Legal

Privacy Policy

Last updated July 8, 2026

Nomosyn embeds legal review into the tools your team already uses. This policy explains what we collect from those connected apps, why, and how attorney-client privilege is preserved throughout.

Information we collect

When you connect an app — Gmail, Google Drive, Slack, HubSpot, or Google Calendar — Nomosyn requests read-focused scopes limited to the content needed to detect legal exposure: message and document text, metadata (sender, timestamps, channel or deal names), and calendar event details. We do not request permission to send messages, delete content, or administer any connected app. One necessary exception: to read a Slack channel's history, the connected bot must join that channel, which it does for the sole purpose of reading it.

Attorney-client privilege

Content Nomosyn's agent flags is routed to your engaged attorney before any recommendation is shared with your team. Flagged items, evidence excerpts, and attorney guidance are treated as privileged attorney-client communications and are only visible to your organization's authorized users and your engaged legal team.

How we use information

Connected-app content is analyzed using the AI provider you connect, on your own API key, solely to power the legal-signal feed, evidence views, and your attorney's review workflow. We do not train models on your content, sell it, or share it with any party outside your engagement without your consent. When Nomosyn improves its detection rules by learning from usage, that analysis runs on each company's own key over only that company's own data, and only generic, anonymized rule proposals — never your content — are pooled for review.

Data retention

Evidence snippets and documents referenced in an alert are retained for the life of your engagement plus the period required by applicable record-keeping and malpractice-insurance rules. You can request deletion of non-privileged data at any time by contacting privacy@nomosyn.com.

Document attachments

Files you attach when messaging your legal team (or that your attorney sends you) are delivered as ordinary email attachments and are not stored by Nomosyn — nothing is written to our database or file storage, and our email provider does not retain message content. Such a file passes through our servers in memory only, for the moment it takes to send, and is then discarded. We keep just a minimal, content-free record for audit — who sent it, the filename, size, time, and your acknowledgement of the notice shown at send time. Because attachments leave Nomosyn by email, we ask you to confirm at each send that you are not routing privileged or highly sensitive material through the platform; for anything truly sensitive, use your own secure channel.

Your choices

You control which apps are connected at any time from the Integrations page, and can disconnect an app to immediately stop new scanning of that source. Disconnecting does not delete items already flagged or already shared with your legal team.

Contact

Questions about this policy can be sent to privacy@nomosyn.com.