Version 1.39 · in force · 7 November 2026
Nonimo redacts data on your computer: the text the app analyses never reaches us. Here we set out what data we do process, what for, and how to exercise your rights.
Llevant Group Pty Ltd, an Australian company, ABN 17 691 906 751, of 1A Bruce Street, Kensington VIC 3031, Australia, is the controller of the information on this page. For any privacy matter: hello@nonimo.ai. This page serves people and organisations in Australia, the United Kingdom, Ireland and the rest of the European Union, and the United States. Write to that address from anywhere.
The text the app redacts, the details it finds in it, your documents and photos, your conversations and the terms in your vocabulary stay on your computer. So it can put your real details back into the reply, the app keeps the current conversation encrypted on the computer itself, and it can no longer be opened after thirty days without use. The browser extension works with the app on your computer and does not send us your text either: while the browser is open, it keeps the last items it redacted so it can show them to you; the only thing it keeps permanently is whether you have paused it.
No cookies. The only things stored in your browser are technical preferences (the language notice and, in the tools in the guides, your viewing preference and the last watermark text) and, on the guides with a tool, a technical item from Cloudflare’s human check. These items are strictly necessary for the feature you are using, so they are exempt from consent.
Our host, Cloudflare, logs the technical data of each request (IP address, browser and page) to deliver the pages and protect them from abuse. We only keep figures that do not identify you: visits per page and country, clicks on Download, and attempts with the tools in the guides, whether they work or not, so we can fix faults and see which tools and pages are used, and how often (file format and size, the step at which it failed, language, country, browser family, the page, a rough band for how many details were redacted, whether the visitor seems to be a person or a bot, and whether the visit comes from a data-centre network), with no IP address and no content. What happens to your document is explained in the tool’s privacy notice. Outside this website, we also count clicks on the links in the emails we send to organisations, as explained below.
Once a day, the app sends us a usage count with an installation number generated on your computer. Everything in it is a number, a date, a yes or no, or an option from a closed list:
Never a word of your text, the redacted details or the terms in your vocabulary, no file names or web addresses, and not your name, your email, a serial number or your computer’s name. Our server also receives the IP address of the send, which we keep for 30 days for security; from it we derive the country, region and network organisation, which we keep for 12 months to improve the product and to know which organisations use Nonimo. The installation number stays the same between sends, so we treat it as pseudonymous data. When it checks for updates, the app also sends its version and that of the operating system and, on the Mac, its languages; and if you buy from the app, it asks our server to open the checkout.
We use it to keep count of your allowance, to understand how the product is used and improve it, and to keep it secure. The app works just the same offline. You can object by writing to hello@nonimo.ai with the installation number the app shows you.
The signed usage report. If you ask for it, the app sends us, for signing, the counts per category for the period you choose, the dates and the app version. We sign and return them straight away, and do not keep them. Anyone can check it at nonimo.ai/verify.
Problem reports are only sent if you send them, and contain what you write and the technical details of the version.
The licence check. Paid licences can contain a verification address. If yours does, each time it starts, the app asks our server whether the licence is still active, so that it is not used on more computers than it covers. It sends the licence number and a random identifier of its own for the licence on that computer (and, only once when you update, the previous one, which we do not keep). We keep which computers use each licence, with the first and the most recent date, and delete it after 13 months. If a licence is used on more computers than it covers, the extra one moves to the free plan. If the check fails or you are offline, nothing changes.
If you buy. Paddle.com Market Ltd is the seller (Merchant of Record) for our orders and handles the details on its checkout page as an independent controller, under its own privacy notice. We never see your card. We keep your email, your organisation, what you bought, the country of the payment and whether you agreed to receive marketing emails, to issue the licence and keep our accounts.
On a team plan we keep the account holder’s email and, if given, the name of the firm or company; the number of seats; the email of each person invited and whether they accepted; a fingerprint of each computer’s key, and the Paddle identifiers. This is to manage the licence and its billing, and the account holder can see it in the “My team” window. To give a warning if one computer’s activation is copied to another, we also keep, for one month, a fingerprint of the last computers it has been seen on. It is only a warning: it never cuts off the service.
Free licences already issued. They can no longer be requested, but those already issued keep working. For each one we keep the requester’s email, the date and the licence number, so we can reissue it, and a fingerprint of the address so that the same mailbox cannot not get two; from the email domain we count how many each organisation has. We delete this when you ask, and your licence keeps working.
If your organisation installs Nonimo, we receive from staff computers the same as from any other installation. If your DPO concludes that we act as a processor, we sign an agreement under Article 28 of the GDPR or the UK GDPR.
