Privacy Policy

Last updated June 15, 2026

This is a starting draft, not legal advice. Review it (or finalize it with a reputable policy generator or a lawyer) before relying on it. Items in [brackets] still need to be filled in.

Overview

This Privacy Policy explains how Nomify ("we", "us"), operated by [your legal entity] and based in Costa Rica, collects, uses, and shares personal information when you use our website at https://www.nomify.ai and the Nomify name-generation service (the "Service").

Nomify does not require an account or login. By using the Service, you agree to the collection and use of information described here.

Definitions

  • Personal Data: information that identifies you, or could identify you directly or indirectly, such as your email address or IP address.
  • Service: the Nomify website and name-generation application.
  • Device: any internet-connected device, such as a phone or computer, used to access the Service.
  • Cookie: a small piece of data a website stores in your browser, for example to remember your language preference.
  • Company ("we", "us"): Nomify, based in Costa Rica, responsible for your information under this Policy.

What information we collect

  • What you type: the idea description and preferences (tone, style, length, terms to include or avoid) you enter to generate names. Please do not include sensitive personal details here.
  • Email address: when you join the launch waitlist, ask us to email your results, or complete a purchase.
  • Technical data: your IP address, a device fingerprint, and basic usage events (such as page views and actions you take), used to run the Service and prevent abuse.
  • Payment information: handled by our payment provider, Polar. We receive limited order details (such as an order ID and the email used at checkout). We never receive or store your full card details.

Your description is processed by AI (OpenAI)

To generate name suggestions, the description and preferences you enter are sent to OpenAI, our AI provider, which processes them to return name ideas. We send only what is needed to generate names. Because your input is processed by a third-party AI service, please do not include confidential or sensitive information you would not want shared.

How we use your information

  • To generate name suggestions and check domain availability in real time.
  • To deliver and unlock your results, and to send transactional email (waitlist confirmation, your results link, and unlock receipts).
  • To prevent abuse, including rate limiting and bot detection.
  • To understand aggregate, de-identified trends (such as the kinds of ideas and industries people name) so we can improve the Service. We never publish or share individual descriptions.
  • We do not use your information for advertising, and we do not build advertising audiences.

Service providers we share with

We use trusted providers to operate the Service. They process data only on our behalf and only as needed:

  • OpenAI: generating name suggestions from your description.
  • Polar: payment processing (our Merchant of Record).
  • Resend: sending transactional email.
  • Supabase: database hosting.
  • Upstash: rate-limit and usage counters.
  • Cloudflare Turnstile: bot protection.
  • FingerprintJS: device fingerprinting for abuse prevention.
  • Domain registries and RDAP services: checking whether a domain is available.
  • Domain registrars: when you click a register link, you are taken to a third-party registrar.

What we do not do, and legal disclosures

We do not sell your personal information, and we do not share it with advertisers, ad networks, or data brokers.

We may disclose information if required by law, to enforce our terms, or to protect the rights, safety, or property of Nomify or others.

If Nomify is involved in a merger, acquisition, or sale of assets, your information may be transferred, and we will require the recipient to honor this Policy.

Affiliate links

Some register links in the Service and in our emails are affiliate links. If you register a domain through one, we may earn a commission at no extra cost to you. This never affects which domains we show you: availability is determined by the domain registry.

Cookies and tracking technologies

We use a small number of cookies and similar technologies, mainly to operate the Service and prevent abuse, not for advertising:

  • A visitor identifier cookie ("_nid") and a device fingerprint stored in your browser, used for rate limiting and abuse prevention.
  • A language preference cookie ("locale"), to remember your chosen language.
  • Cloudflare Turnstile, to tell humans from bots.

Blocking cookies

Most browsers let you block or delete cookies and similar technologies. If you block them, some features of the Service may not work properly.

Data retention

We keep your information only as long as we need it to provide the Service and to meet legal, tax, and accounting obligations, then delete or anonymize it. As a guide, we retain generation sessions and results for up to [12 months], and payment records for as long as required by law. [Confirm these periods match your actual practice.] You can ask us to delete your data sooner (see "Your rights").

How we protect your information

We use reasonable technical and organizational measures to protect your information, including encryption in transit (TLS). Payment card details are handled by Polar and are never stored on our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

International transfers

Nomify is based in Costa Rica, and our service providers are located mainly in the United States. Your information may therefore be processed in the United States and other countries, which may have different data-protection laws than your own. Where required, we rely on appropriate safeguards for these transfers. By using the Service, you consent to this processing.

Your rights

Depending on where you live, you may have rights to access, correct, delete, export, or object to the processing of your personal data. Because Nomify has no accounts, you can exercise these rights by emailing support@nomify.ai from the address you used, and we will respond as required by law. We do not sell personal data.

Your rights under the GDPR (EEA and UK)

If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation gives you rights over your personal data. Nomify is the data controller for the information described here.

  • Legal bases: we process your data to provide the Service to you (contract), with your consent (for example, when you give us your email), and for our legitimate interests in running and securing the Service.
  • Your rights: access, rectification, erasure, restriction, portability, and objection. You may also lodge a complaint with your local supervisory authority.
  • To exercise any right, email support@nomify.ai.

Your rights under the CCPA/CPRA (California)

If you are a California resident, the California Consumer Privacy Act gives you rights over your personal information. The categories we collect, and how we use and share them, are described above.

  • Right to know and access the personal information we collect about you.
  • Right to delete personal information we hold about you.
  • Right to opt out of the sale or sharing of personal information. We do not sell or share your personal information for cross-context behavioral advertising.
  • Right to non-discrimination for exercising your rights.

Children's privacy

Nomify is not directed to children and is not intended for anyone under 16, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact support@nomify.ai and we will delete it.

Links to other websites

The Service contains links to third-party websites, such as domain registrars, that we do not operate or control. This Policy does not apply to those sites. We are not responsible for their content or privacy practices, and we encourage you to review their policies.

Changes to this policy

We may update this Policy from time to time. The date at the top reflects the latest version. If we make material changes, we will take reasonable steps to let you know.

Contact us

Questions, requests, or concerns about your privacy? Email us at support@nomify.ai.