INTRODUCTION
NORA is a cybersecurity risk assessment platform operated by 1030Tech Consulting. This Privacy Policy explains how we collect, use, and protect information when you use our platform. By using NORA, you agree to the practices described here.
INFORMATION WE COLLECT
We collect information you provide directly, including your name, email address, and organization name when you create an account or contact us. We collect assessment data you and your team enter into the platform, including responses to risk assessment questions, asset information, and scoring decisions. We also collect standard usage data such as log data, browser type, and pages visited to operate and improve the service.
HOW WE USE YOUR INFORMATION
We use your information to provide and maintain the NORA platform, process your assessments and generate risk scores, communicate with you about your account and our service, improve platform functionality and user experience, and comply with legal obligations. We do not sell your personal information to third parties. We do not use your assessment data to train models or share it with other customers.
DATA STORAGE AND SECURITY
Your data is stored on infrastructure provided by Base44. Data is encrypted in transit using TLS and encrypted at rest. Access to customer data is restricted to authorized personnel only.
THIRD-PARTY SERVICES
NORA uses Google reCAPTCHA to protect forms from automated abuse. reCAPTCHA is subject to Google's Privacy Policy and Terms of Service. We do not integrate with advertising networks or data brokers.
DATA RETENTION
We retain your account and assessment data for the duration of your subscription and for a reasonable period thereafter to allow for account recovery. You may request deletion of your data at any time by contacting us at the address below.
YOUR RIGHTS
You have the right to access the personal information we hold about you, request correction of inaccurate information, request deletion of your data, and receive a copy of your data in a portable format. To exercise any of these rights, contact us at privacy@norarisk.com.
CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the platform. Your continued use of NORA after changes take effect constitutes acceptance of the updated policy.
CONTACT
For privacy questions or requests, contact us at privacy@norarisk.com or through the Contact Us page.