Effective date: August 18, 2026
This Privacy Policy explains how Nomadvice LLC, a company organized under the laws of Georgia ("Nomadvice," "we," "us," or "our"), collects, uses, discloses, and protects information in connection with the Telegram bot @nomadvicebot, the website nomadvice.com, and any other application, bot, or service we operate that links to this Policy (together, the "Services").
This Policy should be read together with our Terms of Use. If you do not agree with this Policy, please do not use the Services.
1. Who This Policy Applies To
This Policy applies to anyone who interacts with the Services, including people who message our Telegram bot, visit our website, subscribe to a paid plan, or otherwise contact us ("you").
2. Information We Collect
We collect the following categories of information:
2.1. Information you provide to us directly
Telegram account information. When you interact with @nomadvicebot, Telegram provides us with certain information associated with your Telegram account, such as your Telegram user ID, username, and first/last name if made available by Telegram, so that the bot can communicate with you.
The content of your Requests. The situation, question, or need you describe to the bot, and any follow-up answers you provide (for example, about urgency, budget, preferred language, location, or other details relevant to your request). Depending on what you choose to tell us, this may include health-related, legal, financial, or other sensitive information that you voluntarily share about yourself. Please see Section 5 below for more on sensitive information.
Contact and lead information. If you provide an email address, name, city/country, or answers to onboarding or lead-capture questions (for example, your general situation, areas of interest, or how you found us), we collect and store that information.
Account and subscription information. If you subscribe to a paid plan, we (or our payment processor, as described in Section 6) collect information necessary to set up and manage your subscription, such as your selected plan, billing cycle, and transaction history. We do not collect or store your full payment card number or other complete payment credentials; these are handled directly by our payment processor.
Communications with us. If you contact us directly (for example, by email), we collect the content of that communication and any information you choose to include in it.
2.2. Information we collect automatically
Technical and usage data. When you use the bot or our website, we and our service providers may automatically collect information such as device and app identifiers, IP address, general location derived from IP address, browser type, operating system, timestamps, and information about how you interact with the Services (for example, which messages or buttons you use).
Website cookies. Our website may use cookies and similar technologies, as described in our Cookie Policy.
2.3. Information we do not intentionally collect
We do not ask for or intend to collect full payment card numbers, government identification numbers, or biometric data. If you send us such information anyway (for example, by including it in a free-text message to the bot), we will handle it in accordance with this Policy and delete it where it is not necessary for the purpose for which it was shared, but we ask that you avoid sharing this type of information with us.
3. How We Use Your Information
We use the information described above for the following purposes:
To provide the Services, including to process your Requests, generate Decision Reports, manage your account and subscription, and communicate with you about the Services (contractual necessity / to take steps at your request before entering into a contract).
To operate Scout AI, including sending the content of your Requests to the third-party AI infrastructure providers we use, so that those systems can analyze your Request and help generate a Decision Report (contractual necessity).
To follow up with you and improve results, for example, using the contact details and situation information you provide during a search to send you additional options if we identify something useful after your initial Decision Report, or to answer your questions (contractual necessity / our legitimate interest in providing a useful service).
To process payments and manage subscriptions, together with our payment processor (contractual necessity / legal obligation, e.g., tax and accounting requirements).
To communicate with you for marketing purposes, such as sending you information about new features, plans, or offers, where permitted by applicable law and, where required, with your consent; you can opt out at any time as described in Section 8 (consent / our legitimate interest in promoting our Services, balanced against your rights).
To maintain, secure, and improve the Services, including monitoring for abuse, debugging, understanding usage patterns, and — unless you have opted out where an opt-out is offered, or except where we are legally required to retain data — improving and evaluating the AI systems used in connection with the Services, including through the use of de-identified or aggregated Request data (our legitimate interest in operating and improving a safe, effective service).
To prevent fraud and abuse, and to enforce our Terms of Use (our legitimate interest / legal obligation).
