Legal

Privacy policy

Last updated 2026-10-09

This is a translation. The Swedish version governs.

Hi! If you are reading this, you have most likely talked to Alma, Nomar’s AI assistant, by SMS or chat with a business that uses Nomar, or visited nomar.se. Here we explain what data is processed, why we do it and how we keep it safe.

Roles

The business you have contacted (“the Business”) is the controller of your personal data. Nomar Tech AB (559552-9586) (“Nomar”) provides Alma and the customer portal Nomar Nexus and acts as processor. We process the data strictly on the Business’s instructions and in accordance with applicable data protection law.

When you chat with Alma on nomar.se, Nomar itself is the controller. This is described under Visitors to nomar.se.

What data is processed?

For Alma to work and to give you and the Business a good service experience, the following data is processed:

Identification data: Phone number (for SMS communication) or IP address (for web chat).
Conversation logs: The full text history of messages sent and received, including Alma’s AI-generated replies.
Technical metadata: Message timestamps, delivery status, call statistics (e.g. for missed calls), browser type and device information.
AI logs: Data on how Alma has interpreted your messages, so that she can give correct answers.
CRM links: Information (e.g. name) that the Business has chosen to link to your phone number in its own customer records.

Purposes of processing

The data is processed to enable automated customer service, to handle enquiries and bookings, and to give the Business a complete history of your communication in the customer portal Nomar Nexus.

Security and storage

Storage: Conversations and other data are stored with Supabase in AWS data centres in Stockholm. Nomar Nexus and the chat widget run on Vercel with server functions in Stockholm.
Language model: To write Alma’s replies, the conversation text is sent to a language model run by Fireworks AI in the USA. The transfer relies on the EU standard contractual clauses, and Fireworks does not keep the data after the request. OpenAI in the USA is also used as a sub-processor. All sub-processors, what they do and where they process data are set out in our list of sub-processors.
No AI training: Nomar does not use your conversations to train general AI models on behalf of third parties, and our language model providers do not use them to train their models. Your data is isolated to the specific Business’s account.
Technical protection: We apply industry-standard encryption both in transit and at rest. When Nomar staff read a business’s conversations, this is logged.

Visitors to nomar.se

This section applies to you as a visitor to nomar.se. Here, Nomar is the controller.

Analytics: We use Google Analytics for visitor statistics, and analytics cookies are only set if you consent. See Cookies and Google Analytics. We do not use any marketing cookies.
Booking a demo: The Book a demo page loads a booking calendar from Cal.com (app.cal.com) in an embedded frame. Information you enter there, such as your name, e-mail address and chosen time, is processed by Cal.com under Cal.com’s privacy policy. The booking is then sent to us so that we can hold the meeting. The calendar is only loaded on the booking page.
Chatting with Alma: nomar.se has Alma’s web chat, which is loaded in an embedded frame from webchat.nomar.se. When you chat with Alma here, Nomar is its own customer and therefore the controller. The conversation is processed in the same way and by the same sub-processors as described above, and we use it to answer your questions and to get back to you if you ask us to.
Trying Missed Leads: If you call our demo number +46 76 686 03 95 to try Missed Leads, Nomar is the controller. We process your phone number and the content of the SMS conversation with Alma in order to run the demonstration. The data is processed in the same way and by the same sub-processors as described above. How long the data is kept: Details to follow.
Questions: Send questions about how we process data from nomar.se to info@nomar.se.

Cookies and Google Analytics

On nomar.se we use Google Analytics 4 to see how the site is used, for example which pages are visited, how visitors find us and what kind of device and browser is used. The statistics help us improve the site. We do not use them for advertising. Here, Nomar is the controller.

Only with consent: Analytics cookies (_ga and _ga_ followed by an id) are only set if you choose Accept analytics in the cookie banner. The legal basis is your consent. If you choose Decline, or make no choice, no such cookies are set.
Before you choose: Google Analytics is loaded with Google’s Consent Mode. Without your consent, Google may receive limited signals without cookies, for example that a page was viewed. Signals for ads, ad data and personalised ads are always turned off.
Provider: Google Ireland Limited (Ireland) and Google LLC (USA). Data may be transferred to the USA. Google LLC is certified under the EU-US Data Privacy Framework, so the transfer relies on the European Commission’s adequacy decision, with standard contractual clauses as a complement. See also Google’s privacy policy.
IP addresses: Google Analytics 4 anonymises IP addresses by default. The IP address is not used to identify you and is not stored in the statistics.
Storage: Analytics cookies are kept in your browser for up to two years (Google’s default setting). The statistics are kept in Google Analytics for 14 months. Your choice in the cookie banner is kept in your browser’s local storage for 12 months, after which we ask again.
Changing your choice: You can change or withdraw your consent at any time via Cookie settings in the footer. If you choose Decline, we remove Google Analytics cookies for nomar.se from your browser.

Your rights

Under the GDPR you have the right of access to, rectification of and erasure of your personal data. Since the Business (our customer) is responsible for your data, such requests should be made directly to the Business. Nomar promptly assists the Business in fulfilling these rights.

If your request concerns a conversation with Alma on nomar.se or through our demo number, contact us directly at info@nomar.se. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Contact

Do you have questions about our technology or how we handle security and data? You are always welcome to contact us.

E-mail: info@nomar.se
Website: www.nomar.se
Company: Nomar Tech AB, reg. no. 559552-9586, Västerås, Sweden

Roles

When you chat with Alma on nomar.se, Nomar itself is the controller. This is described under Visitors to nomar.se.

What data is processed?

For Alma to work and to give you and the Business a good service experience, the following data is processed:

Identification data: Phone number (for SMS communication) or IP address (for web chat).

Conversation logs: The full text history of messages sent and received, including Alma’s AI-generated replies.

Technical metadata: Message timestamps, delivery status, call statistics (e.g. for missed calls), browser type and device information.

AI logs: Data on how Alma has interpreted your messages, so that she can give correct answers.

CRM links: Information (e.g. name) that the Business has chosen to link to your phone number in its own customer records.

Security and storage

Storage: Conversations and other data are stored with Supabase in AWS data centres in Stockholm. Nomar Nexus and the chat widget run on Vercel with server functions in Stockholm.

Language model: To write Alma’s replies, the conversation text is sent to a language model run by Fireworks AI in the USA. The transfer relies on the EU standard contractual clauses, and Fireworks does not keep the data after the request. OpenAI in the USA is also used as a sub-processor. All sub-processors, what they do and where they process data are set out in our list of sub-processors.

No AI training: Nomar does not use your conversations to train general AI models on behalf of third parties, and our language model providers do not use them to train their models. Your data is isolated to the specific Business’s account.

Technical protection: We apply industry-standard encryption both in transit and at rest. When Nomar staff read a business’s conversations, this is logged.

Visitors to nomar.se

This section applies to you as a visitor to nomar.se. Here, Nomar is the controller.

Analytics: We use Google Analytics for visitor statistics, and analytics cookies are only set if you consent. See Cookies and Google Analytics. We do not use any marketing cookies.

Booking a demo: The Book a demo page loads a booking calendar from Cal.com (app.cal.com) in an embedded frame. Information you enter there, such as your name, e-mail address and chosen time, is processed by Cal.com under Cal.com’s privacy policy. The booking is then sent to us so that we can hold the meeting. The calendar is only loaded on the booking page.

Chatting with Alma: nomar.se has Alma’s web chat, which is loaded in an embedded frame from webchat.nomar.se. When you chat with Alma here, Nomar is its own customer and therefore the controller. The conversation is processed in the same way and by the same sub-processors as described above, and we use it to answer your questions and to get back to you if you ask us to.

Trying Missed Leads: If you call our demo number +46 76 686 03 95 to try Missed Leads, Nomar is the controller. We process your phone number and the content of the SMS conversation with Alma in order to run the demonstration. The data is processed in the same way and by the same sub-processors as described above. How long the data is kept: Details to follow.

Questions: Send questions about how we process data from nomar.se to info@nomar.se.

Cookies and Google Analytics

Only with consent: Analytics cookies (_ga and _ga_ followed by an id) are only set if you choose Accept analytics in the cookie banner. The legal basis is your consent. If you choose Decline, or make no choice, no such cookies are set.

Before you choose: Google Analytics is loaded with Google’s Consent Mode. Without your consent, Google may receive limited signals without cookies, for example that a page was viewed. Signals for ads, ad data and personalised ads are always turned off.

Provider: Google Ireland Limited (Ireland) and Google LLC (USA). Data may be transferred to the USA. Google LLC is certified under the EU-US Data Privacy Framework, so the transfer relies on the European Commission’s adequacy decision, with standard contractual clauses as a complement. See also Google’s privacy policy.

IP addresses: Google Analytics 4 anonymises IP addresses by default. The IP address is not used to identify you and is not stored in the statistics.

Storage: Analytics cookies are kept in your browser for up to two years (Google’s default setting). The statistics are kept in Google Analytics for 14 months. Your choice in the cookie banner is kept in your browser’s local storage for 12 months, after which we ask again.

Changing your choice: You can change or withdraw your consent at any time via Cookie settings in the footer. If you choose Decline, we remove Google Analytics cookies for nomar.se from your browser.

Your rights