1. Introduction

Nori Docs ("we", "us", or "our") operates the Nori Docs platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

We collect information you provide directly to us, including:

Account information: Name, email address, and password when you create an account.
Business information: Company name, address, tax ID, and banking details you provide for invoicing and document generation.
Document content: Invoices, proposals, compiled documents, timesheets, receipts, and other documents you create or upload.
Third-party connections: Data from services you connect, such as Notion or Google, to import content into your documents.
Usage data: Information about how you interact with our platform, including pages visited, features used, and timestamps.

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services.
Generate PDFs, invoices, proposals, and other documents on your behalf.
Process payments and manage billing for your subscription.
Send transactional emails such as invoice delivery, payment reminders, and account notifications.
Respond to your support requests and communicate with you about the service.

4. Data Storage and Security

Your data is stored on secure servers hosted by DigitalOcean in data centers located in the European Union. We use industry-standard security measures including encryption in transit (TLS) and at rest to protect your data.

Uploaded files and generated documents are stored in S3-compatible object storage with access-controlled permissions scoped to your team.

5. Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

Service providers: With third-party providers who assist in operating our platform (e.g., payment processing, email delivery, hosting).
Your recipients: When you share documents via preview links or send invoices/proposals to your clients.
Legal requirements: When required by law, regulation, or legal process.

6. Your Rights

Under the GDPR and applicable data protection laws, you have the right to:

Access, correct, or delete your personal data.
Export your data in a portable format.
Restrict or object to certain processing activities.
Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at the email address listed below.

7. Cookies

We use essential cookies to maintain your session, remember your preferences, and ensure the security of your account. We do not use third-party tracking or advertising cookies.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. When you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory reasons.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@noridocs.com.

Privacy Policy