Privacy
How NomiTalk handles your information.
NomiTalk provides private one-to-one video calls with live captions and translated speech. This policy explains the information used to operate those calls, protect accounts, take payment, provide support, and improve the customer journey.
The short version
- Live speech must be processed to create captions, translations, and translated voice.
- Room chat and live caption content are held for the active room experience; NomiTalk does not intentionally add full call transcripts to call-history records.
- Saved Voice is optional. Its enrolment clips have a defined 30-day local retention window and can be deleted from Settings.
- Guests do not need accounts, but room, device, network, and security data are still processed.
- Optional analytics, advertising, and Brevo support chat stay off unless the relevant consent is given.
1. Who is responsible
NomiTalk is the controller for personal information handled through this service. The operator’s final legal name, business address, and any required data-protection registration details must be added to this policy before final legal sign-off. Privacy questions and rights requests can be sent to updates@nomitalk.com.
2. Account and profile information
We process information you provide, including name, email address or verified phone number, company name if supplied, password hash, authentication method, language and call preferences, avatar, verification status, sign-in and security records, and optional two-factor authentication details. If you use Google, Apple, or Microsoft sign-in, we receive the identifiers and profile details those providers release to NomiTalk.
3. Guests and room access
A guest may join from a private invite without creating an account. We process the invite and room identifiers, guest role, connection state, IP-derived security information, browser and device capabilities, and call events needed to admit the guest, keep the room to two participants, and prevent misuse.
4. Calls, captions, translations, and chat
Your browser sends audio and video using WebRTC for the live call. NomiTalk relays signalling information needed to establish that connection. When speech features are active, audio is also streamed through NomiTalk for speech recognition; recognised text is translated and may be converted into audio for the other participant. This necessarily exposes the relevant audio or text to the providers named below. Room chat and caption state are maintained for the live room and are cleared from active room memory during room cleanup. Call-history records keep operational details such as room reference, account, timing, duration, funding source, usage, cost, outcome, and optional feedback—not an intentional full transcript or video recording.
5. Saved Voice
If you choose Saved Voice, NomiTalk stores the voice-enrolment clips, file type, duration, progress, provider voice identifier, consent time, status, and audit events needed to create and manage the profile. Enrolment audio is sent to ElevenLabs to create or update the voice. Local enrolment clips are scheduled for removal after 30 days. If subscription access ends, the saved profile can be frozen for 30 days before deletion. A deletion request removes local samples and asks the provider to delete the linked voice; provider-side completion can take longer or require retry if its service is unavailable. Ordinary live call audio is not silently enrolled as a Saved Voice sample.
6. Billing and service records
We store balances, trial and subscription entitlement, top-ups, invoices or checkout references, ledger entries, call usage, and payment status. Stripe processes checkout and card details. NomiTalk receives payment and subscription references and status, but does not receive or store your full card number.
7. Technical and security data
We process IP address, cookies, session token, timestamps, request and rate-limit data, browser and device capabilities, connection and provider diagnostics, error reports, and security events. These records help authenticate users, operate calls, diagnose failures, prevent fraud, and enforce room and account rules.
8. Why we use information
We use account, call, and billing data to perform the service contract; security and fraud-prevention data for our legitimate interests in protecting NomiTalk and its users; consent where required for Saved Voice, optional analytics, advertising, or support chat storage; and records where needed to meet legal, accounting, consumer, or regulatory obligations. You may withdraw consent without affecting processing already carried out, although a feature that needs that information may then stop working.
9. Service providers and transfers
Depending on the feature and configuration, information may be processed by Deepgram for speech recognition, Microsoft Azure Translator for translation, ElevenLabs for speech generation and Saved Voice, Stripe for payment and subscription services, Resend for email, Twilio for SMS verification, and Google, Apple, or Microsoft for optional sign-in. Brevo Conversations is the selected support-chat provider and loads only when configured and the relevant optional consent has been given. Optional Google or Meta marketing integrations may receive consented campaign and conversion data; they do not receive call audio, video, captions, room chat, passwords, or full payment-card data from NomiTalk’s marketing integration. Providers may process data outside the UK or EEA under their contractual transfer safeguards; the precise operator contracts and transfer mechanism require owner/legal confirmation.
10. Cookies, local storage, and marketing measurement
Essential cookies and browser storage keep you signed in, remember theme and call preferences, retain device choices, and protect private rooms. Optional first-party attribution and marketing events record campaign parameters, referral information, landing page, consent choice, and selected journey events only after consent. You can reopen Cookie preferences at any time. Rejecting non-essential storage does not prevent core account or call use.
11. Retention and deletion
Authentication sessions expire after 30 days. Active room state is cleaned after calls end. Saved Voice enrolment clips have the 30-day schedule described above. Account, security, call-usage, payment, ledger, tax, audit, and provider diagnostic records are kept only as long as needed for service, dispute, fraud-prevention, accounting, or legal purposes; exact record-by-record periods require final owner/legal confirmation. The current inactive-account process sends a deletion warning after 23 months of inactivity and schedules deletion 30 days later unless the customer returns or uses the keep-account link. Backups and provider systems may take longer to age out.
12. Your rights
Depending on where you live, you may ask for access, correction, deletion, restriction, portability, or an objection to certain processing, and you may withdraw consent. You can change profile and call preferences, export payment and balance-history data, delete Saved Voice, and manage marketing consent in the product. Contact updates@nomitalk.com for other requests. UK and EEA users may also complain to their local supervisory authority; UK users can contact the Information Commissioner’s Office.
13. Security, children, and changes
We use access controls, hashed passwords, private invite tokens, secure session cookies, rate limits, and operational monitoring. No service can guarantee absolute security, so protect your sign-in and invite links and tell us promptly about suspected misuse. NomiTalk’s minimum age and any parental-consent rule require final owner/legal confirmation; children should not use the service until that rule is published. Material policy changes will be posted here with an updated date and, where appropriate, communicated by email or in-product notice.