This policy explains what [Company legal name] (“we”) collects when you use Nortl, why, and what you can do about it. We do not sell your personal data.
What we collect
Your account: name, username, email, password (stored only as a secure hash), profile picture and settings.
What you put in: documents, files, chat messages, data app records, quests, notes and anything else you create or upload.
Billing: your plan, invoices and the payment reference from PayPal. Card details stay with PayPal.
Use of the site: the pages you open and the actions you take, when you sign in (and failed sign-in attempts), your device type, browser and approximate country. For visitors who are not signed in, we use a code that changes every day instead of storing an IP address.
Support: the messages you send us through the Contact page.
Why we use it
To run Nortl for you: storing your work, showing it to the people you share it with, sending notifications and sign-in codes.
To keep the service safe: detecting abuse and attacks, reviewing reported or flagged content, and keeping records of administrator actions.
To improve the service, using totals and trends (for example how many people use a feature).
To bill you and keep the invoices the law requires.
Who can see it
The people and groups you share with.
Our administrators, only when needed to support you, deal with a report or keep the service safe. Reading a private chat is recorded with a reason.
Service providers who work for us: hosting, email delivery and PayPal for payments. They may use your data only to provide their service to us.
Authorities, if the law requires it.
How long we keep it
Your content: for as long as your account exists, then deleted within a reasonable time after you close it.
Records of use (pages opened, sign-ins): 90 days.
Invoices: as long as tax law requires.
Cookies
We use cookies to keep you signed in, remember your theme and keep the site secure. We do not use advertising cookies.
Your rights
You can see and change your details in your profile, export your data from the tools that offer it, and ask us for a copy of your data, to correct it or to delete it. Write to [Contact email] or open a ticket on the Contact page. Depending on where you live, you may also have the right to complain to your data protection authority.
Security
Data travels encrypted (HTTPS), passwords are hashed, files that should not be public are kept where the web cannot reach them, and access is checked on our server for every request. No system is perfectly secure; if something happens that puts your data at risk, we will tell you.