Privacy Policy

1. Introduction

Norvius (“the Service”) is operated by Christian Pastor d/b/a Norvius (“we,” “us,” “our”). This Privacy Policy explains what data we collect, how we store and protect it, who we share it with, and what rights you have over it.

By using the Service, you agree to the practices described in this policy. If you do not agree, do not use the Service.

2. Data We Collect

We collect only what is necessary to provide and improve the Service:

• Account information. Your name, email address, and password when you create an account. If you join a team, your role within that team.
• Connected data source content. When you connect a business tool (such as Shopify, QuickBooks, or Google Sheets), we access and store data from that tool as needed to run your queries and automations. You choose which tools to connect and can disconnect them at any time.
• Chat queries and automation configuration. The natural language questions you ask and the automations you create, including their schedules and settings.
• Payment information. Billing details are collected and processed by Stripe. We do not store your credit card number, CVV, or full payment credentials on our servers.
• Usage analytics. We use Plausible Analytics, a privacy-focused, cookieless analytics service. Plausible does not use cookies, does not collect personal data, and does not track you across sites. We see aggregate page views and referral sources only. We also use Google Analytics 4 on our public marketing pages, which sets analytics cookies only if you accept them — see Section 3a.

We do not use fingerprinting, and we never use cookies for advertising, ad targeting, or ad personalization.

3. How We Store and Protect Your Data

Your data is stored in Supabase (built on PostgreSQL) with multiple layers of protection:

• Encryption at rest and in transit. All data is encrypted at rest using AES-256 encryption. All connections use TLS encryption in transit.
• Tenant isolation. Every database query is enforced through Row-Level Security (RLS) policies that isolate your data from other customers. Your data is never accessible to other accounts.
• Credential encryption. OAuth tokens and API keys for your connected tools are encrypted with AES-256 via pgcrypto and are decrypted only at the moment they are needed to execute a query. They are never exposed to the AI processing layer.

4. Third-Party Services

We share data with the following third-party services only as necessary to operate the Service:

• Anthropic (Claude API). Your chat queries and relevant data context are sent to Anthropic's Claude API for AI processing. Anthropic does not use your data to train their models when accessed via their API. Credentials and secrets are never sent to the AI layer.
• Stripe. Handles payment processing and subscription management. Stripe's privacy policy governs their handling of your payment data.
• Resend. Sends transactional emails (notifications, alerts, password resets) from notifications@norvius.com. Resend receives your email address and the content of the notification.
• Plausible Analytics. Collects anonymous, aggregate website usage data. No personal data is collected or stored by Plausible. No cookies are used.
• Google Analytics 4 (Google LLC). If you accept analytics cookies, Google receives your page views, referral source, approximate location derived from an anonymized IP address, and a randomly generated identifier stored in the _ga cookies, which lets Google recognize a returning visitor to this site. Google acts as our data processor for this. Advertising storage, ad personalization, and Google Signals cross-device tracking are switched off, so this data is not used to build an advertising profile of you. Google Analytics runs only on our public marketing pages: it is never loaded on any signed-in page, so it has no access to your business data or to anything inside your dashboard. If you decline, no analytics cookies are set and no identifier is stored. See Section 3a to change your choice.
• Railway. Hosts the servers that run the Service, in the United States. Your data passes through these servers while the Service processes it.
• Cloudflare. Provides our domain's network security and secure connections: requests to norvius.com pass through Cloudflare's network, which processes technical information such as your IP address.
• Sentry. Collects error reports and performance data to help us identify and fix issues. Error reports may include technical context but never include your business data or credentials.

We do not sell, rent, or trade your data to any third party. We do not use your data for advertising.

5. AI-Generated Content and Your Data

When you ask questions or create automations, relevant portions of your connected data are processed by AI to generate responses. All AI-generated outputs are observational descriptions of what the data shows and do not constitute business, financial, or legal advice.

