Legal

Privacy Policy

This policy explains what information Nomais collects, how it is used, and what rights individuals may have under applicable privacy laws.

FeelAI, Inc.

Version: 1.1

Last updated: April 14, 2026

1. Introduction

FeelAI, Inc., doing business as Nomais ("Nomais," "we," "us," or "our") is a research and intelligence firm that provides expert consultation, advisory, survey, and research services to private equity firms, management consultancies, corporate strategy teams, and other professional organizations worldwide. Nomais is a Delaware C-Corporation with its principal operations in the United States.

This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information when you (a) use or visit our website at nomais.io (the "Website"), (b) engage with us as an expert in our network, (c) engage with us as a client or prospective client, or (d) otherwise interact with us in connection with our services (collectively, the "Services"). This Privacy Policy also explains your rights and choices with respect to your personal information.

By accessing the Website or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described in this Privacy Policy, please do not use the Website or provide personal information to us.

This Privacy Policy does not apply to third-party websites, products, or services, even if they are linked from our Website. We encourage you to review the privacy policies of any third-party services you access.

2. Information We Collect

We collect personal information in the following categories, depending on your relationship with us:

2.1 Information from Experts

If you participate in our expert network or are considered for engagement as an expert, we may collect:

  • Contact information: name, email address, telephone number, mailing address
  • Professional information: job title, current and former employers, professional background, areas of expertise, education, professional certifications, industry experience, and employment history
  • Public profile information: LinkedIn profile URL and other publicly available professional information
  • Payment information: bank account details, tax identification information, and other financial information necessary for compensation - processed securely by our payment processor, Stripe, Inc.
  • Engagement information: records of consultations, scheduling details, availability, and feedback
  • Communications: correspondence exchanged between you and Nomais, including emails and recorded calls (where authorized and disclosed)
  • Compliance information: information collected for conflict-of-interest screening and regulatory compliance

2.2 Information from Clients

If you engage Nomais as a client or represent a client organization, we may collect:

  • Contact information: name, email address, telephone number, job title, employer
  • Business information: company name, industry, project requirements, research objectives, and engagement preferences
  • Contractual information: information necessary to establish and administer the business relationship, including billing information
  • Communications: correspondence exchanged in connection with the Services

2.3 Information from Website Visitors

When you visit the Website, we may automatically collect:

  • Device and usage information: IP address, browser type and version, operating system, device type, referring URL, pages visited, time spent on pages, and other browsing behavior
  • Cookies and similar technologies: information collected through cookies, web beacons, pixels, and similar tracking technologies (see Section 9 below)
  • Analytics data: aggregated and anonymized information about how visitors use the Website, collected through third-party analytics tools

2.4 Information from Public Sources

In the course of providing our research services, we may collect professional and business information from publicly available sources, including corporate websites, professional networking platforms, regulatory filings, news publications, and industry databases. This information is used to identify and evaluate potential experts and to support our research deliverables.

3. How We Use Information

We use personal information for the following purposes:

3.1 Service Delivery. To provide, administer, and improve our Services, including identifying, screening, and engaging experts; facilitating consultations between experts and clients; preparing research deliverables; and managing client relationships.

3.2 Expert Matching. To match experts with research projects based on relevant expertise, experience, industry background, and availability.

3.3 Payment Processing. To process compensation payments to experts and to manage billing and invoicing with clients, including transmitting necessary financial information to our payment processor.

3.4 Communications. To communicate with you about engagements, Service updates, scheduling, and administrative matters; and to respond to your inquiries and requests.

3.5 Compliance and Screening. To conduct compliance checks, conflict-of-interest screening, and other due diligence activities as required by our policies, contractual obligations, and applicable laws.

3.6 Technology-Assisted Research Processing. We use proprietary technology, including artificial intelligence and machine learning systems, automated data processing tools, and natural language processing, to enhance our research process. These technologies assist with data analysis, quality assurance, expert matching, and preparation of research deliverables. We apply industry-standard de-identification measures, including removal of direct identifiers and limitation of indirect identifier combinations, before processing data through third-party technology providers. Our use of automated processing does not produce decisions with legal or similarly significant effects on individuals without human oversight.

3.7 Website Operations and Analytics. To operate, maintain, and improve the Website; to understand how visitors interact with the Website; and to ensure the security and integrity of our online platforms.

3.8 Legal Compliance. To comply with applicable laws, regulations, legal processes, and governmental requests; to enforce our agreements; and to protect the rights, privacy, safety, or property of Nomais, our clients, experts, or others.

3.9 Business Operations. To administer our business, including record-keeping, financial reporting, internal audits, and other legitimate business operations.

4. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area ("EEA"), the United Kingdom, or Switzerland, we rely on the following legal bases for processing your personal information under the GDPR or equivalent applicable law:

4.1 Performance of a Contract. Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract. This applies, for example, when we engage you as an expert or provide Services under an agreement with your organization.

