NOMS — Privacy Policy

Effective Date: March 10, 2026

Last Updated: March 10, 2026

1. Introduction

NOMS Inc. ("NOMS," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you access or use the NOMS platform, including the website, application, Draftroom submission system, AI evaluation services, and all related features and functionality (collectively, the "Platform").

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein. This Privacy Policy should be read in conjunction with our Terms of Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us, including:

Account Information. When you create an account, we collect your name, email address, and profile information provided through your authentication method (e.g., Google OAuth). If you choose to create a public profile, we collect any additional information you elect to share, including display name, username, and avatar.

Subscription and Payment Information. When you subscribe to a paid tier, we collect billing information necessary to process your payment. Payment processing is handled by Stripe, Inc. ("Stripe"), our third-party payment processor. We do not directly collect or store your credit card number, bank account number, or other financial account credentials. We receive and store your Stripe customer identifier, subscription status, and transaction history.

User Content. We collect all content you submit through the Platform, including predictions, votes, ratings, Draftroom submissions (titles, loglines, pitches, genre selections, comparable works, and all other form fields), and any communications you transmit through the Platform.

Communications. We collect information contained in any communications you send to us, including support requests, feedback, and correspondence.

2.2 Information Collected Automatically

When you access the Platform, we automatically collect certain technical information, including:

Device and Browser Information. We collect your device type, operating system, browser type and version, screen resolution, and language preferences.

Usage Data. We collect information about how you interact with the Platform, including pages viewed, features used, time spent on pages, click patterns, search queries, and navigation paths.

Log Data. Our servers automatically record information that your browser or device transmits when you access the Platform, including your Internet Protocol (IP) address, referring and exit URLs, date and time stamps, and cookie identifiers.

Cookies and Similar Technologies. We use cookies, local storage, and similar tracking technologies to facilitate authentication, remember your preferences, and analyze usage patterns. Essential cookies are required for Platform functionality, including session management and authentication persistence. You may configure your browser to refuse cookies; however, certain features of the Platform may not function properly without them.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

Authentication Providers. When you log in using Google OAuth, we receive your name, email address, and profile photograph from Google in accordance with the permissions you grant.

Payment Processor. Stripe provides us with limited transaction information, including subscription status, payment success or failure, and billing cycle dates.

Content Databases. We obtain publicly available information about films, television series, and other cultural works from third-party databases, including The Movie Database (TMDB) and the Open Movie Database (OMDb). This information relates to cultural works and not to individual users.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Platform Operations

To provide, maintain, operate, and improve the Platform, including processing your submissions, generating AI evaluations, calculating scores and rankings, displaying leaderboards, and facilitating predictions and voting.

3.2 AI Processing

To transmit your User Content to third-party artificial intelligence model providers — currently Anthropic (Claude), OpenAI (GPT-4), Google (Gemini), and Together AI (Llama) — for the purpose of generating evaluations, scores, and written analyses of Draftroom submissions and nominee predictions. Your User Content is transmitted to these providers via their respective APIs and is subject to their data processing terms.

3.3 Submission Verification

To generate cryptographic hashes of your submitted content together with your user identifier and timestamp, providing a verifiable record of submission (the "Submission Record").

3.4 Account Management

To create and manage your account, process subscription payments, enforce subscription tier limits, and communicate with you regarding your account, including transactional emails, subscription confirmations, and payment receipts.

3.5 Analytics and Improvement

To analyze usage patterns, measure feature adoption, identify technical issues, and improve Platform performance, design, and functionality. We may aggregate and anonymize usage data for analytical purposes.

3.6 Communications

To respond to your inquiries, provide customer support, send service-related notifications, and, with your consent where required by applicable law, send promotional communications regarding Platform features, updates, and content.

3.7 Security and Compliance

To detect, prevent, and address fraud, security incidents, technical issues, and violations of our Terms of Service. To comply with applicable legal obligations, respond to lawful requests from public authorities, and enforce our legal rights.

