Privacy Policy

The Nomo app is published by AndaluSoft Engineering, located at El Alia Bizerte 7016, Tunisia.

For any question about your personal data: contact@andalusoft.pro.

Depending on how you use the app, we may process the following categories of data:

• Account and business identity: name, phone number, email address, company, tax identification number and addresses provided.
• Authentication: information needed to verify your identity, and session tokens.
• Business activity: orders, products ordered, proposals, history, invoices, delivery notes and payment information available in the service.
• Communications: text messages, voice messages and attachments you choose to send.
• Technical information: installation identifier, notification token, platform, app version and technical information needed for the service to work.

The data actually processed depends on the features you use and the information you provide.

Your data is used to:

• Create your account and manage your access to Nomo.
• Let you browse catalogs and place orders.
• Enable communication with your suppliers.
• Display and track business documents.
• Send notifications related to your activity.
• Ensure the security, maintenance and support of the service.
• Comply with applicable legal obligations.

Depending on the applicable law, this processing is based on the performance of the contract for the service, compliance with legal obligations, our legitimate interest in securing and maintaining the service, or your consent where required.

Where processing is based on your consent, you can withdraw it without affecting the processing carried out before the withdrawal.

Microphone: microphone access is requested to record the voice messages you choose to send. You can refuse or revoke this permission in your device settings. Sending voice messages will then be unavailable.

Notifications: with your permission, Nomo may send notifications about your orders and conversations. You can turn them off in your device settings. On iOS, they are delivered through Apple's notification service.

The data needed for an order or a conversation is accessible to the business partners involved, in particular your suppliers.

Authorized members of our organization and our technical service providers may access the data they need for their tasks, in particular hosting, maintenance and support.

Main service providers and services used: OVHcloud for data hosting and Firebase Cloud Messaging (Google) for sending notifications.

Data may also be disclosed to the competent authorities when required by law.

Data is hosted in France by OVHcloud.

Notifications are delivered through Firebase Cloud Messaging (Google) and, on iOS, through Apple's notification service. These services may process the notification token and notification content outside the European Union, in particular in the United States; these transfers are covered by the safeguards provided by these service providers, in particular the European Commission's standard contractual clauses.

Authorized members of the AndaluSoft Engineering team, based in Tunisia, may access the data from Tunisia when needed to maintain and support the service.

We keep data for as long as necessary for the purposes described in this policy:

• Account data: for as long as the account is in use, then deleted or anonymized within 30 days of its deletion.
• Messages and attachments: for as long as the account is in use, then deleted or anonymized within 30 days of its deletion.
• Technical logs: 12 months.
• Business and accounting documents: 10 years from their issue date, in accordance with applicable accounting and tax obligations.
• Backups: deleted data is erased from backups as they rotate, within 30 days at most.

Some data may be kept after the account is closed when required by law or when needed to establish, exercise or defend legal claims.

We implement appropriate technical and organizational measures to protect data against unauthorized access, loss, alteration or disclosure. However, no system can guarantee absolute security.

Depending on the law that applies to you, you may have the right to access, rectify, erase, restrict, object to the processing of, and port your data.

To exercise your rights, contact: contact@andalusoft.pro. We may need to verify your identity in a proportionate way to protect your account.

You may also lodge a complaint with the competent data protection authority in your country.

In the app: open the "Account" tab, tap "Delete my account", enter your current password, tap "Confirm", then confirm again in the dialog that appears. Your account is closed right away: your sessions are ended and you can no longer sign in to it.

Without access to the app: write to contact@andalusoft.pro, stating the email address or phone number linked to your account. We may need to verify your identity in a proportionate way before handling your request.

Deactivation: to only suspend your access, choose "Deactivate my account" in the same place. Your data is then kept, and a supplier you are linked to can reactivate your account.

Deletion results in the erasure or anonymization of data that is no longer needed, subject to legal retention obligations and the rights of the other parties to the business transactions.

Nomo is intended for professional use and is not designed to be used by children.

This policy may be updated to reflect changes to the service or to legal obligations. The date of the last update appears at the top of this page. Significant changes will be communicated by appropriate means.