Privacy Policy

Effective date: November 3, 2026

What this policy covers

Newo Inc. is committed to protecting your privacy. If you interact with Newo Services, you act as a Data Subject.

This policy is intended to help Data Subjects understand:

This Privacy Policy covers the information we collect about Data Subjects when they use our products or services unless a different policy is displayed. “Newo”, “we” and “us” refers to Newo Inc. a Delaware corporation with its principal place of business located at 2261 Market Street #5263 San Francisco, CA 94114 USA.

When processing Data Subject information, Newo acts on behalf of and under the instructions of the AI Agent Owner. Newo Knowledge Studio is a product of Newo Inc. For Knowledge Studio account data, meaning the sign-in identity and workspace membership of people who use Knowledge Studio (described in the sections “Newo Knowledge Studio” and “Google Sign-In / Google user data” below), Newo Inc. is the controller. For the content that customers add to Knowledge Studio, Newo acts on behalf of and under the instructions of the customer.

This policy also explains Data Subject choices about how we use information about them. These choices include how Data Subjects can object to certain uses of information about them and how they can access and update certain information about them. If Data Subjects do not agree with this policy, they should not access or use our Services or interact with any other aspect of our business.

What products and services does this Privacy Policy cover

This Privacy Policy covers:

collectively referred to as “Services”.

Notice to Data Subjects

Access to Services is made available to Data Subjects through an organization referred to as the AI Agent Owner. Data Subjects should direct any data privacy questions to their AI Agent Owner, as their use of Services is subject to the policies of their AI Agent Owner. Newo Inc. is not responsible for the privacy or security practices of the AI Agent Owner, which may differ from this policy.

What information we collect about Data Subjects

Account, Profile and Personal Identifiable Information

We collect information about Data Subjects when they interact with AI Agents created by AI Agent Owners through phone calls, SMS, email, webchat or other channels, when they register for an account, create or modify their profile, set preferences, sign-up for or make purchases through the Services. It may include, but is not limited to, name, email address, telephone number, postal or other physical address, title, or occupation.

When a person signs in to Newo Knowledge Studio with a third-party sign-in provider such as Google, we receive the limited profile information described in the section “Google Sign-In / Google user data” below.

Data Subject Activity Data

Newo may collect and process activity data such as Data Subject messages, calendar records, customer relationship management (“CRM”) data, corporate messenger data (e.g. Slack), corporate productivity platforms (e.g. GitHub, Jira) data, etc., further referred to as “Data Subject Activity Data”.

The AI Agent Owner is responsible for sources and third-party services over which it has control. Data Subjects should direct their data privacy questions to their AI Agent Owner, as their use of the Services is subject to their AI Agent Owner’s policies.

Knowledge Sources

In Newo Knowledge Studio, customers may upload files, connect documents, or ask the Services to crawl website pages they choose (“Knowledge Sources”), so that the Services can organize that content into a searchable knowledge base for the customer’s AI Agents. Knowledge Sources and the knowledge base built from them are customer content. We process them on behalf of, and under the instructions of, the customer. Customers should not include personal information in Knowledge Sources unless they are permitted to do so and it is needed for their use of the Services.

Data Subject use of the Services

We keep track of certain information about Data Subjects when they visit and interact with any of our Services i.e. the features they use, the links they click on, the teams and people they work with and how they work with them, like who they collaborate with and communicate with most frequently, etc.

Cookies and Other Tracking Technologies

Newo and our third-party partners, such as our advertising and analytics partners, use cookies and other tracking technologies (e.g., web beacons, device identifiers and pixels) to provide functionality and to recognize Data Subjects across different Services and devices.

The Newo Knowledge Studio sites (https://knowledge.newo.ai and https://app.knowledge.newo.ai) do not use analytics or advertising cookies. They use only strictly necessary cookies, namely the session cookie that keeps a signed-in person signed in. Information received from Google Sign-In is never used for advertising, as described below.

How we use the information we collect

To provide the Services

We use information about Data Subjects to provide the Services to them, authenticate them when they log in, provide customer support, and operate and maintain the Services. We use Data Subject contact information to send communications via messengers, email, business messengers and within the Services, including sending technical notices, updates, security alerts, and administrative messages.

Newo analyzes Data Subject Activity Data to deliver AI agent experience on behalf of the AI Agent Owner.

