Privacy Policy

Last updated
March 2026

Nory.ai and its affiliates (collectively, “Nory,” “we,” or “us”) want you to be familiar with how we collect, use and disclose personal information when you visit our website https://nory.ai/, communicate with us, or enter a contractual agreement with us for one of our Services.

This privacy notice relates to the data processing through our website. If you have any questions or would like to make any requests about your personal information, such as opting out of marketing, please email privacy@nory.ai.

By accessing our website or by otherwise interacting with us, you agree to be bound by this privacy notice.  If you do not agree to the terms of this privacy notice, please do not use our website or provide us with your personal information.  Each time you use our website, the current version of this privacy notice will apply. Accordingly, when you use the sites, you should check the date of this privacy notice (which appears at the top) and review any changes since you last reviewed the privacy notice.

If you are already a valued Nory customer, then you are a controller of any Customer Data (as defined in our General Terms) that you upload to our platform, and Nory processes that data on your behalf as a data processor. Our General Terms and Data Processing Agreement sets out how we handle any personal data contained in Customer Data when we act as your processor.  These documents should be read together with any terms and conditions that apply to your use of the services.

Contact us
Website: https://nory.ai/
Email: privacy@nory.ai

How Nory uses personal information

Information that you provide to us:
Categories of personal information we collect Purposes of use (“Processing Purposes” described in more detail below) Source of Information Legal basis
Contact information such as name, email and contact number

Analytics and preferences

Provide you with our Services, and register your account on the platform, 

Marketing relevant products and personalising your experience on the platform.

You

Prospective customers

Performance of contract

Legitimate interests

Research and feedback Provide you with our Services personalise your experience on the platform You, 

Nory Customers 

Prospective customers

Third party vendors

Legitimate interests
Information that we collect for business-to-business relationships only
Categories of personal information we collect Purposes of use (“Processing Purposes” described in more detail below) Source of Information Legal basis
Business contact information Build and manage business-to-business relationships You

Third party vendors

Performance of contract

Legitimate interests

Legal obligation

Transactional information (as permitted by law) Build and manage business-to-business relationships You

Third party vendors

Performance of contract

Legitimate interests

Due diligence and AML information (as permitted by law) Compliance and risk management activities for business-to-business relationships You or your company’s responses to our due diligence questions

Third party vendor risk compliance screening and data validation tools and databases,

Performance of contract

Legitimate interests

Legal obligation

Information we collect automatically from you and /or your device
Categories of personal information we collect Purposes of use (“Processing Purposes” described in more detail below) Source of Information Legal basis
Device information and identifiers Provide you with our Services

Personalise your experience

Send you relevant marketing and advertising 

Safety and security 

Build and manage business-to-business relationships

You

Third party service providers

Legitimate interests

Legal obligation

Geolocation

*Please note: this information is considered “sensitive” under certain laws, and we process this information in accordance with applicable legal requirements.

Provide you with our Services

Personalise your experience

Send you relevant marketing and advertising 

Safety and security 

Market and advertise for third parties

Build and manage business-to-business relationships

You Legitimate interests
Information that we collect from third parties:
Categories of personal information we collect Purposes of use (“Processing Purposes” described in more detail below) Source of Information Legal Basis
Information from public and commercial sources Build and manage business-to-business relationships Advertising providers

Analytics providers

Marketers

Third party vendors

Public records databases

Legitimate interests
Third Party Partners in Connection with providing our Services

For example: contact information such as authentication information, account legitimacy, search requests, payment provision, SDK analytics, log events and device identifiers such as IP addresses, device IDs or other unique identifiers.

Provide our Services

Personalise your experience

Provide seamless experience across platforms and devices

Obtain analytics through SDK providers such as (Google and Facebook) to improve performance

Safety and security

Send you relevant marketing and advertising

Advertising providers

Analytics providers

Marketers

Partners

 

Third party vendors

Public records databases

Performance of contract

Legitimate interests

Legal obligation 

Due diligence information (where required and permitted by law) To conduct due diligence checks on potential and existing customers, selling partners and suppliers and background and suitability checks on individuals.

