Privacy Policy
Effective as of April 30, 2025.
This Privacy Policy describes how Normal Information Company, Inc. ("Normal," "we", "us" or "our") handles personal information that we collect through our website and other digital properties that link to this Privacy Policy (collectively, the "Service"), as well as through social media, our marketing activities, and other activities described in this Privacy Policy.
Index
- Personal information we collect
- How we use your personal information
- How we share your personal information
- Your choices
- Other sites and services
- Security
- International data transfer
- Children
- Changes to this Privacy Policy
- How to contact us
- California privacy rights notice
Personal information we collect
Information you provide to us.
Personal information you may provide to us through the Service or otherwise includes:
- Contact data, such as your first and last name, professional title, organizational affiliation, email address, and phone number.
- Profile data, such as the username and password that you may set to establish an online account on the Service, and any other information that you add to your account profile.
- User-generated content, such as comments, queries, questions, feedback, messages, images, photos, videos and other content or information that you submit to, or use with, the Services.
- Project-related emails, specifically order confirmation emails from hardware suppliers and manufacturers that are relevant to your hardware projects, which we access through your connected email account to automatically track component orders and deliveries.
- User queries and search terms, including project descriptions, component searches, and other queries you submit to help us provide relevant results and improve our AI-powered analysis features.
- Communications that we exchange with you, including when you contact us through the Service, social media, or otherwise.
- Marketing data, such as your preferences for receiving our marketing communications and details about your engagement with them.
- Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise described at the time of collection.
Third party sources.
We may combine personal information we receive from you with personal information we obtain from other sources, such as:
- Public sources, such as government agencies, public records, social media platforms, and other publicly available sources.
- Data providers, such as information services and data licensors that provide demographic and other information.
- Marketing partners, such as joint marketing partners and event co-sponsors.
- Third party services, such as social media services, that you use to log into, or otherwise link to, your Service account. This data may include your username, profile picture and other information associated with your account on that third party service that is made available to us based on your account settings on that service.
Automatic data collection.
We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications and other online services, such as:
- Device data, such as your computer's or mobile device's operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, and general location information such as city, state or geographic area.
- Online activity data, such as pages you viewed, how long you spent on a page, the website you visited before browsing to the Service, navigation paths between pages, information about your activity on a page, access times and duration of access, and whether you have opened our emails or clicked links within them.
Cookies and similar technologies.
Some of the automatic collection described above is facilitated by the following technologies:
- Cookies, which are small text files that websites store on user devices and that allow web servers to record users' web browsing activities and remember their submissions, preferences and login status as they navigate a site. Cookies used on our sites include both "session cookies" that are deleted when a session ends, "persistent cookies" that remain longer, "first party" cookies that we place and "third party" cookies that our third party business partners and service providers place.
- Web beacons, also known as pixel tags or clear GIFs, which are clear images placed in web content or HTML emails to record when a user visits a web page or views an email.
- Local storage technologies, like HTML5 and Flash, that provide cookie-equivalent functionality but can store larger amounts of data on your device outside of your browser in connection with specific applications.
These technologies are used for the following purposes:
- Technical operation. To allow the technical operation of the Service, such as by remembering your selections and preferences as you navigate the site, and whether you are logged in when you visit password protected areas of the Service.
- Functionality. To provide enhanced functionality and personalization on the Service.
- Analytics. To help us understand user activity on the Service, including which pages are most and least visited and how visitors move around the Service, as well as user interactions with our emails. For example, we use Google Analytics for this purpose. You can learn more about Google Analytics and how to prevent the use of Google Analytics relating to your use of our sites here: https://tools.google.com/dlpage/gaoptout?hl=en.
Data about invitees.
We may offer features that help users invite their friends or contacts to use the Service, and may collect contact details about these invitees so that we can deliver their invitations. Please do not refer someone to us or share their contact details with us unless you have their permission to do so.
1. INFORMATION WE COLLECT
Account Information
We collect information you provide when creating an account, including your email address and authentication credentials.
Project Data
We store project information you create, including project names, descriptions, component lists, and order details.
Email Integration
When you connect your email account, we access order confirmation emails to extract relevant project data. We only process emails related to your hardware projects.
Usage Data
We collect information about how you use our service, including pages visited, features used, and performance metrics to improve our service.
2. HOW WE USE YOUR INFORMATION
- Provide and maintain our hardware project monitoring service
- Process and analyze your order confirmation emails
- Store and organize your project data
- Improve our AI-powered analysis features
- Communicate with you about your account and service updates
3. INFORMATION SHARING
We do not sell, trade, or rent your personal information to third parties. We may share information in the following limited circumstances:
- Service Providers: We use trusted third-party services (like Supabase for database hosting and OpenAI for AI processing) that help us operate our service
- Legal Requirements: We may disclose information if required by law or to protect our rights
- Business Transfers: In the event of a merger or acquisition, your information may be transferred as part of the business assets
4. DATA SECURITY
We implement industry-standard security measures to protect your data:
- Encrypted data transmission using HTTPS
- Secure database storage with access controls
- Regular security audits and updates
- Limited employee access to personal data
- OAuth 2.0 for email account integration
5. EMAIL DATA PROCESSING
When you connect your email account:
- We only search for and process order confirmation emails from recognized suppliers
- Email content is processed temporarily to extract order information
- We do not store full email content permanently
- Only relevant order data (supplier, items, prices, tracking) is retained
- You can disconnect your email at any time
6. AI PROCESSING
We use AI services to analyze your project data and emails:
- Data is processed by OpenAI's GPT models for order extraction and analysis
- AI processing is done securely with appropriate data handling agreements
- No personal data is used to train AI models
- AI processing helps automate order tracking and project management
7. YOUR RIGHTS
You have the following rights regarding your data:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and data
- Export: Download your project data
- Disconnect: Remove email integration at any time
8. DATA RETENTION
We retain your data as follows:
- Account data: Until you delete your account
- Project data: Until you delete individual projects or your account
- Email processing logs: 30 days for debugging purposes
- Usage analytics: Aggregated data may be retained longer for service improvement
9. COOKIES AND TRACKING
We use essential cookies and similar technologies:
- Authentication cookies to keep you logged in
- Session management for service functionality
- Performance monitoring to improve service quality
- No third-party advertising cookies
10. CHILDREN'S PRIVACY
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
11. CHANGES TO THIS POLICY
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
12. CONTACT US
If you have any questions about this privacy policy or our data practices, please contact us:
Email: info@normalfactory.com