No training of AI models on customer data

Newo does not use customer data to train artificial intelligence (AI) or machine learning (ML) models in any product. This applies to Data Subject Activity Data (including calls, messages and transcripts), the content customers add to the Services (including Knowledge Sources, the knowledge bases built from them, and the questions sent to them), the prompts and other components customers author, and information received from Google APIs. We do not train or fine-tune our own models on this data, and we do not allow our service providers to train their models on it. We use this data only to provide the Services to the customer and as otherwise described in this policy.

For research and development

Newo may analyze aggregated, de-identified usage statistics and service operation and security metrics derived from the use of the Services (for example, volumes, response times and error rates) to make our Services faster, secure, integrated, and useful to Data Subjects. This analysis never uses the content of Data Subject Activity Data or customer content, and it is never used to train AI or ML models.

For industry benchmarks

Newo Services may use aggregated, de-identified usage statistics (for example, counts and rates of activity) to create benchmarks for benchmarking or marketing purposes. These statistics do not include the content of conversations or customer content, cannot be used to identify a Data Subject or a customer, and are not used to train AI or ML models.

To provide updates about the Services

We use Data Subject contact information and information about how they use the Services to send communications that may be of specific interest to them. These communications may include information about new features, survey requests, newsletters, and events we think may be of interest to them. We also communicate with Data Subjects about new product offers, promotions, and contests.

Customer support

We use Data Subject information to resolve technical issues they encounter, to respond to their requests for assistance, to analyze crash information, and to repair and improve the Services.

For safety and security

We use information about Data Subjects and their Service use to verify accounts and activity, to monitor suspicious or fraudulent activity and to identify violations of Service policies.

Where required by law or where we believe it is necessary to protect our legal rights, interests and the interests of others, we use information about Data Subjects in connection with legal claims, compliance, regulatory, and audit functions, and disclosures in connection with the acquisition, merger or sale of a business.

The uses described in this section are limited, for information received through Google Sign-In, by the section “Google Sign-In / Google user data” below. Where that section is more restrictive, it applies.

How we share information we collect

Google Workspace APIs

Our statement on information received from Google APIs, including Google Workspace APIs and Google Sign-In, is in the section “Google Sign-In / Google user data” below.

Managers, co-workers or third-party

The AI Agent Owner may decide to provide Data Subjects, their managers, their co-workers or third-party access to dashboards, reports and API connection with aggregated, anonymized or deanonymized analytics and statistics based on collected and processed Data Subject Activity Data.

Data Subjects should direct their data privacy questions to their AI Agent Owner, as their use of Services is subject to their organization’s policies. We are not responsible for the privacy or security practices of their organization, which may be different from this policy.

Service Providers

We work with third-party service providers to provide website and application development, hosting, maintenance, backup, storage, virtual infrastructure, payment processing, analysis, and other services for us, which may require them to access or use information about Data Subjects. If a service provider needs to access information about Data Subjects to perform services on our behalf, they do so under close instruction from us, including policies and procedures designed to protect Data Subject information.

Newo Partners

We work with third parties who provide consulting, sales, and technical services to deliver and implement customer solutions around the Services. We may share Data Subject information with these third parties in connection with their services, such as to assist with billing and collections, to provide localized support, and to provide customizations. We may also share information with these third parties where Data Subjects have agreed to that sharing.

Information received through Google Sign-In is not shared with Newo Partners for their own sales or marketing purposes. It is shared only as described in the section “Google Sign-In / Google user data” below.

Compliance with Law Enforcement Requests and Applicable Laws

Enforcement of Our Rights: In exceptional circumstances, we may share information about Data Subjects with a third party if we believe that sharing is reasonably necessary to (a) comply with any applicable law, regulation, legal process or governmental request, including to meet national security requirements, (b) enforce our agreements, policies and terms of service, (c) protect the security or integrity of our products and services, (d) protect Newo, our customers or the public from harm or illegal activities, or (e) respond to an emergency which we believe in good faith requires us to disclose information to assist in preventing the death or serious bodily injury of any person.

SMS/Text Messaging Terms: Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the text message services.

Business Transfers

We may share or transfer the information we collect under this privacy policy in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. Data Subjects will be notified via email and/or a prominent notice on the Services if a transaction takes place, as well as any choices they may have regarding their information.

How we store and secure the information we collect

Information storage and security

We use industry standard technical and organizational measures to secure the information we store.

