NOMADE LAB Privacy Policy

Effective date: November 9, 2026

This Privacy Policy explains how INT MEDIA ASSET MGMNT LLC, 350 Northeast 24th Street, Miami, Florida 33137, United States, operating under the NOMADE LAB brand ("NOMADE LAB", "we", "us"), handles information in connection with the website https://www.nomadelab.com (the "Site") and the NOMADE LAB Platform, our online advertising console for business customers (the "Platform").

In short

• We do not run advertising or analytics trackers on the Site or the Platform, and we do not build profiles of visitors.
• We do not sell personal information or share it for cross-context behavioral advertising.
• We do not collect data about the people who see or click the ads our customers run. That data stays with the advertising platforms.
• Sign-in, payments, hosting, advertising delivery and AI processing are handled by third-party platforms, which collect and process data under their own privacy policies.
• The only personal information we keep ourselves is the minimum needed to operate business accounts: work email addresses, roles, an activity log and billing contacts.

Who is responsible

INT MEDIA ASSET MGMNT LLC is responsible for the information described in this policy. Contact: legal@nomadelab.com.

The Site

The Site is a static website. We do not use it to set advertising or analytics cookies, and it has no user accounts.

• Hosting. The Site is served by Cloudflare, which processes technical data such as IP address, browser type and requested pages to deliver and protect the Site, and may set strictly necessary security cookies.
• Fonts. The Site loads typefaces from Google Fonts. Your browser connects to Google's servers to download them, which discloses your IP address to Google.
• Contact. The contact form does not send data to our servers. It opens your own email application with a draft message. If you email us, we receive your email address and whatever you choose to write, and we use it to answer you and to manage our business relationship.

The Platform

The Platform is offered to companies and is available by invitation only. In operating it, we keep:

• Account data. The work email address of each authorized user, the role and permissions assigned, who granted them, and the date, version and IP address of each user's acceptance of our Terms. Sign-in is performed by third-party identity providers (Cloudflare Access and Google). We never receive or store passwords.
• Activity log. A record of the actions each user takes in the Platform (for example creating, editing, approving or pausing a campaign), with date and time, for security, support and accountability.
• Business content. Campaign settings, ad text and images, budgets, performance metrics and spend. This is business information and is not intended to contain personal data.
• Billing data. A billing contact email, invoices and receipts, payment status, and, if you pay by card, the card brand, last four digits and expiry date together with a token issued by the payment processor. Full card numbers and security codes are entered directly with the processor and never reach our systems. Bank transfers are handled by the banks involved.
• AI assistant inputs. The text and files users submit to AI features, which are sent to the AI provider to generate a response.
• Technical logs. Short-lived request and error logs kept by our hosting provider for security and troubleshooting.

A strictly necessary session cookie is set by the sign-in provider to keep you signed in. The Platform sets no advertising or analytics cookies.

What we do not collect

We do not collect, receive or store data that identifies the audiences of our customers' advertising. Performance reports reach us from the advertising platforms as aggregated figures. We ask customers not to upload personal data to the Platform or to submit it to AI features.

How we use information

We use the information above to provide and secure the Services, authenticate users and apply their permissions, run and report on campaigns as instructed by our customers, bill and collect payments, provide support, comply with legal, tax and accounting duties, and enforce our agreements. Where the law requires a legal basis, we rely on performance of a contract, our legitimate interest in operating and protecting a business service, and compliance with legal obligations. We do not make decisions about individuals based solely on automated processing.

Third-party platforms

We rely on the providers below. Each one processes data under its own terms and privacy policy, and we do not control their practices:

• Cloudflare: hosting, security, access control and database for the Site and the Platform. cloudflare.com/privacypolicy
• Google: sign-in to the Platform, Google Fonts on the Site, and Google Sheets and Looker Studio for internal reporting. policies.google.com/privacy
• Intuit QuickBooks: card payments, invoices and receipts. intuit.com/privacy/statement
• OpenAI: advertising platform where customer campaigns are created and delivered. openai.com/policies/privacy-policy
• Anthropic: AI model provider for the Platform's assistant. anthropic.com/legal/privacy
• Banks and payment networks: processing of transfers and card transactions.

We may add or replace providers as the Services evolve, and will update this list.

QuickBooks data

The Platform connects to NOMADE LAB's own QuickBooks company in order to create customer records, charges and receipts for the advertising services we bill. We use data obtained through Intuit's services only for that purpose. We do not sell it, do not use it for advertising and do not transfer it to others, except to service providers that help us operate the Services or where the law requires.

Sharing

We do not sell personal information. We share information only: with the providers listed above, as needed to operate the Services; with the advertising platforms, as needed to run a customer's campaigns; with the customer organization to which a user belongs, whose administrators can see its users and their activity; with professional advisers; in connection with a merger, financing or sale of our business; and where required by law or to protect rights, safety and security.

Retention

We keep account data and activity logs while the account is active and for as long afterwards as needed for security, dispute resolution and audit. We keep billing records for the period required by tax and accounting law. Technical logs are kept for a short time. We delete or anonymize information when it is no longer needed.

Security

We use measures designed to protect information, including single sign-on, role-based access, encryption in transit, encryption of stored credentials and activity logging. No system is completely secure, and we cannot guarantee absolute security.

International transfers

We and our providers operate in the United States and other countries. Information may be processed outside your country, under the safeguards each provider applies.

Your rights

Depending on where you live, you may have the right to access, correct, delete or port your personal information, to object to or restrict certain processing, and to complain to your data protection authority. This includes rights under the GDPR, the laws of US states such as California, Mexico's LFPDPPP (ARCO rights), Brazil's LGPD and similar laws. To exercise a right, write to legal@nomadelab.com. We may need to verify your identity, and we will not discriminate against you for making a request. For data held by a third-party platform, please also contact that platform. If your access to the Platform was given by your employer or agency, we may refer your request to them.

Children

The Services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children.

Changes

We may update this policy by posting a new version at this address with a new effective date. If a change is material, we will notify Platform users by email and post a notice on the Site.

Contact

INT MEDIA ASSET MGMNT LLC (NOMADE LAB), 350 Northeast 24th Street, Miami, Florida 33137, United States. Email: legal@nomadelab.com. This policy is also available in Spanish. If the versions differ, the English version prevails. See also our Terms of Service.