Privacy

Nomi is run by Mohamed Oumaali, personally: there is no company behind it yet. On these pages, “we”, “us” and “our” mean Mohamed Oumaali.

Nomi is the assistant a business uses to answer the people who write to it on Instagram, Facebook Messenger, WhatsApp and e-mail. This page says what is kept when you write to a business that uses it, why, and how to have it removed. “We” on this page is Nomi’s operator, who runs the service for the business. Further down, it says the same for the people who use Nomi at a business.

When you write to a business that uses Nomi, its replies are drafted by an AI assistant, and depending on the business’s settings they may be sent to you without a person reviewing them first. You can ask for a person at any point in a conversation.

What is kept

When you send a message to a business that uses Nomi, we keep the message, any picture or file you attach, the name shown on your account, the identifier the platform gives us for your account, and the time it arrived. If the business writes to you by e-mail with your consent, your e-mail address and the messages exchanged are kept in the same way.

If you write on Instagram or Messenger, we also keep your profile photo as that platform shows it, so the business sees your face beside your messages. It is updated about once a month while the business’s Instagram or Messenger account stays connected to Nomi; if that account is disconnected, the last copy is kept, not updated. It is deleted with the rest of your data.

If you write on a business’s chat page, what you write and its replies are kept like any other conversation with that business. The page keeps one cookie in your browser, so it shows you your own conversation and nobody else’s; clearing it starts a new one. On the business’s own website, the chat keeps that handle in the website’s own storage instead.

Why

So the business can read your message and answer it. Replies are drafted by Nomi and, depending on how the business set it up, sent after a person there approves them. Your messages are not used to advertise to you and are not sold.

Who sees it

The business you wrote to, and the services it takes to carry and answer your message:

• Meta, which carries Instagram, Messenger and WhatsApp messages between you and the business.
• Telegram (Telegram Messenger Inc.), which carries the messages you send a business through Nomi’s Telegram account, and its replies. They pass through Telegram’s servers, under Telegram’s own privacy policy.
• OpenAI (USA), whose language service drafts replies from the conversation: its text, and any picture you send in it. Your messages and pictures are processed there.
• OpenAI (USA) also writes the answers of Nomi’s advisor: when someone at the business asks the advisor about their records, the question and the records that answer it, such as customers’ names, amounts and dates, are sent there to phrase the answer. Nothing the advisor writes is sent to you. Nomi keeps the advisor conversations of a person at the business only if that person allows it, as described below.
• OpenAI (USA), which turns voice messages into text so they can be read and answered. Voice messages are processed there.
• Railway (USA), the hosting provider the service runs on. The records are stored there. Railway (USA) also logs each visit to Nomi’s pages: the page’s address without anything after a “?”, the internet address and browser the visit came from, and the time. Nomi can read these logs for a week; Railway (USA) may keep them longer.
• If the business connected a mailbox, the mail provider it uses (Google or Microsoft) carries the e-mail.
• Resend, which delivers the e-mails Nomi sends to the people who run a business: sign-in codes, password links and alerts. These e-mails name no customer and carry none of your messages.
• Cloudflare Turnstile, which checks on Nomi’s sign-up form that a person, not a script, is signing a business up. It never sees your messages.

Nobody else.

How long

It is kept so the business can see what was agreed with you, such as a price or an order, with no set end: it stays until the business deletes it, which you can ask it to do, or closes its workspace, which erases everything in it. No timer deletes it. If the business stops paying for Nomi, its workspace is frozen: Nomi stops answering, and what you send the business from then on is not kept in Nomi; what was there stays as it was, and the business can still delete it. While a message is being handled, Nomi’s work queue holds a copy of it too; that copy is deleted about a week after the work is done, and at once if your data is deleted. What a deletion removes, and what it keeps, is on the page “Delete your data”.

One exception: if you appear in a business’s accounts in Nomi, for example on an invoice made out to you, those entries are part of its legal accounting record, and are kept as the deletion page explains.