4. How We Share Your Information

We do not sell your personal information to third parties. We share your information only in the following circumstances:

4.1 With Other Users

Your public profile information (display name, username, avatar, tier badge, prediction history, and scores) is visible to other Platform users. Draftroom submissions designated as "Public" are visible to all users. Submissions designated as "Unlisted" are visible to anyone possessing the direct URL. Submissions designated as "Private" are visible only to you.

4.2 With AI Model Providers

We transmit User Content to third-party AI model providers for evaluation purposes as described in Section 3.2. These providers process your content pursuant to their own terms of service and privacy policies:

4.3 With Payment Processors

We share billing and transaction information with Stripe for payment processing purposes. Stripe's privacy policy is available at stripe.com/privacy.

4.4 With Service Providers

We may share information with third-party service providers who perform services on our behalf, including hosting (Vercel), database management (Supabase), and analytics. These providers are contractually obligated to use your information only as necessary to provide services to us and in a manner consistent with this Privacy Policy.

4.5 For Legal Purposes

We may disclose your information if required to do so by law, in response to a valid subpoena, court order, or government request, or when we believe in good faith that disclosure is reasonably necessary to protect the rights, property, or safety of NOMS, our users, or the public.

4.6 In Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of our assets, your information may be transferred to the acquiring entity. We will notify you via email or prominent notice on the Platform prior to your information becoming subject to a different privacy policy.

5. Data Retention

We retain your personal information for as long as your account is active or as necessary to provide you with the Platform's services. We retain User Content, including Draftroom submissions and associated Submission Records, for as long as your account is active and for a reasonable period thereafter to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Upon account deletion, we will delete or anonymize your personal information within thirty (30) days, except where retention is required by law or legitimate business purposes. Aggregated, anonymized data that cannot be used to identify you may be retained indefinitely for analytical purposes.

6. Data Security

We implement commercially reasonable technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), secure authentication protocols, access controls, and regular security assessments.

However, no method of electronic transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security. You are responsible for maintaining the security of your account credentials and for any activities that occur under your account.

7. Your Rights and Choices

7.1 Access and Correction

You may access and update your account information at any time through the Platform's account settings. You may request a copy of the personal information we hold about you by contacting us at privacy@bignoms.com.

7.2 Deletion

You may request deletion of your account and associated personal information by contacting us at privacy@bignoms.com. We will process your request within thirty (30) days, subject to any legal retention requirements.

7.3 Data Portability

You may request an export of your User Content, including all Draftroom submissions and associated Submission Records, in a commonly used electronic format by contacting us at privacy@bignoms.com.

7.4 Communication Preferences

You may opt out of promotional communications by following the unsubscribe instructions in any promotional email or by updating your communication preferences in your account settings. You cannot opt out of transactional communications related to your account or subscription.

7.5 Cookie Controls

You may configure your browser settings to refuse or delete cookies. Please note that disabling cookies may impair Platform functionality, particularly authentication and session management.

8. California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including:

  • The right to know what personal information we collect, use, and disclose;
  • The right to request deletion of your personal information;
  • The right to opt out of the sale or sharing of your personal information (we do not sell personal information);
  • The right to non-discrimination for exercising your privacy rights.

To exercise these rights, contact us at privacy@bignoms.com or submit a request through the Platform. We will verify your identity before processing any request.

9. International Users

The Platform is operated from the United States. If you access the Platform from outside the United States, you acknowledge that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Platform, you consent to such transfer and processing.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on the following legal bases for processing your personal information: performance of a contract (providing Platform services), legitimate interests (improving and securing the Platform), and consent (where applicable).

10. Children's Privacy

The Platform is not directed to individuals under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have inadvertently collected information from a child under 18, please contact us at privacy@bignoms.com.

11. Third-Party Links

The Platform may contain links to third-party websites, services, or content that are not owned or controlled by NOMS. This Privacy Policy does not apply to third-party services. We encourage you to review the privacy policies of any third-party services you access through the Platform.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. We will notify you of material changes by posting the revised Privacy Policy on the Platform and updating the "Last Updated" date. We may also provide notice via email for significant changes. Your continued use of the Platform after such notice constitutes acceptance of the revised Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

NOMS Inc.

Email: privacy@bignoms.com

For data protection inquiries specifically: dpo@bignoms.com

This Privacy Policy was last updated on March 10, 2026.