NomidPrivacy Policy
Our Privacy Policy describes how we collect, use, and protect your personal information when you interact with our digital channels. We value your privacy and are committed to ensuring that your data is handled with care and respect.
SECTION 1 - WHAT WILL WE DO WITH THIS INFORMATION?
When you create an account, contact us, or use Nomid services, information you provide and information generated by those services may be processed. The categories depend on the service and the permissions in use.
When you access our website, we also automatically receive your computer's internet protocol, IP address, in order to obtain information that helps us learn about your browser and operating system.
Email marketing will only be carried out if you allow it. In these emails, you may receive news about our store, new products, and other updates.
Personal Data We Collect with our apps:
We automatically collect statistical information that may include personal data when you use our products. The data we collect depends on the context of your interactions with us and the choices you make, including your privacy settings, permissions granted, and the products and features you use. We process personal data in a manner that is compatible with the initial purpose of the data collection.
When you use our products, you provide us with data that may include the following:
- Name and contact data. Your first and last name, email address, postal address, phone number, and other similar contact data.
- Credentials. Passwords, password hints, and similar security information used for authentication and account access.
- Demographic data. Data about you such as your age, gender, country, and preferred language.
- Subscription and licensing data. Information about your subscriptions, licenses, and other entitlements to our products.
- Interactions. Data about your use of our products. In some cases, this is data you provide in order to use the products. In other cases, such as error reports, this is data we generate. Other examples of interactions data include:
- Device and usage data: Data about your device and the product and features you use, including information about your hardware and software, how our products perform, as well as your settings. For example, device, connectivity, and configuration data; error reports and performance data; troubleshooting and Help Data.
- Location data: Data about your device's location, which can be either precise or imprecise. For example, we collect location data using Global Navigation Satellite System (GNSS) (e.g., GPS) and data about nearby cell towers and wi-fi hotspots. Location can also be inferred from a device's IP address or data in your account profile that indicates where it is located with less precision, such as at a city or postal code level.
- Feedback and ratings: Information you provide to us and the content of messages you send to us, such as feedback, survey data, and product reviews you write.
- Database information: If you receive technical support for a Nomid product, you may also provide us with database information that contains personal data of third parties such as your employees or clients. We have no control over what you provide to us, nor what steps you have taken to ensure that the data is reliable for its intended use, non-infringing, accurate, complete, and current. If you provide any personal information about any third parties to us, you must have an appropriate legal basis for processing as required by applicable law. You must also provide instructions on how to use that information.
- Data We Process on Behalf of our Customers: The use of information collected through our Services shall be limited to the purpose of providing the service for which the customer has engaged Nomid. Nomid collects information under the direction of its Customers, and has no direct relationship with the individuals whose personal data it processes. If you are a user of one of our Customers and would no longer like to be contacted by one of our Customers that use our service, please contact the Customer that you interact with directly. We may transfer personal data to companies that help us provide our service. Transfers to subsequent third parties are covered by the service agreements with our Customers.An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data should direct his query to Nomid's Customer (the data controller).
- Mobile Apps: When using an app on a mobile device, we may automatically collect information about the device running the app, such as the type of device, the version of the operating system, the device identifier ("UDID") and mobile network information. We may also record information such as how often the app is used, the events that occur within the app, aggregated usage, performance data, any exceptions that occur within the app, and the source from which the app was downloaded.
- Metadata and other information: We may collect metadata and other information to analyze and benchmark your use of our products. We may use that information to generate reports, analyze product usage, administer and improve the products, both for your individual use and our user base as a whole. We may also use the information to improve or create new products and to make recommendations to you and our customers about how to better use our products and services.
SECTION 2 - CONSENT
How do you get my consent?
The reason and legal basis for processing personal data depend on the activity and applicable law. A customer organization determines the purpose of processing data from devices it manages; Nomid also processes data needed to provide and administer its services.
If we ask for your personal information for a secondary reason, like marketing, we will directly ask for your consent or provide you with the opportunity to say no.
And if you want to withdraw your consent, how do you proceed?