Your choices

You can ask the business for a copy of what is kept about you, or ask for it to be deleted as the page “Delete your data” describes. Every first e-mail and follow-up the business sends you through Nomi carries the business’s postal address and a link that stops anything more being sent to that address until you write to the business again. A reply to an e-mail you wrote first shows neither, though your mail program may still offer you a way to unsubscribe, which does the same.

The advisor’s history

If you allow it, Nomi stores your questions to the advisor, its answers and the records each answer drew on (such as a customer’s name, an amount or a date), so you can come back to them and ask follow-up questions. Nothing is stored unless you allow it, and each person at the business decides for themselves.

This rests on your consent, given or refused on the advisor’s page and withdrawn at any time in Settings. Withdrawing it deletes your whole advisor history from Nomi at once; deleting a conversation deletes that conversation at once. Your history is also deleted when the business’s owner deletes it (unread), when the owner switches the advisor’s history off for the business, when you leave the team, and when the workspace is closed. Backups are encrypted and used for nothing but restoring the service: Nomi keeps its daily backups for 60 days and any other for at most 180 days; a copy we keep on our own computer to test restoring follows the same rule each time the backup tools run there; and the hosting provider’s own recovery archive keeps about the last four weeks. A conversation not opened for 12 months is deleted.

To word each answer, the question and its records are sent to OpenAI (USA). What a provider keeps is governed by its own terms, and Nomi cannot delete a provider’s copy: OpenAI keeps what is sent to its service for up to 30 days to monitor abuse, and does not use it for training unless the account opts in.

No one at Nomi reads stored advisor conversations, and they are never used for training. They are stored encrypted, and the tools Nomi’s operator uses cannot open them. This is a commitment backed by those safeguards, not a technical impossibility: the service that answers you has to read your history to use it. What is not encrypted: when each question was asked, by whom, and which of the business’s customers it named, so that a customer’s deletion can find it.

A customer who asks for their data to be deleted is also deleted from advisor conversations that name them. Each question that names them goes with its answer, and a conversation that keeps other questions loses its title. A customer named only in your own words, with no record behind them, may not be found; you can delete that conversation yourself.

If you use Nomi at a business

What is kept about you: your name and the e-mail address you sign in with; your password, only as a one-way hash; the browsers you confirmed, and a record of each sign-in code sent to you, the code itself only as a hash; the number and channel you chose for alerts, and the devices that receive them; when you accepted the terms, and that you confirmed you are an adult (not your age); a one-way hash of the internet address a sign-up came from, to slow repeated sign-ups, for at most three days; and your advisor history, only if you allow it. For your business: its details, including its postal address.

For a team member: the name, the access code only as a hash, and when they were last active, which the owner sees.

To run the account: to sign you in, to tell you when something needs you, and to keep your business’s records.

When a business signs up, Nomi checks that it is not the same person taking a second free trial. It compares four things, each kept only as a one-way code: a cookie the sign-up form leaves in the browser; a fingerprint of the browser, made from what it sends with every request (its kind and version, its languages, its platform), together with its network; the network itself (the first part of the internet address); and the e-mail address as a mailbox (without dots or a “+tag”). A sign-up that shares them with a workspace signed up in the last 180 days, or that comes many times in a day, is asked for a card before its first channel instead of having a free trial, or is not opened on its own and is shown the address below, to reach a person. Nothing else is decided this way. The codes are kept for 180 days, even after a workspace is closed, and are used for nothing else; an attempt’s are forgotten after two days.

Who receives it: Resend, which carries Nomi’s own e-mail (your sign-in codes, password links and alerts); Meta, when an alert goes to your phone on WhatsApp; OpenAI (USA), when you ask the advisor a question; Railway (USA), where it is stored; and the mail provider of a mailbox your business connects (Google or Microsoft). Cloudflare Turnstile sees the sign-up form when a business is signed up, and the internet address it is sent from, to check that a person, not a script, is doing it. Stripe (Stripe, Inc.) takes the card of the person who pays for Nomi and bills the business for it: the card’s details are typed on Stripe’s own page, go to Stripe directly and never through Nomi, and Stripe keeps them under its own privacy policy. Stripe sees no customer and none of your messages. The push service of the browser or phone you turned alerts on in (Apple, Google or Mozilla) carries Nomi’s alerts to that device. Each alert is encrypted on the way, so the service cannot read it; it sees only that an alert was sent and when. Nobody else.

