatically remove content already delivered to recipients or held by independent services.
Deleting Nora's stored copies does not itself delete the original messages in Gmail or events in Google Calendar. Changing those originals requires a separate action that you authorize.
6. Your choices and Google access
You can review or revoke Nora's Google access at Google Account third-party connections. Revocation prevents further access under that authorization. Once Nora detects it, synchronization stops and the affected live email and calendar features become unavailable.
Revoking access does not automatically delete information already stored by Nora, including synchronized content, conversations, summaries, action records, and saved authorization credentials. It also does not by itself stop processing of information Nora already holds. To request deletion, contact us using the address above.
Signing out, refreshing the connection status, or unlinking Telegram is not a request to delete your data. You may also contact us to request access to or correction of your information, or to exercise other rights available under applicable law.
7. Google user data requirements
Nora's use and transfer of information received from Google APIs is subject to the Google API Services User Data Policy, including the Limited Use requirements, and the Google Workspace API User Data and Developer Policy.
These requirements limit Google user data to permitted user-facing purposes, prohibit selling it or using it for advertising, restrict transfers and human access, and prohibit using Google user data or derived content to train or improve general-purpose models. These obligations also apply when data is processed by service providers.
8. Changes and contact
We may revise this policy as Nora's features or data practices change. Revisions will appear on this page with an updated date. New uses of Google user data require updated disclosures and any consent required by Google's policies and applicable law.
For privacy questions, access or correction requests, or deletion requests, email the Nora team at [email protected].