1. Introduction
At Norch, we take your privacy seriously. This Privacy Policy outlines what information we collect, how we use it, and how you can exercise your privacy rights and manage your data on our AI agent platform.
2. Information We Collect
Information You Provide:
- Account credentials (name, email address).
- Authentication tokens from third-party login providers (e.g., Google).
- Payment information (processed securely through Flutterwave/Stripe).
- Content and data used to train your AI agents (e.g., website URLs, documents, FAQs).
Automatically Collected Information:
- Interaction logs between end-users and your deployed AI agents.
- Usage metrics, IP addresses, browser types, and device information.
- Cookies and tracking technologies essential for authentication and analytics.
3. How We Use Your Information
We use the collected information for various purposes:
- To provide, maintain, and improve the Norch platform.
- To process payments and manage subscriptions.
- To power the AI language models so they can accurately respond to your customers.
- To monitor usage analytics, prevent fraud, and ensure security.
- To communicate with you regarding updates, support, and marketing.
4. AI Processing
Text inputs and training materials provided by you are sent to our language model partners (e.g., OpenAI) via secure APIs. Our partners do not use your private organizational data to train their public models. We manage data access securely and apply strict RAG (Retrieval-Augmented Generation) bounds.
5. Data Sharing and Disclosure
We do not sell your personal data. We only share information with:
- Trusted third-party service providers (e.g., Supabase, Vercel, OpenAI).
- Legal authorities when required by law to comply with legal processes or protect our rights.
6. Data Retention and Security
We implement robust industry-standard security measures, including vector database isolation and encryption at rest. We retain your data as long as your account is active. Upon account deletion, all knowledge base files and agent configurations are permanently purged.
7. Your Rights
You have the right to:
- Access, correct, or delete your personal information.
- Export a copy of your AI conversation history.
- Opt-out of marketing communications.
- Request the permanent deletion of your account and all associated data.
8. Changes to Privacy Policy
We may update this policy periodically. In the event of material changes, we will notify you through the platform dashboard or via email.