Legal
Privacy Policy
Last updated: June 2025
1. Who we are
Norma is an AI and software engineering company headquartered in Rouen, France. We design, build, and deploy production-grade AI agents, data pipelines, web applications, and cloud infrastructure.
For any privacy-related questions, contact us at: contact@norma.dev
2. What data we collect
We collect data only when you interact with us:
• Contact & inquiry forms — name, work email, company name, and the message you send us.
• Voice Lab demo requests — name, work email, company name, and your automation use case.
• Website analytics — anonymised page views and interaction events (no personally identifiable information).
• Email correspondence — when you email us directly, we retain the content of that exchange.
We do not collect payment information, government IDs, or sensitive personal data.
3. How we use your data
We use the information you provide solely to:
• Respond to your inquiries and evaluate project fit.
• Send you a demo access link if your Voice Lab request is approved.
• Improve our website and services based on anonymised usage patterns.
We do not use your data for automated decision-making or profiling, and we do not sell or rent your data to third parties.
4. Legal basis (GDPR)
If you are located in the European Economic Area, we process your personal data under the following legal bases:
• Legitimate interest — to respond to your business inquiries and manage our client relationships.
• Consent — where you have explicitly opted in (e.g. subscribing to updates).
• Contractual necessity — when processing is required to perform a contract with you.
5. Data sharing
We share your data only with:
• Internal team members at Norma who need it to respond to your request.
• Service providers who process data on our behalf (e.g. Slack for internal notifications, Vercel for hosting). These providers are bound by data processing agreements and may not use your data for their own purposes.
We do not share your data with advertisers, data brokers, or any third party for marketing purposes.
6. Data retention
We retain your personal data for as long as necessary to fulfil the purpose it was collected for — typically the duration of our business relationship plus a reasonable period thereafter (up to 3 years for inquiry records).
You may request deletion of your data at any time by contacting contact@norma.dev.
7. Your rights
Under the GDPR and applicable French law (loi Informatique et Libertés), you have the right to:
• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten").
• Restrict the processing of your data.
• Object to processing based on legitimate interest.
• Portability — receive your data in a structured, machine-readable format.
To exercise any of these rights, email contact@norma.dev. We will respond within 30 days.
8. Cookies & analytics
Our website uses minimal, privacy-respecting analytics. We do not use third-party advertising cookies. Any analytics data is anonymised and cannot be linked back to individual users.
You can disable cookies in your browser settings at any time without affecting your ability to use the site.
9. Security
We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. Our infrastructure is hosted on industry-standard cloud providers with encryption in transit and at rest.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date below. We encourage you to review this page periodically.
11. Contact & complaints
If you have any questions about this policy or wish to exercise your rights, contact us at:
Norma
Rouen, France
contact@norma.dev
If you are not satisfied with our response, you have the right to lodge a complaint with the French data protection authority:
CNIL — www.cnil.fr