To comply with legal obligations, respond to lawful requests from public authorities, and establish, exercise, or defend legal claims (legal obligation / legitimate interest).
4. The Legal Bases We Rely On
Where applicable data protection law (such as the EU/UK GDPR) requires a legal basis for our processing, we rely on one or more of the following: performance of a contract with you, your consent, our legitimate interests (as described above, balanced against your rights and interests), and compliance with our legal obligations. Where we rely on consent — for example, for marketing communications, or where you voluntarily share sensitive information with us — you may withdraw that consent at any time, as described in Section 8.
5. Sensitive Information You Choose to Share
5.1. Because our Services are designed to help you find specialists for situations such as health, legal, or other personal matters, the free-text descriptions you send to the bot may include information that some laws classify as a "special category" or "sensitive" personal data — for example, references to a health condition, symptoms, or a legal matter.
5.2. Before you submit your first Request containing this type of information, we will ask you to give your explicit, affirmative consent to our processing of any special category or sensitive information you choose to include, for the purpose of generating your Decision Report. You will be able to decline, in which case we will not process sensitive information you have not consented to share, and you may need to describe your Request in less specific terms. Where we cannot rely on your explicit consent, we process such information, to the extent you choose to share it, on the alternative basis that you have manifestly made it public to us by voluntarily submitting it in order to receive the specific service you have requested. We do not seek to collect more sensitive information than you choose to disclose, and we encourage you to share only what is reasonably necessary to describe your request.
5.3. Please do not send us sensitive information about another identifiable person (for example, a family member's health condition) unless you have their knowledge and, where required by law, their consent to do so.
5.4. You may withdraw your consent to our processing of sensitive information at any time, as described in Section 8. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal, but may limit our ability to provide a Decision Report responsive to your original Request.
6. How We Share Your Information
We do not sell your personal information. We may share it with:
Third-party AI infrastructure providers, who process the content of your Requests on our behalf, using their servers, in order to generate Decision Reports. These providers act as our processors and are contractually restricted from using your information for their own independent purposes, except as permitted under their own terms for limited purposes such as safety and abuse monitoring.
Our payment processor (currently FastSpring, or such other processor as we may use), which collects and processes your payment and limited billing information as the merchant of record for paid subscriptions, under its own privacy policy.
Other service providers, such as cloud hosting, website analytics, customer communication, and email delivery providers, who process information on our behalf to help us operate the Services.
Telegram, as the messaging platform through which the bot operates; your use of Telegram itself is subject to Telegram's own privacy policy.
Professional advisors, such as lawyers, accountants, and auditors, where necessary for our business.
Authorities or third parties, where required by law, regulation, legal process, or governmental request, or where necessary to protect the rights, property, or safety of Nomadvice, our users, or the public.
A successor entity, in connection with a merger, acquisition, financing, reorganization, or sale of some or all of our assets, subject to that entity's assumption of obligations at least as protective as this Policy for previously collected information, to the extent required by applicable law.
We do not share the content of your Requests with the Providers referenced in a Decision Report, except to the extent you choose to send them information yourself (for example, using a suggested message the Services generate for you).
7. Automated Processing and Decision Reports
7.1. Decision Reports are generated primarily through automated analysis of your Request and publicly available third-party information, using AI systems. We use this automated process to help you make your own decision — it does not, by itself, produce any legal or similarly significant effect concerning you, and you always retain the ability to disregard the output, seek other options, or make your own independent choice.
7.2. If you have concerns about how a Decision Report was generated, or believe it reflects an error, you may contact us as described in Section 13.
7.3. In line with applicable AI transparency requirements, including Article 50 of the EU Artificial Intelligence Act, we disclose to you, at the start of your interaction with the bot, that you are communicating with an AI-based system rather than a human being, and that outputs such as Decision Reports are AI-generated.
8. Your Privacy Rights and Choices
Subject to applicable law, and depending on where you live, you may have some or all of the following rights regarding your personal information:
Access. To ask us for a copy of the personal information we hold about you.
Correction. To ask us to correct information that is inaccurate or incomplete.