4.2 Legitimate Interests. Processing is necessary for the purposes of our legitimate interests or those of a third party, provided that such interests are not overridden by your fundamental rights and freedoms. Our legitimate interests include operating and improving our Services, conducting research, matching experts with client projects, ensuring network security, preventing fraud, and managing our business relationships. Where we rely on legitimate interests, we conduct balancing assessments to ensure that your interests, rights, and freedoms are appropriately considered.

4.3 Consent. Where required by applicable law, we process personal information based on your freely given, specific, informed, and unambiguous consent. Where consent is the legal basis, you have the right to withdraw your consent at any time by contacting us at privacy@nomais.io. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

4.4 Legal Obligation. Processing is necessary for compliance with a legal obligation to which Nomais is subject, such as tax reporting, regulatory compliance, or responding to lawful requests from public authorities.

5. How We Share Information

We do not sell your personal information. We share personal information only in the following circumstances:

5.1 With Clients. We share expert consultation results, research deliverables, and related information with our clients in the course of providing the Services. We do not disclose experts' personal contact information to clients without the expert's authorization, except as necessary to facilitate authorized engagements.

5.2 With Service Providers. We engage trusted third-party service providers to assist in operating our business and delivering our Services. These providers process personal information on our behalf and are contractually obligated to use it solely for the purposes we specify and to maintain appropriate security measures. Our service providers include:

  • Stripe, Inc. - for processing expert compensation payments and related financial transactions
  • Technology service providers - for automated data processing in support of our research services, subject to the de-identification measures described in Section 3.6

5.3 Legal Requirements. We may disclose personal information if we believe in good faith that such disclosure is necessary to (a) comply with applicable laws, regulations, legal processes, or governmental requests, (b) enforce our agreements, including our terms of service and contractual obligations, (c) detect, prevent, or address fraud, security, or technical issues, or (d) protect the rights, property, or safety of Nomais, our clients, experts, or the public.

5.4 Business Transfers. In the event of a merger, acquisition, reorganization, bankruptcy, or other similar corporate transaction involving Nomais, personal information may be transferred to the acquiring entity or successor, provided that the recipient agrees to be bound by obligations no less protective than those set forth in this Privacy Policy.

5.5 With Your Consent. We may share personal information with third parties when you have given us your explicit consent to do so.

5.6 Aggregated and De-Identified Data. We may share aggregated or de-identified data that cannot reasonably be used to identify you, without restriction. Such data is not considered personal information under this Privacy Policy.

6. International Data Transfers

Nomais is headquartered in the United States, and personal information we collect is stored and processed in the United States. If you are located outside the United States, including in the EEA, the United Kingdom, or Switzerland, your personal information will be transferred to and processed in the United States, which may not provide the same level of data protection as your home jurisdiction.

For transfers of personal information from the EEA, the United Kingdom, or Switzerland to the United States, we implement appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs): We enter into Standard Contractual Clauses approved by the European Commission (and, for UK transfers, the UK International Data Transfer Addendum) with data exporters and importers, as applicable, to ensure that personal information receives an adequate level of protection.
  • Additional safeguards: Where required, we implement supplementary measures to address specific risks associated with international data transfers, including technical, organizational, and contractual measures.

For more information about the safeguards we use for international transfers, please contact us at privacy@nomais.io.

7. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected and to comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention periods depend on the nature of the information and the purpose of processing:

  • Expert information: Retained for the duration of your participation in our expert network and for a reasonable period thereafter in order to facilitate potential future engagements, comply with tax and financial reporting obligations, and fulfill contractual obligations to clients.
  • Client information: Retained for the duration of the client relationship and for a reasonable period thereafter as necessary for record-keeping, financial reporting, and legal compliance.
  • Website visitor information: Retained in accordance with our cookie and analytics practices, typically for a period not exceeding twenty-four (24) months unless a longer retention period is required for security or legal purposes.

When personal information is no longer necessary for the purposes for which it was collected, we will securely delete or anonymize it in accordance with our data retention policies and applicable law.

8. Your Rights

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

8.1 Rights Under the GDPR (EEA, UK, Switzerland)

If you are located in the EEA, the United Kingdom, or Switzerland, you have the following rights under the GDPR or equivalent applicable law:

  • Right of Access. You have the right to request confirmation as to whether we process your personal information and, if so, to request a copy of such information.
  • Right to Rectification. You have the right to request correction of inaccurate personal information and completion of incomplete personal information.
  • Right to Erasure. You have the right to request deletion of your personal information in certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected.
  • Right to Restriction of Processing. You have the right to request that we restrict the processing of your personal information in certain circumstances, such as when you contest the accuracy of the information.
  • Right to Data Portability. You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to request that we transmit such information to another controller, where technically feasible.
  • Right to Object. You have the right to object to the processing of your personal information based on our legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.
  • Rights Related to Automated Decision-Making. You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. To the extent that we use automated processing in our research services, we apply de-identification measures and human oversight to ensure that such processing does not produce decisions with legal or similarly significant effects on individuals.
  • Right to Withdraw Consent. Where we rely on consent as the legal basis for processing, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us at privacy@nomais.io. We will respond to your request within one (1) month, as required by the GDPR. If we require additional time, we will inform you of the extension and the reasons for the delay. You also have the right to lodge a complaint with a supervisory authority in the EEA Member State or country in which you reside or work, or in which the alleged infringement occurred.

