Privacy Policy
Last updated: Mar 7, 2026
Confidentiality and security are core values of Nmbr. We are committed to safeguarding the privacy of our users and customers and ensuring transparency about how we collect, use, and protect your personal data. Below, you will find all necessary information about the data we collect, how we process it, and your rights.
1. Who is the data controller?
This Privacy Policy applies to Easy Flat Inc. (DBA Nmbr), registered at:
345 E 76th St, New York, NY 10021, United States.In this document:
"Nmbr" refers to Easy Flat Inc.
"User(s)" means visitors to the website or users of the services provided by Nmbr.Nmbr processes personal data in compliance with:
General Data Protection Regulation (GDPR) for users in the European Union,
UK GDPR for users in the United Kingdom,
California Consumer Privacy Act (CCPA) for users in the United States.2. What personal data do we collect?
- 2.1 Account and registration information
Collected data:Name, email address, phone number, password, and account preferences.
Purpose:
To create and manage your account and enable access to services.
Legal basis:
Performance of a contract (Art. 6(1)(b) GDPR) or legitimate interest (Art. 6(1)(f) GDPR). - 2.2 Financial and transactional information
Collected data:Payment card details (processed directly by Stripe), billing address, transaction history.
Purpose:
To process payments and issue invoices.
Legal basis:
Performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR).
Nmbr does not store sensitive financial data, such as credit card numbers. Payment information is securely processed by Stripe, our third-party payment processor. - 2.3 Rental-related information
Collected data:Identification documents (passport/ID), residency address, proof of income, and travel purpose (e.g., work/study).
Purpose:
To facilitate rental agreements and comply with local regulations.
Legal basis:
Performance of a contract (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR). - 2.4 Website usage and cookies
Collected data:IP address, browser type, device type, session duration, and cookies.
Purpose:
To enhance website functionality, analyze usage patterns, and deliver personalized content.
Legal basis:
Legitimate interest (Art. 6(1)(f) GDPR) or consent where required (Art. 6(1)(a) GDPR). - 2.5 Marketing data
Collected data:Name, email address, browsing behavior, and interaction with marketing emails.
Purpose:
To send newsletters, promotional content, and updates.
Legal basis:
Consent (Art. 6(1)(a) GDPR and CCPA). - 2.6 SMS Opt-In Data
Collected data:Phone number and related SMS opt-in consent information (including date, time, and method of consent).
Purpose:
To deliver transactional or service-related SMS communications, including updates about listings, account activity, and other requested notifications.
Legal basis:
Consent (Art. 6(1)(a) GDPR and CCPA). - 2.7 AI communications and interaction data
Collected data:Voice recordings, call transcripts, chat messages, AI assistant interactions, call metadata, and other communications made through Nmbr tools, including AI voice agents and chat systems.
Purpose:
To operate and improve Nmbr services, including automated communication systems, customer support, quality monitoring, product development, internal analytics, and service optimization.
Some communications may be recorded, stored, transcribed, and analyzed using automated systems.
Legal basis:
Performance of a contract (Art. 6(1)(b) GDPR), legitimate interest (Art. 6(1)(f) GDPR), and consent where required by applicable law.
Third-party processing:
Nmbr may use third-party technology providers (for example voice processing, speech recognition, or AI infrastructure providers) to process communications on our behalf in order to deliver the Service.
These providers act as service processors and are contractually restricted from using the data for their own purposes.
Nmbr does not sell or rent communication data to third parties.
We collect and process the following types of personal data:
- 2.1 Account and registration information
3. How do we use your data?
Nmbr uses your personal data for the following purposes:
Service delivery:
To manage rental agreements, process payments, and provide support.
Legal compliance:
To meet legal obligations, such as anti-fraud checks and tax reporting.
Marketing and communication:
To send you updates and promotional offers (only with your consent).
Website analytics:
To monitor performance and improve user experience.
SMS communications:
We use SMS opt-in data exclusively to send transactional or service-related messages, including updates about listings, account activity, or other communications you have requested. We do not use SMS opt-in data for unrelated purposes.4. How is your data shared?
Service providers:Including Stripe for payment processing. Stripe collects and processes payment information (e.g., credit card numbers, billing addresses) to complete transactions securely. Stripe’s data handling practices are governed by their Privacy Policy, available here.
Business partners:For facilitating rental agreements (e.g., landlords or property managers).
Legal authorities:When required by law or for legitimate legal purposes.
SMS opt-in data protection:SMS opt-in data and consent information will not be sold, rented, or shared with third parties for marketing or promotional purposes. This information is used solely for the delivery of SMS communications you have explicitly consented to receive.
5. International data transfers
Nmbr operates in the US, UK, and EU, which involves transferring data between these regions.
For users in the EU/UK:Data shared with Stripe for payment processing is transferred to the United States. Stripe complies with GDPR requirements through the use of Standard Contractual Clauses (SCCs) and other recognized safeguards.
Nmbr ensures that all data transfers are conducted with adequate safeguards to protect your information.6. Your rights
For users in the EU/UK (GDPR/UK GDPR):
You have the right to:
Access: Obtain a copy of your personal data.
Rectification: Correct inaccuracies in your data.
Erasure: Request deletion of your data ("right to be forgotten").
Restriction: Limit the processing of your data.
Portability: Transfer your data to another provider.
Objection: Object to processing based on legitimate interest.
To exercise these rights, email us at [email protected].For users in the US (CCPA):
California residents have the right to:
Know the categories of personal information collected in the past 12 months.
Access and delete their personal information (with exceptions).
Opt out of the "sale" of personal information.
Equal service and price, regardless of exercising privacy rights.
To exercise these rights, email us at [email protected].7. Data retention
Nmbr retains personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy:
Account information: Retained while your account is active.
Financial transactions: Retained for up to 7 years to comply with tax and accounting laws.
Marketing data: Retained until you withdraw consent.
After the retention period, data will be deleted or anonymized. Payment data is securely processed and stored by Stripe for the required retention period under applicable laws.8. Security measures
Nmbr takes data security seriously. We implement:
Encryption: SSL/TLS for data in transit and encryption for data at rest.
Access controls: Role-based access for employees.
Monitoring: Regular security audits and monitoring for unauthorized access.
Nmbr partners with Stripe, which is PCI DSS Level 1 certified, ensuring the highest level of security for payment processing.9. Cookies
Nmbr uses cookies to:
Improve website functionality.
Track user behavior for analytics and marketing.
For more information, see our Cookie Policy.10. Changes to this policy
Nmbr reserves the right to update this Privacy Policy at any time. Changes will be communicated via email or website notifications.
Date of last modification: Mar 7, 2026