We may extract anonymized, structural patterns from automations (such as “monitor inventory levels weekly”) to improve our template library. These patterns never contain your actual data values, account information, or anything that could identify you or your business.

6. Data Retention

We retain your data for as long as your account is active and as needed to provide the Service. Specifically:

• Account data is retained while your account is active.
• Connected data source content is retained while the data source is connected and your account is active.
• Earlier versions of synced data. Each sync with a connected source can produce a new version of that source's data. While the source is connected and your account is active, we keep the current version, every version that differs from the one before it, and the last version of each day; other versions are removed by a nightly process. When a sync finds nothing changed, we record that the data was unchanged rather than keeping another copy. Earlier versions are kept so that each sync can be compared with the one before it, and so you can export your data's full history. All versions are deleted when the source or your account is deleted (see Section 7).
• Export files. An export you request is kept on our servers, encrypted, until its download expires 48 hours after it is ready, and is deleted within a day after that.
• Chat history and automation logs are retained while your account is active.
• When you delete your account, all your data — account information, connected data and its saved earlier versions, chat history, automations, and all associated records — is permanently deleted after the 30-day restore period described in Section 7. Copies in our database provider's automatic backups are overwritten as those backups expire.

7. Your Rights

Regardless of where you are located, you have the following rights over your data:

• Access. You can view the current data from your connected sources, your automations, reports and chat history at any time through the Service. Saved earlier versions of your synced data are not shown in the Service but are included when you request a “Full history” export.
• Export. You can request an export of your data from Settings → Data Export. One export can be requested every three hours, and a new request is not accepted while an earlier one is still being prepared. When your export is ready we notify you in the Service and by email. The emailed link works only for the person who requested it, while signed in; workspace administrators can also download it from Settings → Data Export. Downloads are available for 48 hours. An export is a ZIP archive of JSON files, one for each kind of data we hold for your workspace — including your connected sources' data, automations and their runs, reports, chat history, notifications, team members and invitations, and your account's billing records — with a README explaining each file. By default it contains the current version of your synced data; you can choose “Full history” to include every saved earlier version. For your security, it never contains sign-in tokens, API keys, payment card details or data-source connection settings.
• Deletion. If you own the workspace, you can delete your account yourself in Settings → Profile; anyone can ask us to delete theirs. Your account is then scheduled for deletion: for 30 days you can cancel and restore it, and after that period it and all associated data are permanently deleted, normally within one further day. Cancelling a paid subscription does not delete your account or your data.
• Correction. You can update your account information at any time through your profile settings.
• Disconnect. You can disconnect any connected data source at any time. It stops syncing immediately. Its stored data, including saved earlier versions, is kept for 30 days, during which you can restore it from the Sources page with its stored data; it is then permanently deleted, normally within a further week, and cannot be restored. A source whose data was erased sooner at the request of the tool it came from (for example, Shopify's erasure request after a store uninstalls the app), or whose connection that tool revoked, cannot be restored. A saved website login is erased when you disconnect, so a restored source that used one asks for it again. Data from a disconnected source is included in any export you request during those 30 days.

8. California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

• Right to know what personal information we collect and how it is used (described in this policy).
• Right to delete your personal information (see Section 7).
• Right to opt out of sale. We do not sell your personal information to third parties. There is nothing to opt out of.
• Right to non-discrimination. We will not treat you differently for exercising your privacy rights.

9. European Users (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) provides additional protections:

• Legal basis. We process your data based on your consent (when you create an account and connect data sources) and our legitimate interest in providing and improving the Service.
• Data portability. You can export your data in a machine-readable format (JSON files in a ZIP archive), subject to the limits described in Section 7.
• Right to object. You can object to certain processing by contacting us.
• Data transfers. Your data is stored on servers in the United States. By using the Service, you consent to this transfer.

10. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice within the Service at least 30 days before they take effect. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact

Questions about this policy or your data? Contact us at support@norvius.comCopy or visit our contact page.