8.2 Rights Under the CCPA (California)

If you are a California resident, you have the following rights under the California Consumer Privacy Act and the California Privacy Rights Act (collectively, the "CCPA"):

  • Right to Know. You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected the information, the business or commercial purpose for collecting the information, and the categories of third parties with whom we share the information.
  • Right to Delete. You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
  • Right to Correct. You have the right to request that we correct inaccurate personal information.
  • Right to Opt-Out of Sale or Sharing. We do not sell or share your personal information as those terms are defined under the CCPA. Accordingly, there is no need to opt out.
  • Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights. We will not deny you Services, charge you different prices, provide you a different level or quality of Services, or suggest that you may receive a different price or level of Services for exercising your rights.

To exercise your CCPA rights, please contact us at privacy@nomais.io. We will verify your identity before fulfilling your request. You may also designate an authorized agent to make a request on your behalf, provided that the agent presents written authorization signed by you and we can verify your identity.

8.2a Rights Under Other U.S. State Privacy Laws

If you are a resident of a U.S. state with a comprehensive privacy law - including but not limited to Colorado, Connecticut, Virginia, Texas, Oregon, Montana, and other states that have enacted or may enact similar legislation - you may have additional rights under applicable state law, such as the right to access, correct, delete, or opt out of certain processing of your personal information. To exercise any rights available to you under applicable state privacy law, please contact us at privacy@nomais.io. We will verify your identity and respond within the timeframes required by the applicable law.

8.3 Exercising Your Rights

To exercise any of the rights described above, please contact us at:

Email: privacy@nomais.io

We may need to verify your identity before processing your request. We will respond to verifiable requests within the timeframes required by applicable law.

9. Cookies and Similar Technologies

9.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. We use cookies and similar technologies on our Website for the purposes described below.

9.2 Types of Cookies We Use

  • Strictly Necessary Cookies. These cookies are essential for the Website to function properly. They enable core functionality such as security, network management, and account access. These cookies cannot be disabled.
  • Analytics Cookies. These cookies help us understand how visitors interact with the Website by collecting information about pages visited, time spent on the Website, and other usage data. We use this information to improve the Website and our Services. Analytics data is collected in aggregated form.

9.3 Managing Cookies

Most web browsers allow you to manage cookie preferences through browser settings. You can set your browser to refuse cookies or to alert you when cookies are being sent. Please note that disabling certain cookies may affect the functionality of the Website.

For more information about cookies and how to manage them, you may visit www.allaboutcookies.org.

For visitors located in the European Economic Area, the United Kingdom, or other jurisdictions that require affirmative consent for non-essential cookies, we present a cookie consent mechanism upon your first visit to the Website. You may accept or reject non-essential cookies through this mechanism, and you may update your preferences at any time through the cookie settings link available on the Website.

9.4 Do Not Track and Global Privacy Control

Some browsers offer a "Do Not Track" (DNT) feature that sends a signal to websites indicating that you do not wish to be tracked. At this time, the Website does not respond to DNT signals, as there is no universally accepted standard for how websites should respond to them.

We do honor Global Privacy Control (GPC) signals from browsers that support this feature. When we detect a GPC signal, we treat it as a valid opt-out request under applicable privacy laws, including the California Consumer Privacy Act.

10. Security

We implement appropriate technical and organizational security measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, network security measures, and regular security assessments.

While we strive to protect your personal information, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your personal information, but we are committed to promptly addressing any security incident in accordance with applicable law.

11. Children's Privacy

Our Website and Services are not directed at individuals under the age of sixteen (16). We do not knowingly collect personal information from children under the age of sixteen. If we become aware that we have inadvertently collected personal information from a child under the age of sixteen, we will take reasonable steps to delete such information promptly. If you believe that we may have collected personal information from a child under the age of sixteen, please contact us at privacy@nomais.io.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes to this Privacy Policy, we will notify you by posting the updated Privacy Policy on the Website and updating the "Last updated" date at the top of this page. Where required by applicable law, we will provide additional notice, such as by email.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal information. Your continued use of the Website or Services after the posting of an updated Privacy Policy constitutes your acceptance of the changes.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

FeelAI, Inc.

1111B S Governors Ave STE 23994 Dover, DE 19904, United States

Email (Privacy): privacy@nomais.io

Email (Legal): legal@nomais.io

If you are located in the EEA or the United Kingdom and believe that our processing of your personal information infringes applicable data protection law, you have the right to lodge a complaint with the supervisory authority in the country where you reside, where you work, or where the alleged infringement occurred.

Last updated: April 14, 2026