Security & Privacy

Convenient by default. Safe where it counts.

Nymoru keeps work moving while you keep control. Money, permanent deletes and granting access always need your approval. Company policies can add checks, and unattended sends become drafts.

Illustration: what moves ahead on its own, and what waits for you. The app shows the real cards the same way.

The three gates

One tap from you, every time.

These always wait for a person: one tap on screen or from a notification, or one tap to approve a batch. Never a spoken yes alone, never "always allow", and no company setting can remove them.

1

Moving money

The wallet, purchases of any amount and transfers.

2

Deleting for good

Emptying the trash, deleting one item permanently, deleting the account, hard deletes in a connected app.

3

Granting access

Permissions, sharing outside the company and adding admins.

On your phone

Approve from anywhere.

When something needs your OK, it waits for you with the reason, the risk and a recommendation. Decide right from your iPhone.

  • See why it was asked, and what could go wrong.
  • Approve, reject or add a note.
  • Each request shows how long it has left.
Control as you work

See what happened. Undo where supported.

Reading, searching and drafting can move ahead. Supported sends have an undo window, recoverable items go to the trash, and company policies may require additional approval.

  • Sends wait 10 seconds

    Emails, messages and app writes to other people show "Sending… Undo" first.

  • 30-day trash

    Files, messages, bots, rooms, routines and memories can be restored for 30 days.

  • Undo in connected apps

    When an app has its own bin and a restore, moving something there can be undone too.

Kept, invisibly

The protections you never have to think about.

  • Prompt-injection defences

    Outside content is treated as untrusted. Checks help prevent it from redirecting tasks or making unauthorised changes.

  • Isolation and encryption

    Each person's data is kept apart and encrypted; personal memories use a key of their own.

  • Personal and company, split

    Your personal space and your work space never mix, and bots never carry data across.

  • Audit log

    Actions are recorded, so a company can see what was done and when.

  • Card numbers redacted

    The AI never sees a card number.

  • Unknown means no

    An action Nymoru does not recognise fails closed until a manager approves it.

Your data

Where it lives, and who can see it.

Stored in Singapore
Conversations, files, memories and accounts are stored in Singapore. AI processing may take place in other regions; storage and access controls protect your personal space.
Your personal space stays private
Company admins cannot read conversations, memories or files in your personal space. Personal spending shows only as a total; work-space activity follows company policy.
Secrets stay out of memory
Passwords, keys and similar secrets are removed before anything is remembered.
Voice audio is not stored
After a call, the transcript stays in the chat; the audio does not.
Yours to delete
See, edit and delete memories, and delete your account from Settings whenever you want.
Designed for Thailand's PDPA
Our Privacy Policy explains what we collect, why, and how to reach us about your data.
Learning, under your control

Bots get better from use, without learning your secrets.

Nymoru improves how its bots work (their playbooks and guidance), never by training a model on your data.

  1. 01

    Your own bots

    Learn from how you work with them. You can switch it off.

  2. 02

    Your company

    Shared playbooks stay off until your company admin turns them on.

  3. 03

    Everyone

    Only de-identified signals, where our Privacy Policy allows and you have not switched it off: names, emails, phone numbers, IDs and secrets are removed, and a pattern needs at least 10 people from 3 companies.

Never used: sensitive categories of data, data from Google or any other connected app, or anyone's personal space unless they turn that on themselves.

For companies

Admin and policy at admin.nymoru.com.

Company owners, admins and billing get their own console: members, domains, allowed apps, credit caps, policy and the audit log.

  • Stricter rules are optional: confirm sends, meetings or app writes; a manager approves sharing, merges and deploys; a longer undo window.
  • Defaults stay as convenient as possible, and the three gates cannot be removed.
At a glance

Who runs Nymoru, and where your data lives.

Company
Nymoru is a product of WOXA Corporation Ltd.
Data
Stored on Google Cloud in Singapore. AI processing may take place in other regions.
Approvals
Moving money, deleting for good and granting access always wait for a person’s tap.
Personal space
Company admins cannot read the chats, memories or files in your personal space.
Apps
Web, Windows and Mac today. iPhone is coming soon.

Meet your AI team.

Sign in to start with Nymoru. Public sign-up opens soon; until then, ask us for access.