Privacy Policy

We collect contact and account information such as your name, email address, authentication details, and support communications.

We process user content needed to provide Nombo, including messages, prompts, instructions, chat history, files, photos, audio, support content, browsing or search activity you ask Nombo to perform, connected-service content, and tool inputs and results. This content may contain personal information about you or others.

Nombo does not collect your phone number as an account profile field. Its phone features process Nombo's provisioned agent number and phone numbers supplied for requested calls or texts or associated with inbound communications.

We collect product interaction and other usage data, device and app identifiers, crash reports, performance information, and other diagnostics. We do not use advertising identifiers. Desktop and mobile product analytics do not use automatic tap or screen capture or session replay.

We use information to provide and personalize Nombo, authenticate users, execute requested tasks, operate connected services, communicate with you, secure and troubleshoot the service, prevent abuse, analyze product performance, improve quality, and comply with legal obligations.

We do not sell personal information, share it for cross-context behavioral advertising, or use it for advertising. We do not engage in tracking as Apple defines that term, including linking Nombo data with third-party data for targeted advertising or sharing it with data brokers.

Product analytics and AI diagnostics are part of how we operate and improve Nombo; they are not optional and there is no separate opt-out. PostHog receives product interaction and usage events associated with your account. Desktop and mobile product analytics do not use session replay or automatic tap and screen capture.

Braintrust receives AI traces that may include your prompts, model responses, tool inputs and results, and model-visible attachments, used for debugging and quality improvement. This content may contain personal information about you or others. These providers process this information on our behalf under data-processing agreements.

On our website at www.nombo.ai we use PostHog and Google Analytics to understand traffic, acquisition, and actions such as starting a trial, opening checkout, and choosing an app download. These services process information including your IP address, approximate location, device and browser type, referring page, campaign attribution, and page interactions. After website sign-in, PostHog associates the visit with your account identifier, name, and email address.

PostHog records sessions on our first-party website so we can understand funnel problems and improve the experience. We mask all form inputs and displayed account names and email addresses, remove query strings and fragments from captured URLs, and do not record request or response bodies, request headers, console logs, or errors. External Google, Apple, and Stripe pages are not part of these recordings. We do not enable Google Signals, advertising features, or ad personalization, and we do not use either service to serve advertising.

PostHog provides Nombo’s product analytics, website analytics, and first-party website session replay. Read PostHog’s privacy information.

Google Analytics user-level and event-level website analytics data is retained for no more than 14 months; aggregated reporting data may be retained for longer.

We use PostHog for product analytics, Google Analytics for website analytics, Braintrust for AI tracing and diagnostics, Sentry for crash and error diagnostics, and BetterStack for operational logs. PostHog also provides website analytics and website session replay. These providers receive account identifiers and the information described above where correlation is necessary to operate and improve Nombo. Crash and error diagnostics may include account identifiers such as your user id, name, and email address. We do not send these providers advertising identifiers.

We also disclose information as needed to providers that support hosting and storage, AI model processing, authentication, Expo push notifications, connected services you authorize, including connected Slack workspaces and Salesforce organizations and user-authorized Sentry organizations, and communications such as email and phone services. Connected Sentry access is separate from the Sentry crash and error diagnostics described above. We separately use a private Slack channel for account-deletion request notifications. Providers process information on our behalf or under your instructions and may have their own terms and privacy policies.

We may also disclose information when required by law, to protect rights, safety, and security, or in connection with a merger, financing, acquisition, or sale of assets. We do not disclose personal information to data brokers.

Nombo may receive inbound text messages from people who choose to contact Nombo. We use those messages and phone numbers to route the requested workflow and send conversational replies related to that message. Nombo does not use text messages for marketing blasts, promotions, purchased contact lists, or unsolicited campaigns, and does not share text-message opt-in information for another party's marketing.

The first direct outbound message identifies Nombo and includes opt-out instructions. Later replies continue the requested conversation without repeating that notice. Reply STOP to unsubscribe or HELP for help. We keep records needed to honor opt-out requests.

Braintrust content traces and BetterStack operational logs are retained for no more than 30 days. PostHog website session recordings are retained for no more than 30 days, and PostHog analytics events are retained for no more than 12 months. Provider configuration or deletion processing may make information unavailable sooner.

We otherwise retain account information and user content while your account is active and as reasonably necessary to provide Nombo. After deletion, we may retain narrowly limited records when required by law, security, fraud prevention, dispute resolution, or enforcement obligations. We use administrative, technical, and organizational safeguards, but no internet or storage system is completely secure.

You may request access, correction, export, or deletion of your information by contacting us. You can stop Nombo text messages by replying STOP.

You can request account deletion inside the app. The request is sent to a private operations channel and does not immediately delete or disable your account. Your account remains usable while the request is pending. Our team completes the deletion manually, targets completion within seven calendar days, and emails you after it is complete, subject to narrow legal and security retention exceptions.

The initial public release is intended for United States users. We will review consent, international transfers, and regional rights before expanding App Store availability to the European Economic Area or United Kingdom.

We may update this policy as Nombo or its providers change. We will update the date above and provide additional notice when required by law.

If you have questions or a privacy request, contact us at contact@nombo.ai.