Privacy, in plain words.
You'll tell Nomo what scares you. That deserves a short, honest policy. Here's the short version, then the long one.
1Who we are
Nomentous is made by DevFIRE WEB SRL, a company registered in Romania (EU). DevFIRE WEB SRL is the controller of your data: we decide what is collected and why, and we answer for it.
Right now Nomentous is a waitlist and an app in private testing. This policy covers this website and the waitlist. When the app opens to the public, we will update this page before it does and tell everyone on the waitlist.
2What we collect
When you join the waitlist, we store exactly this:
| What | Example | Required? |
|---|---|---|
| Your email address | you@email.com | Yes |
| What brings you here | “I sell”, “I'm a founder” or “Asking scares me” | No, only if you pick one |
| Where you came from | The utm_source or ref tag of the link you used, such as “newsletter” | Only if the link had one |
| Timestamps | When you signed up and when you confirmed your email | Yes, automatic |
Double opt-in. Submitting the form doesn't put you on the list yet. We send one email with a confirmation link; you're only on the list once you click it. That way nobody can sign up someone else's address. To make the link work, we store a random code with your entry; the link stops working once it has been used or has expired.
That's all. No name, no phone number, no IP address in the waitlist, no device fingerprint. To keep bots off the form we use Vercel BotID, which checks the browser when you submit the form to tell people from bots. We don't use it, or anything else, to profile you.
We also count page views with Vercel Web Analytics. It is cookieless: it doesn't store anything on your device and doesn't follow you across sites. We only see totals, like how many people visited a page today and from which country.
3Why we collect it
- Your email: to send you one confirmation email right after you sign up, and the launch email when Nomentous opens. That's all you signed up for.
- What brings you here and where you came from: to understand who the app is for and which links bring people in, so we build the right thing.
- Timestamps: to prove you asked and confirmed that you want to be emailed, and to know when your data is due for deletion.
The legal basis is your consent (GDPR Art. 6(1)(a)), which you give by submitting the form and confirming it from your inbox. You can withdraw it at any time; see your rights. Page-view counts rely on our legitimate interest in running a working website (Art. 6(1)(f)).
4Where it lives
The waitlist is stored in our database on Supabase in Frankfurt, Germany (AWS region eu-central-1). Data is encrypted in transit and at rest. The website can only hand your email to our sign-up function; nobody can read the list through the website. Only our own back office can.
5Who helps us
We use a small number of processors. Each one works under a data processing agreement and only on our instructions.
| Processor | What they do | Where |
|---|---|---|
| Supabase | Database that stores the waitlist | Frankfurt, Germany (EU) |
| Vercel | Hosts this website and runs the form; bot check (BotID) | The form runs in Frankfurt (EU); pages are served from Vercel's global network. Vercel is a US company and covers transfers with the EU Standard Contractual Clauses and the EU-US Data Privacy Framework |
| Vercel Web Analytics | Cookieless, aggregate page-view counts | As above |
| Bird | Sends our emails: the confirmation email and, later, the launch email. It receives your email address and the email we send you, nothing else | EU |
6How Nomo uses AI
The waitlist involves no AI at all. In the app, Nomo's messages are written by Google's Gemini models on Google Cloud Vertex AI, through its EU endpoint, so the processing stays in the EU. Under its terms for Vertex AI, Google does not use customer data to train its models. We send only what a message needs.
- Missions are uncomfortable, never unsafe. Nomo will not suggest anything risky, harassing or illegal.
- You can skip any mission and any calibration question.
7What we never do
- No ads, no ad networks, no selling or renting your data. Ever.
- No advertising or cross-site trackers on this site, and no cookies for analytics.
- No newsletters or marketing you didn't ask for. One confirmation email, one launch email, then only what you sign up for. Every email has an unsubscribe link.
- No training of AI models on what you tell Nomo.
8How long we keep it
Once you confirm, we keep your waitlist entry until Nomentous launches, plus 12 months, so we can reach you around launch. Then it is deleted. If you unsubscribe or ask us to delete it, we delete it sooner, within 30 days at the latest.
If you never click the confirmation link, your entry is deleted automatically after 30 days, and we won't email you again.
9Your rights
Under the GDPR you can:
- ask what data we hold about you and get a copy (access and portability),
- have it corrected,
- have it deleted, or withdraw your consent, at any time,
- object to or restrict how we use it.
Email privacy@nomentous.app from the address you signed up with, and we'll answer within 30 days. Every email we send has an unsubscribe link that takes you off the list in one click. You can also complain to your data protection authority; in Romania that is the ANSPDCP (dataprotection.ro).
10Contact
Questions about this policy or your data: privacy@nomentous.app. Anything else: hello@nomentous.app. A real person answers.
Controller: DevFIRE WEB SRL, Romania (EU).