Privacy Policy

Last updated: July 27, 2025

1. Introduction

Nomas ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial data analysis and research services. By using our service, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us:

• Account Information: Name, email address, password, business name (for business accounts)
• Payment Information: Billing address, payment method details (processed securely by Stripe)
• Profile Information: Account preferences, subscription details, usage history
• Communication Data: Messages, support requests, feedback you send to us

2.2 Automatically Collected Information

We automatically collect certain information when you use our service:

• Usage Data: Pages visited, features used, search queries, API calls
• Technical Data: IP address, browser type, device information, operating system
• Performance Data: Response times, error logs, system performance metrics
• Location Data: General location based on IP address (country/region level)

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: Provide, maintain, and improve our financial data services
• Authentication: Verify your identity and manage your account access
• Payment Processing: Process subscriptions and manage billing
• Rate Limiting: Enforce API usage limits and prevent abuse
• Customer Support: Respond to your inquiries and provide assistance
• Analytics: Analyze usage patterns to improve our service
• Security: Protect against fraud, abuse, and security threats
• Legal Compliance: Comply with applicable laws and regulations

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: Trusted third parties who help us operate our service (payment processing, hosting, analytics)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Safety and Security: To protect our rights, property, or safety, or that of our users
• Consent: With your explicit consent for specific purposes

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption: Data transmitted and stored using industry-standard encryption
• Access Controls: Limited access to personal data on a need-to-know basis
• Secure Infrastructure: Cloud-based security with regular security updates
• Monitoring: Continuous monitoring for security threats and vulnerabilities
• Incident Response: Procedures for responding to security incidents

6. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

• Account Data: Retained while your account is active and for a reasonable period after deactivation
• Payment Information: Retained as required by law and for billing purposes
• Usage Data: Retained for analytics and service improvement (typically 2 years)
• Log Data: Retained for security and debugging purposes (typically 1 year)

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Restriction: Request limitation of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdrawal: Withdraw consent for processing based on consent

To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days.

8. International Data Transfers

Our service is operated from the United States. If you are located outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. We implement appropriate safeguards to protect your information in accordance with this Privacy Policy and applicable data protection laws.

9. Children's Privacy

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected]