Privacy Policy

How Crave Up Inc., operating Nomly, collects, uses and shares personal information.

  1. 1. Scope and Who We Are

    This Privacy Policy describes how Crave Up Inc. (“Crave Up,” “Nomly,” “we,” “us,” or “our”) handles personal information when you visit nomly.ai, request information, book or use a demo, or use Nomly's restaurant software and related services.

    Restaurants may use Nomly to communicate with their guests and staff. In those cases, the restaurant determines why personal information is processed and we generally process it on the restaurant's behalf. Contact the restaurant first about a restaurant-specific call, order, or request.

  2. 2. Information We Collect

    Depending on how you interact with Nomly, we may collect:

    • Contact and business information, such as name, work email, phone number, role, restaurant name, location count, and messages you submit.
    • Account and service information, such as credentials, workspace settings, menus, hours, integrations, support requests, and records of actions taken in the Service.
    • Voice and order information, such as call audio where recording is enabled, transcripts, caller number, call time and duration, names, order details, delivery information, and allergy or dietary notes shared during a call.
    • Demo information, such as the phone number you verify, menu files or restaurant information you provide, and demo call events, transcripts, and cart contents.
    • Website and device information, such as pages viewed, referring URL, browser and device type, approximate region, and diagnostic or security events.
    • Campaign attribution, limited to standard UTM source, medium, campaign, term, and content values and the landing page for the current browser session.
  3. 3. How We Use Information

    • Provide, personalize, secure, troubleshoot, and support the Service and demos.
    • Answer inquiries, schedule sales conversations, and communicate about requested services.
    • Transcribe calls and produce orders, reservations, messages, summaries, and other requested outputs.
    • Understand campaign performance and improve our website, products, reliability, and customer experience.
    • Detect misuse, enforce our terms, comply with law, and protect people, restaurants, Nomly, and others.
  4. 4. How We Share Information

    We may share personal information with these categories of recipients:

    • The restaurant or business that uses Nomly and its authorized users.
    • Service providers that help us host, secure, analyze, communicate, schedule meetings, operate AI or telephony, deliver support, and process information on our behalf.
    • Integration partners when you or a restaurant directs us to connect the Service to a third-party system.
    • Professional advisers, authorities, or other parties when reasonably necessary for legal compliance, safety, fraud prevention, or the protection of rights.
    • A buyer, investor, lender, or successor in connection with a financing, reorganization, merger, acquisition, or sale of assets, subject to appropriate safeguards.

    We do not sell personal information for money. We do not use the current Nomly marketing site for cross-context behavioral advertising. If those practices change, we will update this Policy and provide any choices required by law.

  5. 5. Analytics, UTM Parameters and Browser Signals

    We use Vercel Web Analytics to understand aggregate site use and custom conversion events. Our attribution feature stores standard UTM campaign values in session storage so they persist while you navigate this site, sends those values with a contact-form submission, and forwards them to Cal.com when you open our booking experience. We do not put names, email addresses, phone numbers, or free-form messages in analytics events.

    Browser “Do Not Track” signals are not governed by a uniform standard, and our site does not currently respond to them. You can limit storage through your browser settings. Where legally required, we will honor applicable opt-out preference signals for practices covered by those signals.

  6. 6. Call Recording and Sensitive Information

    Call recording and consent requirements vary by jurisdiction. Restaurants are responsible for using Nomly lawfully and providing notices or obtaining consent when required. Our Voice & Call Recording notice provides additional detail.

    Please do not provide full payment-card numbers, government identifiers, or other information not needed for the interaction. Payment-card information, when supported, is handled by the applicable payment provider rather than intentionally included in Nomly transcripts.

  7. 7. Retention

    We retain personal information for as long as reasonably necessary to provide the Service, meet contractual commitments, maintain security and audit records, resolve disputes, and comply with law. Retention varies by information type, workspace settings, and legal requirements. Demo data may be shorter-lived than production account data. We may retain de-identified information that no longer reasonably identifies an individual.

  8. 8. Security and International Processing

    We use administrative, technical, and organizational safeguards designed to protect personal information. No system is completely secure, and we cannot guarantee absolute security.

    We and our service providers may process information in the United States and other countries. Where required, we use safeguards intended to support lawful transfers.

  9. 9. Your Choices and Privacy Rights

    Depending on where you live and subject to applicable exceptions, you may have rights to request access, correction, deletion, or a copy of personal information; to object to or restrict certain processing; or to appeal a request decision. You may opt out of marketing email by using the unsubscribe link in the message.

    • Email a request to privacy@nomly.ai
    • Describe your relationship with Nomly and the information involved so we can locate it.
    • We may verify your identity and authority before completing a request. Authorized agents may submit requests where applicable law permits.
  10. 10. Children

    Nomly is a business service and is not directed to children under 13. We do not knowingly collect personal information from children under 13 through the site. If you believe a child has provided such information, contact us so we can review and delete it as appropriate.

  11. 11. Changes to This Policy

    We may update this Policy as our practices or legal requirements change. We will post the revised Policy with a new last-updated date and provide additional notice when required by law.

  12. 12. Contact Us

    For privacy questions or requests, contact:

    Crave Up Inc. operates Nomly.