Compliance and risk management activities for business-to-business relationships

Build and manage business-to-business relationships

You or your company’s responses to our due diligence questions

Third party risk, compliance screening and data validation tools and databases,

Legal obligation 

Performance of contract

Legitimate interests

Aggregate Information Collected

Aggregate information is information that does not identify you.  Aggregate information may be collected when you use our website, independent of any information you voluntarily enter. We may collect, use, store, and transfer aggregate information without restriction.

Cookies and Analytics

Like most websites, our website uses “cookies.” Cookies are alphanumeric identifiers that we transfer to your computer’s hard drive through your web browser to help us identify you when you come to our website.

Our website may use cookies for reasons including, but not limited to:

  • Analyze our web traffic using an analytics package.
  • Identify if you are signed in to our website.
  • Test content on our website.
  • Store information about your preferences, interests, and offering engagement history.
  • Recognize when you return to our website.

Overall, cookies help us provide you with a better website by enabling us to monitor which pages, functions, and features you find useful and which you do not.  A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies.  Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer.  This setting may prevent you from taking full advantage of our website.

Analytics

We may use third parties, such as Google Analytics or other analytics providers, which collect data, to analyze traffic to our website. To disable Google Analytics, please download the browser add-on for the deactivation of Google Analytics provided by Google at http://tools.google.com/dlpage/gaoptout?hl=en. To learn more about privacy and Google Analytics, please consult the Google Analytics overview provided by Google at http://www.google.com/intl/en/analytics/privacyoverview.html. You may find additional information about Google Analytics at http://www.google.com/policies/privacy/partners/. You have the option to opt out of Google’s use of cookies by changing your settings through Google Ad Settings via the Google advertising opt-out page.

Other Advertising Technologies

We use customer-experience and advertising tools to understand how visitors use our website, improve performance, and to deliver and measure advertising. These tools place cookies, beacons, pixels, tags, software development kids (SDKs), and similar technologies on your browser or device. Some of these tools involve the sharing of identifiers and usage data with our service providers and advertising partners.

These tools include:

  • Tag Management Systems:  We use tag managers to deploy and manage other tracking technologies on our website. These systems do not themselves collect personal information, but they enable other tools (e.g., analytics and advertising pixels) to function
  • Session-ReplayWe use session-replay and heatmap tools to analyze how visitors interact with our site’s layout, features, and content. These tools collect interaction data (e.g., mouse movements, scrolling, clicks) and device information. 
  • Customer Relationship Management (CRM) and Marketing Automation:  If you submit forms, request information, download content, register for events, or interact with our marketing communications, we may use CRM and marketing automation tools to manage your information. These tools may process contact details (e.g., name, email, phone number), form responses and communication history, marketing preferences, and email engagement metrics (e.g., opens, clicks).  
  • Advertising and Marketing Measurement:  We use advertising pixels and marketing tags that help us measure ad performance, understand how users arrive at our site, build audiences or segments, show relevant ads on third-party platforms (“interest-based advertising”). These tools may receive online identifiers (e.g., cookie IDs, device IDs, advertising IDs), device/browser information, pages visited and actions taken, approximate location, and ad impression/click/conversion data.
  • Video Hosting and AnalyticsFor embedded videos, we may use video platforms that collect engagement data such as play events, watch time, and device/browser information.

Although we do our best to honor the privacy preferences of our visitors, we are not able to respond to Do Not Track signals from your browser.

Anonymisation Of Data
In some circumstances we will anonymise or deidentify your personal information (so that it can no longer be associated with you) in accordance with applicable law for research or statistical purposes, in which case we may use and disclose this information without restriction and without further notice to you. By way of example, anonymisation techniques may include removing direct identifiers from a dataset or replacing point coordinates in geo-referenced data with non-disclosing features or variables, or other recognised techniques appropriate to the data in question.

