Privacy policy
Last updated: July 2, 2026
How we collect, use, and protect personal information.
We respect your privacy. This policy explains what we collect, why we collect it, who we share it with, and the choices you have, including the rights California residents have under the CCPA and CPRA.
Notice at collection
In short: we collect the information you and your team enter to run your business, plus the usual account and device details, and we use it to provide and improve the service. We do not sell your personal information. Details are below, and you can reach us at privacy@nomadall.com.
Information we collect
Account and identity details (name, email). Business and operational data you enter (customers, leases, jobs, payments, and the like). Worker onboarding details, including tax IDs and bank details, which we encrypt. Payment information, handled by Stripe (we don't store full card numbers). Device, usage, and log data. Communications data such as text, email, and call records tied to your account. Location and address data you provide or that features need.
How we use it
To run and support the service, handle billing, keep it secure and prevent fraud, improve the product, and meet our legal obligations. Plainly: we do not sell your personal information.
AI features and data
Some features use AI, including the Noah assistant. AI works within your own account's data to help you, and a human stays in charge of anything that matters. For the full picture, see our AI page.
Connected accounts (Meta and Google)
If you connect a Meta or Google account in the marketing tools, we access only the platform data needed to run the features you turned on — for example, publishing posts, reading the performance of content you published through us, and managing the ad or business assets you granted access to. We use that data only to operate those features for you, never to build a profile or for any unrelated purpose. You can disconnect an account at any time, which stops all future access; to remove data we've already stored, use the data deletion page. We keep connected-account data only while the connection is active and for as long as the law requires, then delete it.
Sharing and service providers
We share data with the providers we rely on to run the service, each only to do its job: Supabase (database, sign-in, and file storage), Google (AI features), Stripe (payments), Twilio (texts and calls), Resend (email), Firebase and Google Cloud (hosting), Mapbox (maps) and Google (address lookup), and Intuit (accounting sync). We also share personal information when the law requires it. We do not sell it.
International transfers
We process and store data in the United States. The service providers listed above may process data in the United States and other countries. When data moves across borders, we rely on standard safeguards such as the appropriate contractual protections to keep it protected.
Your California privacy rights (CCPA and CPRA)
If you're a California resident, you can ask to know and access the personal information we hold, ask us to delete it, ask us to correct it, opt out of any sale or sharing, and limit how we use sensitive information. We won't discriminate against you for exercising these rights. To make a request, email privacy@nomadall.com. We'll verify your identity and respond within 45 days.
Do not sell or share
We do not sell or share your personal information as those terms are defined under California law. This is our "Do Not Sell or Share My Personal Information" notice: there's nothing to opt out of, because we don't do it.
Global Privacy Control
We honor Global Privacy Control browser signals as an opt-out of the sale or sharing of personal information, even though we don't sell or share it.
Data retention
We keep your data while your account or relationship with us is active, and for as long as we need it to meet legal, tax, and security obligations. After that we delete or de-identify it. For details on requesting deletion, see the data deletion page.
Security
We protect your data with encryption and access controls. See the security page for how it works.
Children
nomadall is business software and isn't directed to children under 16. We don't knowingly collect their personal information.
Changes and contact
We may update this policy. When a change is material, we'll ask you to review and agree again. Questions? Email privacy@nomadall.com.