If after you provide us with your data, you change your mind, you can withdraw your consent for us to contact you, for the ongoing collection, use, or disclosure of your information, at any time, by contacting us at contato@nomid.tech.
SECTION 3 - DISCLOSURE
We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.
SECTION 4 - THIRD-PARTY SERVICES
In general, the third-party providers used by us will only collect, use, and disclose your information to the extent necessary to allow them to perform the services they provide to us.
When an administrator uses a third-party MCP client with Nomid, the client receives tool requests and results. These can include configuration or credentials provided for a request and enrollment QR data returned by a provisioning tool. The chosen AI service provider, including OpenAI when an OpenAI service is used, may also receive this information. Review the provider's privacy terms.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be used by these providers.
A connected client provider may process information in locations outside your country. Review that provider's privacy notice before connecting its service.
An administrator should consider which device information a client can request and which permissions it needs before granting access.
When you leave the Nomid website or use a third-party client, review that provider's own privacy notice and terms.
Links
Links to external sites may take you to services with separate privacy practices. Review their notices before providing information there.
SECTION 5 - SECURITY
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered, or destroyed.
The public Nomid Portal and API use HTTPS connections. Access to managed-company data requires authentication and is subject to configured roles and permissions.
SECTION 6 - CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.
If Nomid changes ownership, any transfer of personal information must follow applicable law and the relevant agreements.
AI assistant and MCP connections
An administrator can connect an AI assistant or other MCP client to an authorized Nomid company. The connection uses the permissions granted to it to carry out fleet administration requests.
Information a connection can access
Depending on the granted permissions and the request, results can include device identifiers and status, device location, installed apps, policy settings, and organization-provided metadata, which may include personal or confidential business information. Tool requests can include configuration or credentials you provide, such as a Wi-Fi or screen-lock password. A provisioning tool can return enrollment QR data that includes a new enrollment token and may include Wi-Fi credentials. The MCP client receives tool requests and results; the AI service provider you choose, including OpenAI if you use an OpenAI service, may also receive this information. Review the provider's privacy terms before connecting it or sharing information there.
Permissions and actions
A read-only connection can inspect authorized fleet data. Actions that change devices or policies require additional permissions. Review the requested permissions before granting access and before asking the client to make a change.
Manage a connection
An administrator can revoke a connection's access in Nomid. Revoking access stops further requests through that connection; it does not erase information already received by the client or delete Nomid's underlying fleet records. Contact the client provider about copies held by that provider.
Privacy requests
For a privacy request about a managed device, contact the organization that manages it. For questions about Nomid's handling of personal data, use the contact channel below.
SECTION 7 - ADDITIONAL INFORMATION
Company identification: NOMID TECNOLOGIA DA INFORMACAO LTDA.
Purposes of Processing: In addition to the purposes mentioned earlier, your data may be used for consumer behavior analysis, content personalization, and other purposes related to the improvement of our services.
Legal Basis: In addition to consent, the processing of your data may be based on compliance with legal obligations, contract execution, legitimate interest, among other legal bases provided by the LGPD.
Data Subject Rights: You have the right to access, rectify, delete, oppose the processing, and request the portability of your personal data. To exercise these rights, please contact us at support@nomid.tech.
Retention varies by data category. Archiving a device or deactivating a company can leave associated records, including location history, in place; these actions do not by themselves permanently erase the records. AI action proposal records have a configured daily cleanup after 30 days. Expired OAuth authorization records are scheduled for cleanup one day after the relevant token expiry. Routine OAuth client cleanup retains revoked connection grants for at least 365 days and can retain them longer while the client is active; hard deletion of the associated company or user can remove them sooner. The MCP service's reviewed operational log group has a configured 90-day retention period; this period does not cover other log groups or exports. Automated database backups have a configured seven-day period. These are configured periods, not a guarantee that every copy is erased at a precise deadline. Copies held by a connected client or AI provider follow that provider's practices. Contact dpo@nomid.tech with questions or requests about retention and deletion.
Use of Cookies: We use cookies to improve your experience on our website. You can manage your cookie preferences in your browser settings.
Privacy contact: dpo@nomid.tech. Contact this address with questions and requests about personal data handled by Nomid.