For as long as your workspace exists, whether or not its subscription is paid. When a subscription ends, the workspace is frozen, not deleted: nothing is sent or received, and you can still sign in, read everything, download a copy and close the workspace; renewing brings it back exactly as it was. No timer deletes it. Closing the workspace erases everything in it, every login included, except the sign-up’s one-way codes (above), which go when their 180 days are up. A sign-up never finished is forgotten within a day of its code expiring. A removed team member can no longer sign in; their name stays beside what they did until the workspace closes. Everything else of theirs goes when they are removed: the access code, their sign-in, their devices and when they were last seen. A sign-in replaced by a new one, a device no longer used and a mailbox disconnected keep nothing that identifies you or opens your account. Your business’s books, if it keeps them in Nomi, are kept longer: see below.

Your business’s records can be downloaded from Settings, “Your data”. What is kept about you yourself (your account, sign-in devices and alert settings) is not in that download yet: ask us at the address below for a copy.

To delete everything, the owner closes the workspace, also in “Your data”. The owner removes a team member on “Who works here”. For anything else, write to us.

If your business keeps its books in Nomi

A business can keep its accounts in Nomi: its entries, its invoices, and the receipts and bills behind them, with the companies and people they name (its customers, its suppliers, a person named on a receipt). Only the business’s owner and an accountant the owner adds can see them; the business’s staff cannot.

If the owner connects the business’s own Odoo, Nomi reads the accounts there (entries, accounts, journals, taxes, and the customers and suppliers they name) into the books, and writes the entries posted in Nomi back to it. It does so with a key the owner creates in Odoo and can delete there at any time. Odoo is a service the business itself uses, under the business’s own terms with Odoo.

When the owner asks Nomi to read a receipt, invoice or bill, the document is sent to OpenAI (USA), which reads it so that Nomi can prepare an entry. Documents are processed there. Nothing is posted until the owner posts it.

The books are the business’s legal accounting record, so they are not kept like everything else. While the workspace is open, they stay in it. Before the owner can close the workspace, Nomi requires a downloaded copy of the books and of every paper. Then everything else is erased at once, and the books and papers are kept, switched off, for as long as the law of the business’s country requires, counted from the end of the last financial year with a posted entry, then erased.

How long that is, by the business’s country:

• United Kingdom: six years (Finance Act 1998, Sch. 18, para. 21; Value Added Tax Act 1994, Sch. 11, para. 6).
• France: ten years (Code de commerce, art. L123-22).
• Morocco: ten years (Code général des impôts, art. 211).
• Spain: ten years. The tax office can check losses and deductions carried forward for ten years (Ley General Tributaria, art. 66 bis), and Nomi cannot tell which businesses carry any forward.
• United States: seven years, Nomi’s own choice — the period commonly cited for federal tax records.
• Every other country: ten years, the longest period Nomi knows of.

A file imported as history is kept whole, until the date its newest entry requires. A file cannot be split, so its older entries are kept longer than their own date would need.

Cookies

Nomi sets only the cookies it needs to work: to keep you signed in, to remember your language, to show a notice once after you save something, to recognise a device you have confirmed, to hold a sign-in, a password-setting link or a connection while it is in progress, to show a team member’s access code once, to remember for a day that a browser was told the minimum age to sign up, and, on the sign-up form only, to recognise a browser that signs up again, which stops repeated free trials. None comes from an advertiser or an analytics service, and none is used for anything but what it is listed for, so there is nothing to agree to.

Only where the sign-up form is shown, the check that a person, not a script, is signing up (Cloudflare Turnstile) may set its own cookie for that check.

Delete your data · Terms of service

How to reach us

Write to privacy@nomidoes.com.

Or ask the business you wrote to, with a message from the account you used.

Last updated 5 November 2026.