How we share your personal information

We may disclose your personal information to third parties where necessary for the following reasons:

  • To third party service providers that help us to manage and operate our business, such as management of contracts and providing the functionality of our Services, website hosting service providers, information technology and related infrastructure service providers, analytics providers, email delivery service providers.
  • For legal and compliance reasons, including responding to requests and legal demands from regulators or other authorities, pursuing legal rights and remedies and defending claims.
  • For fraud prevention and security, including security and safety.
  • To comply with applicable law and regulations
  • Upon your request or with your consent
  • We have a legitimate interest in disclosing or transferring your personal information to a third-party in the event of any reorganisation, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings). You will be notified of any such business transaction and of possible changes to the processing of your personal information in accordance with applicable law and the ‘Updates to This Privacy Notice’ section.

How long we keep your data

Generally, we retain personal information for the period necessary to fulfil the purposes outlined in this privacy notice and in accordance with our internal policies, our data retention and regulatory obligations, and applicable law. 

The criteria used to determine our retention periods may vary depending on factors such as (i) the length of time we have an ongoing relationship with you and provide goods or services to you; (ii) whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of transactions for a certain period of time before we can delete them); or (iii) whether retention is advisable in light of our legal position (such as in regard to enforcement of our contractual terms, applicable statutes of limitations, litigation or regulatory investigations).

How we keep your data secure

We seek to use reasonable organisational, technical and administrative measures designed to protect personal information within our organisation, such as encryption and multi factor authentication. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the “Contacting Us” section below.

Third-party services

This Privacy Notice does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third-party operating any website or service to which our products or services link. The inclusion of a link via any of our services does not imply endorsement of the linked site or service by us or by our affiliates.

Third-party links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

Children

Our Services are intended for users over the age of 18. We do not knowingly collect personal information from children for the purposes outlined in this Privacy Notice.

International transfers

Nory is incorporated in Ireland. Whilst most of our data processing is carried out in the EU, we may transfer your information to service providers, and other third parties located outside of your country of residence. Where we do so, this is necessary to provide our Services and for the purposes outlined in this Privacy Notice. Data privacy laws vary from country to country and may not be equivalent to, or as protective as, the laws in your home country. We take steps to ensure that reasonable safeguards are in place with the aim to ensure an appropriate level of protection for your information, in accordance with applicable law. These measures include data transfer agreements. By providing us with your information, you acknowledge any such transfer, storage or use.

Your rights

You may be able to exercise certain privacy rights. The rights available to you depend on our reason for processing your personal information and the requirements of applicable law (i.e., your rights will vary depending on whether you are located in, for example, the European Union, or the United Kingdom. Specifically, you may have the following rights:

  • access to your information
  • withdrawal of your consent (where consent is relied on for processing purposes)
  • ask us to make changes to the information we hold about you to make sure that it is accurate and up to date
  • delete or erase your information (sometimes called the right to be forgotten)
  • stop or restrict our processing of your information
  • object to our processing your information
  • not be subject to automated decision-making and
  • request the transfer of some of the information we hold about you (known as data portability).

If you have any questions, concerns, or complaints relating to our processing your personal information, please contact privacy@nory.ai. Whilst we would like an opportunity to assist you first, you also have a right to lodge a complaint with a regulator / supervisory authority in your country such as the Irish Data Protection Commission or Information Commissioner’s Office if based in the UK.

Exercising Your Rights
To exercise any of your rights as set out above, please contact us by submitting a request to privacy@nory.ai. Please note that you will need to verify your identity before we can fulfil your request. Your request must: (i) provide sufficient information that allows us to reasonably verify that you are the person about whom we collected personal information or an authorised representative of that person; and (ii) describe the request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request. We will respond to your verifiable request within any prescribed timelines. In some regions, there may be limitations on how often a request relating to personal information may be submitted.

If you are a Customer user and have requests or questions regarding how your organization (the Customer) uses personal information within our platform, including additional access, deletion, or other data subject rights, please refer to your organization’s internal policies and/or contact your organization’s administrator or privacy office. Because we act as a processor, if we receive a privacy request from a Customer user, we may notify and/or redirect the request to the relevant Customer and will assist the Customer in responding, consistent with our agreement and applicable law.

Updates to this notice

The “LAST UPDATED” legend at the top of this Privacy Notice indicates when this Privacy Notice was last revised. Any changes will become effective when we post the revised Privacy Notice.