1. Introduction
Welcome to Nomo ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered meeting transcription service.
By using Nomo, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our service.
2. Information We Collect
2.1 Personal Information
- Email address (for account creation and communication)
- Name (if provided during registration)
- Payment information (processed securely through Polar.sh)
- Profile information (optional)
2.2 Audio Content
- Meeting recordings you upload for transcription
- Generated transcripts and meeting notes
- Audio metadata (duration, format, file size)
2.3 Calendar Integration Data (Beta Feature)
- Google Calendar event information (titles, times, locations, meeting URLs)
- Google OAuth tokens (access and refresh tokens, stored encrypted)
- Connected Google account email address
- Attendee information from calendar events
- Bot scheduling and joining status for automated transcription
2.4 Usage Data
- How you interact with our service
- Features you use and frequency of use
- Device information and browser type
- IP address and general location data
3. How We Use Your Information
- Service Delivery: Process your audio files and generate transcriptions
- Account Management: Create and maintain your account
- Payment Processing: Handle credit purchases and billing
- Communication: Send service updates and support responses
- Improvement: Analyze usage to improve our service
- Security: Protect against fraud and unauthorized access
4. Data Storage and Security
4.1 Audio File Handling
- Audio files are encrypted during upload and processing
- Original audio files are automatically deleted after transcription
- Only processed transcripts are retained
- All data is stored on secure, encrypted servers
4.2 Data Protection Measures
- Industry-standard encryption (SSL/TLS)
- Regular security audits and updates
- Access controls and authentication
- Secure data centers with physical security
5. Data Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:
5.1 Third-Party Service Providers
We work with trusted third-party providers to deliver our service:
- Supabase: Database hosting, authentication, and user data storage
- Polar.sh: Payment processing and billing as our Merchant of Record
- OpenRouter: AI-powered audio transcription processing
- Google Calendar API: Calendar integration for automated meeting transcription (opt-in, read-only access)
- Attendee.dev: Meeting bot scheduling and automated transcription services
- Google Analytics: Anonymous usage analytics to improve our service
5.2 Other Disclosures
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or asset sale
- Consent: When you have given explicit consent
6. Your Rights and Choices
- Access: Request access to your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your account and data
- Portability: Request a copy of your data
- Opt-out: Unsubscribe from communications
To exercise these rights, contact us at support@whiletruelab.com
7. Data Retention
- Account data: Retained while your account is active
- Transcripts: Retained until you delete them or close your account
- Usage data: Retained for up to 2 years for service improvement
- Payment records: Retained as required by law (typically 7 years)
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience and understand how our service is used.
8.1 Types of Cookies We Use
- Essential Cookies: Authentication and session management (Supabase)
- Analytics Cookies: Google Analytics (GA4) to understand usage patterns and improve our service
8.2 Managing Cookies
You can control cookies through your browser settings. However, disabling essential cookies may affect service functionality.
To opt out of Google Analytics tracking, visit: Google Analytics Opt-out
9. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
10. Children's Privacy
Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.
11. Updates to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
12. Contact Us
If you have questions about this Privacy Policy, please contact us: