Privacy Policy
Your trust matters to us. This policy explains what information Nori SEO collects, why we collect it, how we use it, and the choices and rights you have.
Last updated: September 14, 2026 · Effective: September 14, 2026
1. Who We Are
Nori SEO ("Nori SEO," "we," "us," or "our") provides software that helps website owners analyze, monitor, and improve their search engine performance, available at noriseo.com (the "Service").
This Privacy Policy applies to information we collect when you visit our website, create an account, or use the Service. It does not apply to third-party websites or services that we link to but do not control.
2. Information We Collect
Information you provide to us
- Account information — your name, email address, password, and company name when you create an account.
- Billing information — when you purchase a subscription, our payment processor collects your payment card details and billing address. We never store full card numbers on our servers; we receive only a payment token, the card brand, and the last four digits.
- Content you submit — the websites, domains, keywords, competitor URLs, and related data you add to your projects for analysis.
- Communications — messages you send us through support channels, feedback forms, or email.
Information collected automatically
- Usage data — pages viewed, features used, actions taken in the app, referring pages, and the dates and times of your visits.
- Device and connection data — IP address, browser type and version, operating system, screen size, language, and general location (city/country level) derived from your IP address.
- Cookies and similar technologies — see Section 5 below.
Information from third parties
- Search and web data — publicly available data about websites and search rankings that powers our reports.
- Connected integrations — if you connect a third-party account (for example, a search console or analytics provider), we access only the data you authorize, and only to provide the Service.
3. How We Use Information
- Provide, operate, and maintain the Service, including generating your SEO reports and audits.
- Process transactions, manage subscriptions, and send billing-related notices.
- Understand how the Service is used so we can improve features, performance, and usability.
- Respond to your questions and provide customer support.
- Send service announcements, security alerts, and — where permitted — product updates you can opt out of at any time.
- Detect, prevent, and address fraud, abuse, and security incidents.
- Comply with legal obligations and enforce our Terms of Service.
4. Legal Bases for Processing (EEA/UK)
Where the GDPR or UK GDPR applies, we process your personal data on these bases:
- Contract — to provide the Service you signed up for.
- Legitimate interests — to secure, improve, and understand use of the Service, balanced against your rights.
- Consent — for optional communications and any non-essential cookies, which you may withdraw at any time.
- Legal obligation — to meet tax, accounting, and other legal requirements.
5. Cookies & Analytics
We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used.
| Type | Purpose | Examples |
|---|---|---|
| Essential | Sign-in sessions, security, load balancing. The Service cannot function without these. | Session and authentication cookies |
| Preferences | Remembering settings such as language and dashboard layout. | Locale, UI preferences |
| Analytics | Measuring feature usage and performance to improve the product. | Product analytics (see below) |
Product analytics (HeyCatch)
We use HeyCatch, a product analytics service, to understand how visitors and customers use Nori SEO — for example, which pages are visited and which features are used. HeyCatch may process your IP address, device and browser information, usage events, and, if you have an account, a user identifier and account details such as your email address and plan. This data is used solely to help us operate and improve the Service. Analytics requests are sent to HeyCatch's servers (in.heycatch.ai).
You can limit cookies through your browser settings; blocking essential cookies may prevent parts of the Service from working.
6. How We Share Information
We share personal information only in the following circumstances:
- Service providers — vendors that host our infrastructure, process payments, deliver email, and provide analytics (including HeyCatch), each bound by contracts limiting their use of your data to providing services to us.
- Legal compliance — when required by law, subpoena, or other legal process, or to protect the rights, safety, and property of Nori SEO, our users, or the public.
- Business transfers — in connection with a merger, acquisition, financing, or sale of assets, in which case this policy will continue to apply to your information.
- With your direction — when you ask us to share something, such as exporting a report.
7. Data Retention
We keep personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we delete or anonymize your personal information within 90 days, except where we must retain records to comply with legal, tax, or accounting obligations, resolve disputes, or enforce agreements. Aggregated, de-identified data that cannot reasonably identify you may be retained for product research.
8. Security
We use industry-standard safeguards to protect your information, including encryption in transit (TLS), encryption at rest for sensitive data, access controls, and monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — but we work continuously to protect your data, and we will notify you and any applicable regulator of a data breach where the law requires it.
9. Your Rights & Choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and receive a copy in a portable format.
- Correct inaccurate or incomplete information.
- Delete your personal information.
- Object to or restrict certain processing, and withdraw consent where processing is based on consent.
- Opt out of marketing emails via the unsubscribe link in any message.
- Not be discriminated against for exercising any of these rights.
California residents (CCPA/CPRA): we do not sell or share personal information as those terms are defined in California law. You may exercise your rights to know, delete, and correct by contacting us as described below.
EEA/UK residents: you may also lodge a complaint with your local supervisory authority, though we would appreciate the chance to address your concerns first.
To exercise any right, email us at privacy@noriseo.com. We will verify your request and respond within the timeframe required by applicable law.
10. International Data Transfers
We are based in the United States, and your information is processed on servers located in the United States and other countries where our service providers operate. Where required, we rely on appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses.
11. Children's Privacy
The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us at privacy@noriseo.com and we will delete it.
12. Changes to This Policy
We may update this policy from time to time. If we make material changes, we will notify you by email or by a prominent notice in the Service before the changes take effect. The "Last updated" date at the top of this page shows when this policy was most recently revised.
13. Contact Us
Questions or concerns about this policy or our data practices? We're happy to help.
- Email: privacy@noriseo.com
- Website: noriseo.com