The tool in our guides masks the document or text you give it on our server, and does not keep it. The Nonimo app works differently: it masks on your own computer, and its privacy is covered on our privacy page. The identity-document tool works differently too: it reads the photo in your browser and sends us nothing.
Llevant Group Pty Ltd (ABN 17 691 906 751), 1A Bruce Street, Kensington VIC 3031, Australia. Contact: hello@nonimo.ai.
We process it on your behalf and only to mask it and give you back the result: it is read into the server’s memory, masked, and discarded as soon as we reply. We do not keep it: no copy, and no record of what it contains.
If the document contains other people’s personal information (your clients’, for example), you decide what happens to it and we act as your processor, on the terms set out in the tool’s terms of use. If it contains health information or anything covered by professional confidentiality, check first that you are allowed to send it to a processor; if you are not, use the app, which masks it on your own computer.
Each browser can mask up to 10 documents a day, and each connection up to 200. To keep count, we store for the day one code calculated from your IP address and another calculated from a random identifier that the page keeps only while it is open: reload the page and the identifier is gone. We do not store the IP address or the identifier, only those codes, which cannot be reversed.
The codes are deleted at midnight (UTC), and our provider keeps a backup copy of the counters for up to 30 days. We do this on the basis of our legitimate interest in keeping a service you ask for within reasonable limits.
Before each document, the page uses Cloudflare’s Turnstile, which looks at signals from your browser to tell a person from a program, and stores a piece of data in your browser to do so. What Turnstile processes, Cloudflare processes under its Turnstile privacy notice.
Cloudflare, Inc. (United States) provides the server where the document is masked and stores the counters, as a sub-processor, under its data processing agreement and standard contractual clauses, with the UK Addendum for data leaving the UK. The document is processed on Cloudflare’s network. We are an Australian company, and Australia is not covered by an adequacy decision or by UK adequacy regulations.
The document, not at all: it is discarded as soon as we reply. The counters, until midnight UTC, and their backup copy for up to 30 days.
You can ask us for access, rectification, erasure, restriction or objection at hello@nonimo.ai, and you can complain to the data protection authority where you live: in the United Kingdom, the Information Commissioner’s Office (ico.org.uk); in Ireland, the Data Protection Commission (dataprotection.ie); in Australia, the Office of the Australian Information Commissioner (oaic.gov.au). If you are in the United States, write to the same address and we will handle your request in the same way. We have nothing of the document to give you, because we do not keep it; and we cannot tell which counter is yours, because we only keep codes that cannot be reversed.
Version 1.3 · 5 October 2026. Revises the wording, with no change of substance.