Privacy Policy

1. Who we are

Nomon is operated by Gray & Company LLC ("Gray & Co.", "we", "us"). Gray & Co. is the controller of the personal data described in this policy. Contact us at hello@nomon.io.

2. Information we collect

• Waitlist information. If you join the waitlist, we collect your email address so we can contact you about Nomon.
• Account and profile information. When you continue with Google, Nomon receives your stable Google account identifier, name, email address, and basic profile information. Nomon stores the stable identifier so it can recognize your account, but does not retain the short-lived access token from this identity-only sign-in.
• Google Workspace authorization. If you separately connect Google Workspace, Nomon receives encrypted OAuth access and refresh tokens and may read Gmail messages, send email on your behalf, access your calendar list, and read, create, change, or delete calendar events. Nomon does not request permission to modify, label, archive, or delete Gmail messages.
• Service data. When the product is available, we may collect the notes, plans, contacts, preferences, and other content you choose to add, together with limited technical information needed to keep the service secure and reliable.

3. How we use information

We use personal information only to:

• provide authentication and the features you request;
• display and organize information you choose to connect to Nomon;
• send email or manage calendar events when you explicitly request it;
• protect accounts, prevent abuse, and maintain service reliability;
• respond to support, privacy, and security requests; and
• send product updates you requested, with an option to unsubscribe.

Scheduled synchronization and mapping of Gmail messages or Calendar events into Nomon records are not currently active. We will update this policy before using Google data in a materially different way.

4. Google user data

Nomon's use and transfer of information received from Google APIs adheres to theGoogle API Services User Data Policy, including its Limited Use requirements.

We do not sell Google user data, use it for advertising, or transfer it to data brokers. We do not currently send Gmail or Calendar content to AI model providers. We may disclose data to infrastructure or security providers only when necessary to operate Nomon, under contractual confidentiality and data-protection duties, or when required by law.

5. Security

• Connections to Nomon are encrypted with TLS.
• Google OAuth access and refresh tokens are encrypted using the application key.
• Access is limited to the people and systems that need it to operate the service.
• We use safeguards intended to prevent unauthorized access, alteration, or disclosure.

No method of storage or transmission is completely secure, but we review and improve our safeguards as the service develops.

6. Retention and deletion

• Waitlist information is kept until you unsubscribe, ask us to delete it, or it is no longer needed for launch communications.
• Account and profile information is kept while your account is active and as needed to complete a deletion request or meet legal obligations.
• Google Workspace credentials are kept only while the connection is active. Disconnecting Workspace revokes the Google grant and deletes the locally stored API credentials. The stable Google identifier used for sign-in remains unless you delete your Nomon account.
• Nomon does not currently persistently synchronize Gmail messages or Calendar events into Nomon records.

7. Your choices and rights

You may ask to access, correct, export, or delete your personal information by emailing hello@nomon.io. You may disconnect Google Workspace inside Nomon or revoke Nomon's access from your Google Account. You may unsubscribe from non-essential email at any time.

Depending on where you live, local law may provide additional privacy rights. We will not discriminate against you for exercising them.

8. Changes

We may update this policy as Nomon develops. We will post the revised policy here and update the date above. If a change materially affects how we use connected Google data, we will provide additional notice before it takes effect.

9. Contact

Questions or privacy requests can be sent tohello@nomon.io.