From time to time we write to law firms, companies and public bodies to introduce Nonimo. Each link in those emails carries a code that says nothing on its own, and when it is clicked we note the code, which version of this website it leads to, the country of the connection, whether the click looks like a person or a program, and the time. No pixels, no cookies and no IP address kept. On our server, the exact time is kept for 90 days and after that only the day, for at most 12 months. Which code belongs to which organisation is recorded only on our own computer, together with a copy of the clicks and their time; we delete both when the campaign ends, at most 12 months after sending. If you would rather we did not count your clicks, write to us.
If you write to us, or ask us about Nonimo Gateway, we use what you send to reply. We delete a Gateway enquiry once it is settled, or within 12 months at most, or sooner if you ask. When the Gateway runs on your servers, all that reaches us from it is the renewal of its licence and a daily count of how much it has processed, never your content.
| Processing | Legal basis (Art. 6(1) GDPR) |
|---|---|
| Hosting logs, website figures, clicks on Download and attempts with the tools | Legitimate interests (f): delivering the website, protecting it, fixing faults and seeing which tools and pages are used, without identifying you |
| The app’s usage data, the IP address of the send and what is derived from it | Contract (b) for the allowance; legitimate interests (f) for the rest |
| The licence check, purchases, team plans and free licences already issued | Contract (b) and legal obligation (c); for team members, and for free-licence request notices, the address fingerprint and the per-domain count, legitimate interests (f) |
| Problem reports and the signed usage report | Contract (b), at your request |
| Marketing emails to buyers | Consent (a), which you can withdraw with one click |
| Clicks on the links in the emails we send to organisations | Legitimate interests (f): making Nonimo known, only the click, with no tracking pixel and no third-party tools |
| Correspondence and enquiries about the Gateway | Steps before a contract, or the contract (b); otherwise, legitimate interests (f) |
Apart from marketing emails, we do not ask for your consent: there are no cookies, no analytics tools and no mailing list other than the organisations we write to, which rests on our legitimate interests. We process no special category data and do not target children. The only information you have to give us is your email when you buy (and, on a team plan, the emails of the people you invite), because that is where the licence is sent.
Providers working on our behalf, under a processing agreement: Cloudflare, Inc., which hosts this website and stores the usage data, licences, problem reports, website figures and the clicks on the links in our emails to organisations; and Google LLC, which hosts our email (Google Workspace); the extension is distributed through the Chrome Web Store. If you buy, Paddle receives your purchase details as an independent controller. We disclose data to an authority only where the law requires it. We do not sell your data or share it for advertising.
We handle data in Australia, where we are based, and with providers in the United States and, through their global networks, other countries that we cannot list in advance. Australia has no EU or UK adequacy decision, and for the United States we do not rely on the Data Privacy Framework, so transfers from the UK and the European Economic Area rely on the European Commission’s standard contractual clauses, with the UK Addendum for data leaving the UK; Paddle explains its own in its notice. You can ask us for a copy of the safeguards.
| What | How long |
|---|---|
| Hosting logs | Kept by Cloudflare under its own policy; we do not export them |
| Daily website totals: visits per page and downloads, by country, no IP address | 24 months |
| Clicks on Download (page, language, system, country and browser type) | 24 months |
| Attempts with the tools in the guides | 90 days |
| IP address of the daily send | 30 days |
| Country, region and network organisation derived from it | 12 months |
| The personal version’s daily usage counts: | 24 months |
| Problem reports you send us from inside the app: | 13 months |
| The signed usage report | Not kept |
| The licence check (computers and dates) | 13 months |
| Team plan activation fingerprints | 1 month |
| Team register | 36 months from its last change (an active team’s record does not expire) |
| Purchases and billing | Whatever accounting and tax law requires |
| Free licences already issued | While the licence is alive, or until you ask us to delete it; the address fingerprint, 36 months; the notice of each request, 3 years; the count without the address, 13 months |
| Clicks on the links in our emails to organisations, and the mapping between codes and organisations | On our server, the exact time 90 days, then only the day, for at most 12 months; on our own computer, the code mapping and a copy of the clicks, until the campaign ends and at most 12 months after sending |
| Enquiries about Nonimo Gateway | Until settled, 12 months at most |
| Correspondence | 3 years from the last exchange, or sooner if you ask; if it leads to a contract, whatever the law requires |
By writing to hello@nonimo.ai you can ask to access, correct or delete your data, object to or restrict how we use it, take it elsewhere, and withdraw any consent you have given. It is free and we reply within 30 days. We make no decisions based solely on automated processing that have legal or similarly significant effects on you. You can complain to us at hello@nonimo.ai and we will reply within 30 days. You can also complain to the authority for your country:
We apply appropriate technical and organisational measures. If an incident affects personal information we are responsible for, we will notify it as the law requires: in Australia, under the Notifiable Data Breaches scheme; in the UK and the EU, under the GDPR. When we change this page, we change its version and date; ask us for earlier versions and we will send them.
Version 1.39 · 7 November 2026. This shorter version describes the same processing, by category.