Privacy Policy

Who we are

Nomo creative LLC, a limited liability company registered in Wyoming, USA. Address: 30 N Gould St Ste R, Sheridan, WY 82801, USA. Privacy contact: info@nomo-creative.com.

What we collect

What you send us. When you submit a form on this site, for example to request a free AI check, we collect your name, email address, and, if you provide it, your company website URL. Submissions are delivered to our business email.

Your client account. If your firm becomes a client, we hold an account for you: your name, work email, firm name and the settings you choose in your dashboard. Sign-in is handled by Supabase, our database provider. We never see or store your password.

Brand material you give us. Logos, images, documents and any voice recording you upload so we can write in your own words. We use these only to produce your content. We do not use them to train any model, we do not share them with other clients and we do not license them to anyone.

Accounts you connect. If you ask us to publish for you, you authorise us through LinkedIn's or Instagram's own consent screen. We then store an access token for that account, along with your profile or page name and identifier, so we know where to publish and can show you that a post went out. We hold these tokens encrypted, we use them only to publish and to read back the posts we ourselves published and we never post anything you have not commissioned. We do not read your private messages, we do not collect your contacts or connections and we never use platform data for advertising or sell it to anyone.

YouTube, if you connect it. We publish Shorts through YouTube API Services. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. You connect on Google's own consent screen, which asks to upload videos to your channel and to see your channel's name. We store the access Google gives us, encrypted, along with your channel's name and identifier. We use it only to upload the videos you approved and to show you that they went out, and we keep the identifier of each video we uploaded. We do not read your other videos, comments, subscribers or analytics, we place nothing on your device through YouTube and we share none of it with anyone. You can revoke our access at any time on Google's security settings page, myaccount.google.com/connections. When you revoke it, cancel or ask us, we delete the stored access and your channel details within 7 days.

Your website, if you connect it. If you ask us to place articles on your own website, you connect it yourself. For WordPress you approve an application password from your own WordPress admin. For Webflow you approve our app on Webflow's own consent screen, which asks to read your site list and to read and write your CMS collections. We store the access that gives us, encrypted, along with your site's address and the collection we write to. We use it only to add the articles you approved and to confirm they arrived. They arrive as drafts unless you switch on publishing straight away. We do not change your design or your pages, we do not read your forms or your site's visitors and we never touch content we did not write. You can revoke it any time. In WordPress it is under Users, Profile, Application Passwords. In Webflow it is under your site's Apps and Integrations settings.

Payment. Billing runs through Stripe. We see your firm name, billing email, amounts and dates. We never see or hold your card details.

Analytics. We use cookieless, privacy-friendly analytics (Plausible). It gives us aggregate page statistics only: no cookies, no cross-site tracking, no personal profiles. That is also why this site shows no cookie banner: there is nothing to consent to.

Your face, on Autopilot. If you choose Reels with your own face, you send us photos of yourself and tick that we may use them. We use them only to make AI videos for your own accounts, each labelled as made with AI. Withdraw your consent in your portal or by email and we make nothing new with them; ask and we delete the photos.

Ads on Meta. If you arrive on our Autopilot page from one of our ads on Instagram or Facebook, your browser keeps the ad's click reference for 7 days. If you then sign up, our server tells Meta that the click led to a sign up, with the click reference and your email address scrambled (hashed) so Meta can match it to its own records without reading it. We use no Meta pixel and no cookie for this, and we use it only to know which ads work.

Partner links. If you arrive through a partner's link, your browser keeps that partner's short code for 60 days, so the partner is credited if you start a plan. It stays in your browser and is sent only with the start form. It says nothing about you.

Hosting logs. Our hosting provider (Netlify) processes standard technical logs, such as IP address and browser type, to deliver the site securely and reliably.

How we use your information

To respond to your request, prepare the audit you asked for and communicate with you about our services. For clients, to produce and publish the content you commissioned, to run your dashboard and to bill you. For visitors in the EEA and UK, our legal bases are your consent (when you submit a form or connect an account) and our contract with you (when you are a client).

Who we share it with

Only the service providers that run this service: Netlify (hosting and form delivery), Supabase (database, sign-in and file storage), Stripe (payments), Plausible (analytics), our email provider and the platforms you choose to connect, meaning LinkedIn, Meta and Google (YouTube), which receive the posts you approved. If you connect your website, WordPress or Webflow receive the articles you approved. We never sell personal information, we run no advertising trackers and we share nothing with data brokers.

Where your data is processed

In the United States and in the EU where our providers host infrastructure there.

How long we keep it

Form submissions are kept as long as needed to handle your request and for ordinary business records. Client accounts, uploads and content are kept for as long as you are a client. When you cancel or ask us to delete, we remove them within 30 days and backups roll off within a further 30 days. Access tokens for connected accounts are deleted immediately on cancellation, on request or when you revoke access from inside LinkedIn, Instagram, YouTube, WordPress or Webflow. We keep invoices for as long as tax law requires.

Full detail, including exactly what goes and how to ask, is on our data deletion page.

Your rights

You can request access to, correction of or deletion of your personal information at any time: info@nomo-creative.com. Visitors in the EEA and UK have the rights provided by the GDPR, including the right to complain to a supervisory authority. California residents have the rights provided by the CCPA; we do not sell personal information.

Children

This site is not directed to children under 16 and we do not knowingly collect their data.

Changes

If this policy changes, we will update this page and the effective date above.