While we implement safeguards designed to protect Data Subject information, no security system is impenetrable and due to the inherent nature of the Internet, we cannot guarantee that data, during transmission through the Internet or while stored on our systems or otherwise in our care, is absolutely safe from intrusion by others.

If Data Subjects use our server or data center Services, responsibility for securing storage and access to the information they put into the Services rests with them and not Newo. We strongly recommend that server or data center users configure SSL to prevent interception of data transmitted over networks and to restrict access to the databases and other storage points used.

How long we keep information

How long we keep information depends on the type of data. After such time, we will either delete or anonymize Data Subject information or, if this is not possible (for example, because the information has been stored in backup archives), then we will securely store Data Subject information and isolate it from any further use until deletion is possible.

Account information: We retain Data Subject account information for as long as their account is active and a reasonable period thereafter in case they decide to re-activate the Services. We also retain some of their information as necessary to comply with our legal obligations, to resolve disputes, to enforce our agreements, to support business operations, and to continue to develop and improve our Services. Where we retain information for Service improvement and development, we keep only aggregated, de-identified usage statistics and service operation and security metrics, from which information that directly identifies Data Subjects has been removed, and we only use them to uncover collective insights about the use of our Services, not to specifically analyze personal characteristics about them. We never retain content for this purpose and never use it to train AI or ML models.

The information Data Subjects share on the Services: If a Data Subject account is deactivated or disabled, some of their information and the content they have provided will remain in order to allow their team members or other users to make full use of the Services.

We retain Data Subject Activity Data and other information related to Services as long as required by the AI Agent Owner.

Knowledge Studio information: Information received through Google Sign-In is kept as described in the section “Google Sign-In / Google user data” below. Knowledge Sources and knowledge bases are kept while the customer’s Knowledge Studio workspace exists, or until the customer deletes them. Newo does not keep system backups of Knowledge Studio data. Knowledge Studio offers customer-controlled copies inside the workspace: a “Backups and restore” feature that the customer starts and manages, and the ability to restore recently removed sources for a few days after removal. These copies are part of the workspace and are deleted together with it.

Marketing information: If Data Subjects have elected to receive marketing emails from us, we retain information about their marketing preferences for a reasonable period of time from the date they last expressed interest in our Services, such as when they last opened an email from us or ceased using their Newo account. We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date such information was created.

How to access and control Data Subject information

Data Subjects have the right to object to our use of their information, request that we stop using their information, to request the deletion or restriction of their information, or to request their information in a structured, electronic format. Where the Services are administered for Data Subjects by an administrator, they may need to contact their administrator to assist with their requests first.

How we transfer information we collect internationally

Newo Services accessible through the domain name newo.ai are hosted in the United States by Google Cloud, except Newo Knowledge Studio (knowledge.newo.ai and app.knowledge.newo.ai), which is hosted in the United States by the subprocessors listed in the section “Newo Knowledge Studio” below. If Data Subjects use the Services from the European Union or the United Kingdom, or any other region with laws governing data collection, protection and use that may differ from United States law, please note that they may be transferring their personal information outside of those jurisdictions to the United States. Where we transfer, store and process Data Subject personal information outside of the United Kingdom, European Union or EEA, we have ensured that appropriate safeguards are in place to ensure an adequate level of protection for the rights of data subjects based on the adequacy of the receiving country’s data protection laws.

By using the Services, Data Subjects consent to the transfer of their personal information outside their home jurisdiction, including to the United States, and to the storage of their personal information in the United States, for the purpose of hosting, using and processing the personal information in accordance with this Privacy Policy. Data Subjects further acknowledge that these countries may not have the same data protection laws as the country from which they provided their personal information, and that Newo may be compelled to disclose their personal information to U.S. authorities. Data Subjects have the right to withdraw their consent at any time by contacting us as described in the “Contact Us” section below.

HIPAA Compliance and Protected Health Information (PHI)

If the AI Agent Owner is using our service in a HIPAA-compliant capacity, we act as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA) and process Protected Health Information (PHI) solely to provide the contracted services. We do not use PHI for marketing, research, profiling, or any unrelated purposes.

PHI submitted to our API is handled transiently and is not stored persistently, unless specifically agreed otherwise in writing. All PHI is processed using infrastructure that complies with the HIPAA Security Rule, including safeguards such as encryption, access controls, audit logging, and secure system design. We use Google Cloud infrastructure and services to process PHI.

In the event of a confirmed breach involving PHI, we will notify our partners via email within 60 calendar days, in accordance with HIPAA Breach Notification Rule requirements.