Deletion. To ask us to delete your personal information, subject to certain exceptions (for example, information we need to retain for legal or accounting purposes).
Restriction / objection. To ask us to restrict, or to object to, certain processing of your information, including processing based on our legitimate interests or for direct marketing.
Portability. To ask us to provide certain information in a structured, commonly used, machine-readable format, or to transmit it to another provider, where technically feasible.
Withdraw consent. Where our processing is based on your consent, to withdraw that consent at any time, without affecting the lawfulness of processing before withdrawal.
Opt out of marketing. To opt out of marketing communications at any time, for example by using the unsubscribe mechanism in an email or by contacting us.
Complain. To lodge a complaint with your local data protection authority, if you believe our processing of your information does not comply with applicable law.
If you are a California resident, you may have additional or differently framed rights under the California Consumer Privacy Act, as amended (CCPA/CPRA), including the right to know, delete, correct, and limit use of sensitive personal information, and the right to non-discrimination for exercising your rights. We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.
To exercise any of these rights, contact us at privacy@nomadvice.com. We may need to verify your identity before responding, and we will respond within the time required by applicable law. If we cannot fulfil part of your request (for example, because it would require deleting information we are legally required to keep), we will explain why.
9. Data Retention
9.1. We retain personal information for as long as reasonably necessary to provide the Services, for the purposes described in this Policy, and as required by applicable law.
9.2. As general guidance: we retain account, subscription, and Request information for as long as your account is active, and for a reasonable period afterward (generally up to 24 months following your last activity or account closure) to handle any follow-up questions, disputes, or legal requirements, after which it is deleted or anonymized/aggregated. Billing and transaction records may be retained for longer where required by applicable tax, accounting, or corporate law. You may ask us to delete your information sooner, as described in Section 8, subject to the exceptions noted there.
10. International Data Transfers
10.1. Nomadvice and the third-party service providers we use (including AI infrastructure providers, cloud hosting, and our payment processor) may process your information in countries other than the one in which you live, including countries that may not have data protection laws equivalent to those of your country of residence.
10.2. Where required by applicable law, we take reasonable steps to ensure that such transfers are subject to appropriate safeguards, such as contractual protections with our service providers.
11. Data Security
We maintain reasonable technical and organizational measures designed to protect your information against unauthorized access, loss, misuse, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the security of your own Telegram account and device. If we become aware of a personal data breach that is likely to result in a risk to your rights, we will notify the competent supervisory authority and affected individuals within the timeframe required by applicable law (for example, within 72 hours of becoming aware of the breach, where required under the law of Georgia or other applicable data protection law).
12. Children
The Services are not directed at, and are not intended for use by, anyone under 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have done so, we will take reasonable steps to delete that information. If you believe a child has provided us with personal information, please contact us at privacy@nomadvice.com.
13. Third-Party Links and Platforms
The Services may reference or link to third-party websites, platforms, or services (for example, Telegram, online maps, social media platforms, or Provider websites) that we do not control. This Policy does not apply to those third parties. We encourage you to review their privacy policies before providing them with information.
14. Cookies
Our website nomadvice.com may use cookies and similar technologies. Please see our Cookie Policy, available on the website, for more information and for how to manage your cookie preferences.
15. Changes to This Policy
We may update this Policy from time to time to reflect changes to the Services, our practices, or legal requirements. We will post the updated Policy and revise the "Effective date" above. Where changes are material, we will make reasonable efforts to notify you, for example through the bot, by email, or by a notice on our website. Your continued use of the Services after the effective date of an updated Policy constitutes your acceptance of it.
16. Language
This Policy may be made available in languages other than English, including Russian, for your convenience. In the event of any conflict, discrepancy, or ambiguity between the English version and a translated version, the English version prevails.
17. Who We Are and How to Contact Us
The data controller responsible for your information is Nomadvice LLC, a limited liability company organized under the laws of Georgia. If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your information, please contact us at privacy@nomadvice.com.
