Privacy Policy

Nomvel is a trading name of Zyloo, LLC, a limited liability company formed in Delaware, United States. In this policy, "we", "us" and "our" mean Zyloo, LLC, and we are the controller of the personal information described here.

This policy covers this website only. Each of our products is a separate service with its own privacy policy that governs the information handled inside that product. If you are a customer of one of our products, please read that product's policy — it is the one that applies to your account and your data.

Controller

Zyloo, LLC

Jurisdiction

Delaware, United States

Postal address

131 Continental Drive, Suite 305, Newark, DE 19713

Privacy contact

privacy@nomvel.com

We build products that people pay for, which means we do not need to monetise anyone's attention or behaviour. That commercial position is what makes the following commitments straightforward rather than generous:

• We do not sell, rent, or trade personal information. Not now, and not as a future business model.
• We do not run advertising, and we do not embed advertising or social media tracking code on this website.
• We do not build cross-site profiles of visitors, and we do not use advertising identifiers.
• We collect the minimum we need for a specific purpose, and we delete it when that purpose has been served.

There are only two ways this website results in us holding information about you.

Email you send us

If you write to one of our addresses, we receive your email address, your name if you include it, and whatever you put in the message. We hold this so that we can reply to you and keep a record of the conversation.

Server logs

Like every website, ours is served by a hosting provider that records standard technical request logs. These typically include your IP address, the time of the request, the page requested, the referring page, and your browser's user-agent string. They exist so that the site can be delivered, kept secure, and debugged when something breaks.

We do not ask you to create an account on this website, and there are no forms, sign-ups, newsletters, or payment flows here. We do not knowingly collect any special category data, and we ask that you do not send us any in an unsolicited email.

If the UK GDPR or EU GDPR applies to you, the following are the lawful bases we rely on:

Legitimate interests

To reply to correspondence, to keep the website available and secure, to prevent and investigate abuse, and to keep records of communications that may be relevant later. We have considered your rights and do not believe this processing is intrusive.

Legal obligation

To retain and disclose information where we are legally required to, such as in response to a valid legal request.

Consent

Where we ever ask you directly for permission to use your information for a specific purpose. You can withdraw consent at any time.

This website sets no cookies and runs no analytics of any kind — not ours, not a third party's. There is no consent banner because there is nothing to consent to.

Your browser may store technical data locally as part of normal web browsing, such as its own cache. That is your browser's behaviour, not ours, and we cannot read it.

If we ever introduce analytics on this website, we will use a privacy-preserving, cookie-free method, we will say so in this policy before it goes live, and we will update the date at the top of this page.

We do not sell your information and we do not share it for anyone else's marketing. We disclose it only in these narrow situations:

• Service providers who operate infrastructure on our behalf — specifically our website hosting provider and our email provider. They act on our instructions, are bound by contract, and may only use the information to provide their service to us.
• Legal and safety reasons, where we are required to disclose information by law, or where disclosure is necessary to establish or defend a legal claim, or to protect the rights, property or safety of any person.
• Business transfers, if the company is ever involved in a merger, acquisition or sale of assets. If that happens, we will say so on this page before your information becomes subject to a different policy.

We are based in the United States and our service providers may process information in the United States or elsewhere. If you are writing to us from outside the United States, your information will be transferred across a border in order to reach us.

Where we transfer personal information out of the UK or the European Economic Area, we rely on appropriate safeguards for that transfer, such as the European Commission's Standard Contractual Clauses together with the UK Addendum where applicable. You may ask us for details of the safeguards that apply.

Email correspondence

For as long as needed to handle your enquiry, and then for up to 24 months in case the matter comes up again. Longer only where we need it for a legal claim or a legal obligation.

Server logs

Retained by our hosting provider for a short operational period, ordinarily no more than 30 days, and then deleted or aggregated so that individuals can no longer be identified.

You are welcome to ask us to delete your correspondence sooner, and we will do so unless we have a legal reason to keep it.

Depending on where you live, you may have some or all of the following rights over your personal information:

• Access — to be told what personal information we hold about you and to receive a copy of it.
• Rectification — to have inaccurate or incomplete information corrected.
• Erasure — to have your information deleted where we have no overriding reason to keep it.
• Restriction and objection — to ask us to pause our use of your information, or to object to processing we carry out on the basis of legitimate interests.
• Portability — to receive certain information in a portable, machine-readable format.
• Withdrawal of consent — where we rely on your consent, to withdraw it at any time.
• Non-discrimination — to exercise any of these rights without being treated differently for having done so.

To exercise any of these rights, email privacy@nomvel.com. We will respond within 30 days, and we will not charge you for a reasonable request. We may need to ask you a question to confirm that the request really comes from you.

We do not sell or share personal information as those terms are defined under California law, and we do not use it for automated decision-making or profiling. If you are in the UK or the EEA and you are unhappy with how we have handled your information, you may complain to your national data protection authority — though we would appreciate the chance to put it right first.

This website is served exclusively over HTTPS. We keep the number of systems that touch personal information deliberately small, we limit access to those systems to people who need it, and we keep our dependencies patched.

No method of transmission or storage is perfectly secure, and we will not pretend otherwise. Email in particular is not an encrypted medium — please do not send us passwords, payment card details, or sensitive personal information by email.

This website is not directed at children and we do not knowingly collect personal information from anyone under 13. If you believe a child has sent us personal information, contact us and we will delete it.

We will update this policy when what we do changes, or when the law that applies to us changes. The date at the top of this page always reflects the current version, which is dated August 26, 2026. If a change is material, we will describe it clearly on this page rather than quietly editing the text.

A person reads these messages. If you have a question about this policy or about how we handle information, please write to us.

Data & privacy

privacy@nomvel.com

General

hello@nomvel.com

Product support

support@nomvel.com

Postal

Zyloo, LLC, 131 Continental Drive, Suite 305, Newark, DE 19713