🎉15% OFF your first booking — applied automatically✅Background-checked, vetted independent providers🛡️Backed by a Satisfaction Guarantee📍Independent pros across Silicon Valley & the Bay Area🎉15% OFF your first booking — applied automatically✅Background-checked, vetted independent providers🛡️Backed by a Satisfaction Guarantee📍Independent pros across Silicon Valley & the Bay Area
NorTech

Privacy Policy

Effective Date: [PENDING — effective upon attorney approval] | Last Updated: [PENDING]

This Policy explains what we collect and why, how we share it, how long we keep it, and the privacy rights California residents have (Section 9), including how to opt out of sale or sharing — which we do not do.

1. Introduction & Scope

This Privacy Policy explains how NorTech ("NorTech", "we", "us", or "our") collects, uses, discloses, and protects personal information when you use our website, booking tools, client portal, and related services (the "Services"). It applies to Clients, website visitors, and independent Providers. By using the Services you acknowledge this Policy. If you are a California resident, Section 9 describes your rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA/CPRA").

2. Information We Collect

We collect the following categories of personal information: Identifiers (name, email, phone, postal address, account ID); Customer records (booking history, service address, payment information processed by Stripe — we do not store full card numbers); Commercial information (services purchased, deposits, change orders); Internet/network activity (pages viewed, device and browser identifiers, IP address, app interactions); Geolocation data (precise GPS for Providers during active jobs; approximate location from a Client's ZIP/service address); Audio/visual (before-and-after job photos; recordings or transcripts of calls with our assistant where disclosed); Inferences (service preferences). Sensitive personal information: we do not intentionally collect government IDs, financial-account login credentials, precise Client geolocation beyond the service address, or other sensitive categories, except limited identity/background-check information for Providers, handled per Section 9.

3. Sources of Information

We collect information directly from you (when you book, create an account, contact us, or submit reviews/photos), automatically from your device as you use the Services, and from service providers such as our payment processor, background-check vendor (for Providers), and analytics/communications tools.

4. How We Use Your Information

We use personal information to: (a) confirm, schedule, and complete your Booking; (b) process payments and deposits; (c) send transactional and service messages by email and SMS (with consent where required); (d) document jobs with before/after photos for quality, warranty, and dispute resolution; (e) operate, secure, and improve the Platform; (f) prevent fraud and enforce our Terms; (g) administer promotions, referrals, and loyalty; and (h) comply with legal obligations. We do not use sensitive personal information for purposes other than those permitted by law.

5. How We Disclose Information

We disclose personal information to: service providers/processors who act on our behalf under contract (payments, SMS/voice, email, hosting, media storage, analytics, background checks); the independent Provider assigned to your Job, to the extent needed to perform it; authorities or others where required by law or to protect rights and safety; and a successor in connection with a merger, acquisition, or sale of assets. We require service providers to use personal information only to perform services for us.

6. We Do Not Sell or Share Your Personal Information

NorTech does not "sell" personal information for money, and does not "share" personal information for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. If this ever changes, we will update this Policy and provide the legally required opt-out before doing so. We honor opt-out preference signals, including the Global Privacy Control (GPC), where required.

7. Cookies & Tracking Technologies

We use cookies and similar technologies for essential site functionality, security, remembering preferences, and basic analytics. You can control cookies through your browser settings, and where required we honor the Global Privacy Control (GPC) signal. We do not use cookies for cross-context behavioral advertising.

8. SMS / Text Messaging (TCPA)

By opting in at booking, you consent to receive transactional and informational text messages from NorTech (for example, booking confirmations, reminders, arrival alerts, and warranty updates) at the number you provide, including via automated technology. Consent is not a condition of purchase. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe at any time and HELP for help. We retain SMS consent records per CTIA guidelines and do not share opt-in data with third parties for their own marketing. Marketing texts, if any, are sent only with separate consent and honor STOP and applicable quiet hours.

9. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to: know the categories and specific pieces of personal information we collect, use, and disclose; delete personal information (subject to legal exceptions); correct inaccurate personal information; opt out of the sale or sharing of personal information (we do neither); limit the use of sensitive personal information; and not be discriminated against for exercising your rights. To exercise these rights, email privacy@nortech.site or use the contact options in your client portal (two methods). We will verify your request using information associated with your account and respond within the timelines required by law. You may use an authorized agent to submit a request with proof of authorization. We do not charge a fee for exercising your rights.

10. Financial Incentives (Loyalty & Referrals)

Our loyalty and referral programs (including any first-booking discount) may be considered "financial incentives" under the CCPA because they provide a benefit related to the collection of personal information. Participation is voluntary, you may withdraw at any time by contacting us, and the value of the incentive is reasonably related to the value of the data you provide (used only to administer the program). Program details are described in the program's posted terms.

11. Photo Documentation

Before-and-after photos are taken on every Job for quality assurance, warranty, and dispute resolution, and are stored in Cloudflare R2 with access controls. If you consent at booking, de-identified photos (with identifying information removed) may be used in marketing. You can decline or withdraw marketing-use consent by contacting privacy@nortech.site.

12. Provider Location Data

For independent Providers, we collect precise GPS location only during active jobs, to support arrival notifications, routing, safety, and job verification. Location collection stops when the job ends. Providers are notified of this collection and may control device-level location permissions, subject to the impact on their ability to use the Provider app.

13. Third-Party Services

We rely on Stripe (payments), Telnyx (SMS/voice), Resend (email), Supabase (database hosting), and Cloudflare R2 (media storage). Each operates under its own privacy policy and processes data on our behalf. We do not sell your data to advertisers or data brokers.

14. Data Retention

We keep personal information only as long as needed for the purposes described here or as required by law: booking and transaction records for approximately 7 years (tax and legal compliance); SMS consent records per CTIA guidelines; job photos for the warranty period plus a reasonable archival window; account information while your account is active and for a reasonable period afterward. We then delete or de-identify the information. You may request deletion of non-essential data as described in Section 9.

15. Data Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and trusted processors. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and any authorities as required by applicable law.

16. Children’s Privacy

The Services are intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact privacy@nortech.site and we will delete it.

17. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted here with an updated "Last Updated" date and, where appropriate, additional notice. Your continued use of the Services after changes take effect constitutes acceptance.

18. Contact

NorTech — 2570 N First St, San Jose, CA 95131 · privacy@nortech.site