Privacy notice

The controller of the data described here is Nomolex, Nicosia, Cyprus.

Legal information, not legal advice. Nomolex is not a law firm or an advocate, and using it creates no advocate–client relationship.

• Your account: the email address, name and profile picture your sign-in provider gives us (Google, or the email and password you choose), your time zone, your language and appearance choices, and the records of what you confirmed: that you are 18 or older, that you accepted the Terms, that you consented to sensitive details and to AI assistance, and that you read the AI notice, each with its date and, for the consents, the language and a fingerprint of the exact text you were shown. Every change to these records (a consent given or withdrawn, the AI notice read) is also kept in a consent history, with its date, version and fingerprint, for 400 days, because a new version of the Terms or of a consent replaces the record above.
• Your matters: the questions you ask, the text of the documents you upload or paste (never the file itself), the answers and reviews Nomolex shows you, and the drafts you fill in, kept until you delete them or until 12 months after you last used the matter. The extracted text of an uploaded document is deleted 90 days after you upload it.
• AI usage records: for each AI request, the time, the model, token counts, cost and outcome, never the text, kept for 14 days; daily totals per account for 90 days; the monthly allowance counters of your plan for as long as the account exists; and daily totals without any account identity for up to 400 days.
• Technical logs: the time, address and browser of requests, and error reports made of codes and identifiers only, kept for a short period to keep the service running and secure. The text of your questions, documents and drafts never appears in a log.

• To run the product for you: show you your data, save your changes and keep it available to you.
• To answer your questions and review your documents with AI assistance, which only happens after you allow it (see below) and which you can switch off again at any time.
• To keep the service secure and within its limits (the usage records and technical logs above).
• We do not sell your data, show ads, or use advertising or analytics cookies.

When you use AI assistance, Nomolex sends text to AI models by Anthropic and Google, served through OpenRouter on google-vertex/europe and google-vertex/eu, with OpenRouter's data_collection: deny routing and no prompt logging at OpenRouter. OpenRouter, Inc. (USA) acts as our processor and routes each request; Google Cloud Vertex AI in EU regions runs the models. Google may retain prompts flagged by its abuse monitoring for up to 90 days. The providers we use do not train on your text.

What crosses to the providers: your questions and the text of the documents you upload or paste. Before any of it is sent we replace e-mail addresses, phone numbers, links and your account name with placeholders. We cannot recognise every personal detail: other details in that text, such as a postal address, are sent.

What never crosses: your account e-mail and the uploaded file itself.

We ask for your permission before the first AI action. You can withdraw it at any time in Settings; your saved matters stay available without AI. If the companies that process your text, or what we send them, change, we ask for your permission again before using AI.

Sensitive details. Please describe your situation in general terms and leave out details about health, beliefs, family situation or similar where you can. Nomolex tries to stop such details before they are processed. If some get through, they are handled as described in the consent you give before your first matter, which you can withdraw at any time in Settings.

Questions about criminal matters are not processed or stored: you see general information about your rights and where to find legal aid instead.

Your data is stored with Google Cloud (Firebase) in the European Union (Firestore, multi-region eur3; the app runs in europe-west4). Only the Nomolex server code reads or writes it; your browser never talks to the database directly.

• A matter and everything in it is deleted 12 months after you last used it. The matter shows this, and you can delete it sooner at any time.
• The extracted text of an uploaded document is deleted 90 days after you upload it. A review keeps only the short quotes it shows.
• Deleting your account (Settings) erases everything above and your sign-in, normally within about an hour. We first ask you to sign in again, so that a forgotten open session cannot erase your work.
• Deleted data remains in encrypted backups for up to 7 days. If a backup ever has to be restored, the erasure is repeated automatically.

Settings offers a download of everything we hold about you, in a machine-readable file with one record per line: your profile, your consent records and their history; your matters with every question and answer in them; the stored text of the documents you uploaded or pasted (never the file itself); your reviews and your drafts; and your usage and AI call records.

Nomolex sets three strictly necessary cookies: __session, which keeps you signed in for up to 14 days; theme, which remembers whether you chose light or dark mode on this device (for up to a year); and lang, which remembers your language on this device (for up to a year). There are no tracking cookies.

Your data is private to your account. There is no way to share it with anyone else today; if sharing with an advocate is added, it will need your separate consent and this notice will be updated first. The AI providers named above process text on our instructions only.

You can see and edit your data in the app, download it, withdraw your consents, and delete your whole account from Settings. You can also complain to the data-protection authority of the country where you live (in Cyprus, the Commissioner for Personal Data Protection).

Questions about this page: hello@nomolex.io