AI Agent Owners are responsible for ensuring that PHI submitted through our service is limited to the minimum necessary and that they are authorized to submit such data under HIPAA.

Newo Knowledge Studio

Newo Knowledge Studio is a Newo service that turns a customer’s Knowledge Sources (uploaded files, connected documents and website pages the customer chooses to crawl) into a searchable knowledge base that the customer’s AI Agents can use. It consists of a public website at https://knowledge.newo.ai and a web application at https://app.knowledge.newo.ai. Each customer’s content is kept in its own workspace (an “organization”).

Information we handle in Knowledge Studio:

Organization owners decide who can join their organization and what members can see. Members of the same organization can see each other’s name and profile photo, and the content of that organization.

When call transcripts are added to Knowledge Studio, Knowledge Studio redacts personal data in them before storing them.

Knowledge Studio subprocessors

We use the following subprocessors to provide Knowledge Studio. Each processes data only to provide the Services to us, under terms that do not allow it to use customer content to train its models:

Google Sign-In / Google user data

Newo Knowledge Studio lets you sign in with your Google account, and AI Agent Owners may connect Google Workspace services to the Newo platform. This section is our single statement on information received from Google APIs. It explains what we receive from Google, how we use it, and how you can remove it. It applies in addition to the rest of this policy; where this section is more restrictive, this section applies.

What we receive from Google

For Knowledge Studio, we use Google Sign-In (OpenID Connect) only to log you in. We request only the basic sign-in scopes openid, email and profile. With your permission, Google shares with us:

When you sign in to Knowledge Studio, we do not request access to your Gmail, Google Drive, Google Calendar, contacts or any other Google data, and we never receive or store your Google password.

Google Workspace APIs

We explicitly affirm that Google Workspace APIs are not used to develop, improve, or train generalized Artificial Intelligence (AI) and/or Machine Learning (ML) models within our products or services. Where an AI Agent Owner connects a Google Workspace service to the Newo platform, the data received is used only to provide the features the AI Agent Owner has enabled, and the rules under “What we do not do with Google user data” and “Sharing and transfer of Google user data” below apply to it.

How we use Google user data

We use the information received from Google only to:

After you sign in, we keep you signed in with a session. We store only a hashed (one-way encrypted) form of the session token, not the token itself.

What we do not do with Google user data

Sharing and transfer of Google user data

We do not transfer Google user data to anyone, except:

Newo’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion of Google user data

We keep the information received from Google for as long as your Knowledge Studio account exists. You can delete your data at any time with the “Delete my data” button in Knowledge Studio. It deletes your workspace and its data, including sources, articles, transcripts, backups and search indexes. Because Newo keeps no system backups of Knowledge Studio data, no other copies remain, except information we must keep to comply with law, resolve disputes or enforce our agreements. For any other deletion request, including deleting your account and the Google user data associated with it, write to compliance@newo.ai.

You can also remove Newo Knowledge Studio’s access to your Google account at any time at https://myaccount.google.com/permissions. Removing access stops us from receiving new information from Google but does not delete the information we already hold; to delete it, contact us as described above.

If your account belongs to an organization, deleting your account removes your personal profile but does not delete the organization’s customer content, which belongs to the organization and is controlled by its owners.

Other important privacy information

Our policy towards children

The Services are not directed to individuals under 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information. If Data Subjects become aware that a child has provided us with personal information, please contact our support services.

Changes to our Privacy Policy

We may change this privacy policy from time to time. We will post any privacy policy changes on this page and, if the changes are significant, we will provide a more prominent notice by adding a notice on the Services homepages, login screens, or by sending Data Subjects an email notification. We will also keep prior versions of this Privacy Policy in an archive for Data Subject review. We encourage Data Subjects to review our privacy policy whenever they use the Services to stay informed about our information practices and the ways they can help protect their privacy.

If Data Subjects disagree with any changes to this privacy policy, they will need to stop using the Services and deactivate their account(s). To do so, they can contact their AI Agent Owner or administrator, write to us as described in “Contact Us” below, or, for Knowledge Studio, use the “Delete my data” button described in “Retention and deletion of Google user data” above.

Contact Us

If Data Subjects have any questions or concerns about how their information is handled, please direct inquiries to our Data Protection Officer at compliance@newo.ai.

Newo Inc. 2261 Market Street #5263 San Francisco, CA 94114