Privacy Policy
Last updated: December 22, 2024
1. Introduction
Montane LLC ("Company," "we," "us," or "our") operates Nomely.ai (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with our policies, please do not use the Service.
2. Information We Collect
2.1 Personal Information You Provide
We collect information you voluntarily provide when using our Service:
- Account Information: Email address, full name, and password (when registering via email).
- Google OAuth Data: When you sign in with Google, we receive your email address, name, and profile picture from Google.
- Contact Information: Any information you provide when contacting us through our support form.
2.2 Information Collected Automatically
When you use our Service, we automatically collect certain information:
- Search History: Names you search for, domains checked, and AI generations requested.
- Favorites: Names you save to your favorites list.
- Usage Statistics: Number of searches, generations, and other feature usage metrics.
- Device Information: Browser type, operating system, and device identifiers.
- Log Data: IP address, access times, and pages viewed.
- Cookies and Similar Technologies: We use cookies to maintain session state and improve user experience.
2.3 Payment Information
Payment processing is handled by Stripe. We do not store your full credit card number, CVV, or other sensitive payment data on our servers. Stripe provides us with:
- Last four digits of your card
- Card brand (Visa, Mastercard, etc.)
- Billing address (if provided)
- Subscription status and payment history
3. How We Use Your Information
We use the information we collect to:
- Provide the Service: Generate AI-powered name suggestions, check domain availability, and verify social media handles.
- Manage Your Account: Create and maintain your user account, process subscriptions, and authenticate your identity.
- Improve the Service: Analyze usage patterns to enhance features, fix bugs, and develop new functionality.
- Personalize Experience: Remember your preferences, favorites, and search history.
- Process Payments: Handle subscription billing and payment processing through Stripe.
- Communicate: Send service-related notifications, respond to inquiries, and provide customer support.
- Marketing: With your consent, send promotional emails about new features and offers. You can opt out at any time.
- Legal Compliance: Comply with legal obligations and enforce our Terms of Service.
4. How We Share Your Information
We do not sell your personal information. We may share your information with:
4.1 Service Providers
- OpenAI: Your keywords and preferences are sent to OpenAI to generate name suggestions. OpenAI processes this data according to their Privacy Policy.
- Stripe: Payment information is processed by Stripe according to their Privacy Policy.
- Supabase: Our database and authentication provider, hosting data in secure, SOC 2 compliant infrastructure.
- Namecheap: Domain availability queries are sent to Namecheap's API.
- Apify: Social media handle availability is verified through Apify's services.
- Resend: Email delivery service for transactional and marketing emails.
- Redis (Upstash): Caching service to improve performance.
- Google: OAuth authentication provider.
4.2 Legal Requirements
We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you the Service. Specifically:
- Account Data: Retained until you delete your account.
- Search History: Retained for 12 months for service improvement, then anonymized or deleted.
- Payment Records: Retained as required by tax and accounting laws (typically 7 years).
- Log Data: Retained for 90 days for security and debugging purposes.
6. Your Rights and Choices
6.1 Account Management
- Access: View your personal data through your account settings.
- Update: Modify your account information at any time.
- Delete: Request deletion of your account and associated data by contacting us.
6.2 Marketing Communications
You can opt out of marketing emails by clicking the "unsubscribe" link in any email or by updating your preferences in account settings.
6.3 Cookies
Most browsers allow you to control cookies through their settings. Note that disabling cookies may affect the functionality of the Service.
6.4 Do Not Track
We do not currently respond to "Do Not Track" browser signals.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of data in transit (TLS/SSL) and at rest.
- Secure password hashing using industry-standard algorithms.
- Regular security audits and vulnerability assessments.
- Access controls limiting employee access to personal data.
- Use of reputable, SOC 2 compliant service providers.
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your own. Our service providers may be located in the United States and other countries. By using the Service, you consent to the transfer of your information to these countries.
9. Children's Privacy
The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will delete that information promptly.
10. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: Request information about the categories and specific pieces of personal information we have collected about you.
- Right to Delete: Request deletion of your personal information, subject to certain exceptions.
- Right to Opt-Out: We do not sell personal information, so this right does not apply.
- Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise these rights, please contact us at privacy@nomely.ai.
11. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, please see our GDPR Compliance page for information about your additional rights under the General Data Protection Regulation.
12. Third-Party Links
The Service may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to review the privacy policies of any third-party sites you visit.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.
14. Contact Us
For questions or concerns about this Privacy Policy or our data practices, please contact us at:
- Email: privacy@nomely.ai
- Contact Form: nomely.ai/contact
Montane LLC
United States