Privacy Policy

Introduction

Nora (“we,” “our,” or “us”) is a secure email management and automation platform designed for real estate professionals. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.

What Information We Collect

Information You Provide

• Account Information: Name, email address, and professional affiliation when you create an account
• Email Authorization: Access permissions that allow us to read and manage emails in your connected account
• Email Content: Emails and related content necessary to provide our services

Information We Automatically Collect

• Usage Data: How you interact with Nora and which features you use
• Technical Data: Information about your device, browser, and connection

How We Use Your Information

We use your information solely to provide the Nora service:

• Email Management: Reading and organizing emails to provide automated assistance
• Response Creation: Generating draft email responses for your review and approval
• Service Delivery: Maintaining necessary context to provide relevant and helpful assistance
• Service Improvement: Analyzing usage patterns to enhance service quality and features

How We Store Your Information

Data Storage

• All data is stored in secure, encrypted databases
• Data is encrypted both at rest and in transit using industry-standard protocols
• Access credentials are stored securely with encryption
• We maintain backups for data integrity and disaster recovery

Data Retention

• Active conversation data retained while account is active
• You may request deletion at any time
• After account termination, data deleted within 30 days

Email Access and Authorization

What We Access

• Read emails in your inbox
• Create and manage draft emails
• Access your basic profile information (name and email address)

What We Don't Access

• Your contacts or address book
• Your calendar
• Admin settings or other users' mailboxes
• Unrelated personal information or files

Authorization Details

• We never see or store your email password
• Authorization tokens grant only the specific permissions you approve
• You can revoke access at any time through your email provider's settings
• Revoking access stops our ability to read or create emails immediately

Third-Party Services

To provide our services, we use trusted third-party technology providers for processing and infrastructure. These providers:

• Are subject to strict data protection and confidentiality requirements
• Process data only as necessary to deliver services to Nora
• Do not use your data for their own purposes

Data Security

We implement industry-standard security measures:

• End-to-end encryption for all data transmission (TLS/SSL)
• Encrypted storage of all user data
• Regular security audits and monitoring
• Strict access controls — limited employee access to user data (only as needed for support and service delivery)
• Multi-factor authentication requirements

Your Rights

You have the right to:

• Access: Request a copy of your data
• Deletion: Request deletion of your data at any time
• Revocation: Revoke email access through your email provider's security settings
• Correction: Update or correct your account information
• Portability: Export your data in a standard format

To exercise these rights, contact us at privacy@hello-nora.ai

User Control

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by:

• Posting the updated policy on our website
• Sending an email to your registered address
• Updating the “Last Updated” date