Privacy Policy

We may collect account information such as your name, work email, company name, and login credentials when you create or access an account.

We may also collect workspace data you choose to submit to the service, including website URLs, project names, legal page URLs, policy text you review or edit, and selected third-party services connected to a project.

To operate and secure Normio, we may collect technical data such as IP address, browser and device information, session activity, authentication events, and basic diagnostic logs.

When Normio scans a website, we may collect public website signals such as policy URLs, page text, scripts, embeds, cookie indicators, detected domains, third-party service names, and policy-change evidence from publicly available sources.

If you pay for a scan or subscription, we may receive payment status, invoice identifiers, transaction metadata, and related billing records from our payment provider. We do not store full card numbers or card security codes.

If email notifications are enabled or included in your plan, we may process your email address, alert preferences, delivery status, and the content needed to explain a detected review item.

We use personal and workspace information to create and manage accounts, authenticate users, provide the dashboard, and enable project monitoring features.

Submitted URLs and related project data may be used to detect public legal pages, identify public third-party services, compare policy sources, and generate alerts or analysis related to compliance workflows.

We may use public website and third-party policy signals to send notifications about possible compliance threats, vendor policy or terms changes, newly detected third parties, and situations where your own legal pages may need review.

We may also use information to maintain product security, troubleshoot issues, improve reliability, communicate product or access updates, and respond to support or legal requests.

Billing information is used to create checkout sessions, confirm payment status, unlock paid project access, reconcile invoices, prevent fraud, resolve disputes, and keep required financial records.

Normio may send product, account, billing, security, and compliance-monitoring emails. Monitoring emails may include detected third-party changes, legal-page drift, possible policy gaps, scan failures, or reminders to review your own documents.

You can request changes to non-essential notification preferences through the support or account access channel available to you. We may still send service, security, billing, and legal notices where reasonably necessary.

Normio is designed to analyze publicly accessible website content, such as privacy policies, terms pages, and third-party integrations that are visible from the websites you submit.

You should only submit websites and legal content that you are authorized to monitor or review. We do not intend for the service to be used to access private systems or restricted content.

Because public website content and third-party policy pages can change without notice, scan results are a point-in-time workflow aid unless your plan includes repeated monitoring.

Where applicable, we process personal data to provide the service you request, pursue legitimate interests in operating and securing Normio, comply with legal obligations, and communicate with users about the product.

If you are subject to GDPR or similar laws, you are responsible for ensuring that your use of Normio and the data you submit is lawful and appropriately disclosed to affected parties.

Depending on the context, our legal bases may include performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations, and consent where consent is requested.

We do not sell personal information. We may share data with service providers that support authentication, hosting, analytics, infrastructure, or security when reasonably necessary to operate Normio.

We may also disclose information when required by law, to enforce our rights, or to protect the security, integrity, and lawful use of the service.

These providers may include payment processors, hosting and infrastructure providers, authentication services, analytics or diagnostics tools, email or communication providers, and security vendors.

Normio and its service providers may process information in countries other than where you are located. Where required, we rely on appropriate safeguards for international transfers, such as contractual protections or other mechanisms recognized by applicable law.

We keep account and project data for as long as reasonably needed to provide the service, maintain records, resolve disputes, and meet legal or operational obligations.

Because Normio is in early access, data retention practices may evolve as the product matures. Material updates to this policy will be reflected on this page.

We use reasonable administrative, technical, and organizational measures to protect information handled by Normio. No system is completely secure, and we cannot guarantee absolute security.

You may request account updates, corrections, or deletion through the support or contact channel made available to you. We may keep limited information where required for security, legal, or record keeping purposes.

Depending on where you live and the laws that apply, you may also have rights to access, correct, erase, restrict, export, or object to certain processing of your personal data, and to withdraw consent where processing is based on consent.

If GDPR applies, you may also have the right to lodge a complaint with a data protection authority.

Normio uses automated scanning and analysis to produce operational review comments, readiness signals, and monitoring alerts. These outputs are intended to support human review and should not be treated as final legal decisions.

Normio does not intend to make decisions based solely on automated processing that produce legal or similarly significant effects about individuals.

For privacy questions, account requests, or legal concerns, contact the Normio team through the support or access channel associated with your account or public website inquiry.