Privacy

How Nommad handles data.

This policy is structured for the V1 platform: vendor profiles, customer interactions, analytics, booking requests, and future notifications.

Data collected

Nommad may collect account details, vendor profile information, booking request details, reviews, favorites, search/filter activity, QR/tap scans, and analytics events.

How data is used

Data is used to show accurate vendor pages, route customers to food, notify vendors, moderate content, estimate platform performance, and improve discovery quality.

Vendor visibility

Inventory, expenses, suppliers, recipes, purchase lists, private notes, and operations data are vendor-private and should never display publicly.

Security

Admin access is session protected. Production magic links should use hashed tokens, optional PINs, expiration dates, revocation, and audit logs.