Legal
Privacy Policy
Effective Date: October 9, 2026 | Last Updated: October 10, 2026
What we collect and why, who receives it, how long we keep it, and the rights California residents hold (Section 9), including how to opt out of sale or sharing, which we do not do.
We never sell your data
You can opt out of ad measurement in one click, and we honor your browser’s privacy signal.
Your card is protected
Payments go through a secure payment processor. NorTech never stores your full card number.
Your data, your call
See, correct, or delete your data from your account settings. No fee.
A real person answers
Questions? Write to privacy@nortech.site.
1. Introduction & Scope
This Privacy Policy explains how NorTech ("NorTech", "we", "us", or "our") collects, uses, discloses, and protects personal information when you use our website, booking tools, client portal, and related services (the "Services"). It applies to Clients, website visitors, and independent Providers. By using the Services you acknowledge this Policy.
If you are a California resident, Section 9 describes your rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA/CPRA").
2. Information We Collect
In short. Contact details, booking and payment records, and job photos. Providers who apply give more: ID, a selfie, tax details and a background-check consent. None of it is sold.
We collect the following categories of personal information: Identifiers (name, email, phone, postal address, account ID); Customer records (booking history, service address, payment information processed by our payment processor — we do not store full card numbers); Commercial information (services purchased, card holds and deposits, change orders); Internet/network activity (pages viewed, device and browser identifiers, IP address, app interactions); Geolocation data (precise GPS for Providers during active jobs; approximate location from a Client's ZIP/service address); Audio/visual (before-and-after job photos; recordings or transcripts of calls with our assistant where disclosed); Inferences (service preferences).
Sensitive personal information: we do not intentionally collect government IDs, financial-account login credentials, precise Client geolocation beyond the service address, or other sensitive categories, except as described next for Provider applicants.
Provider applicants (not Clients) also give us a photo ID (front and back, or a passport) and a selfie, which we may compare to the ID with a face-match tool; their date of birth and home address; a taxpayer identification number (Social Security number, ITIN or EIN) for tax forms, which we store encrypted and use only for tax filings such as Form W-9 and Form 1099-NEC; and their consent to a background check, whose results come from a screening company.
We use this information to verify identity, run background checks, pay Providers and meet tax law. We do not sell it and we do not use it for advertising.
Messages you send in chat, including chats with Nova and chats between Clients and Providers, are also collected, and may be machine-translated.
3. Sources of Information
We collect information directly from you (when you book, create an account, contact us, or submit reviews/photos), automatically from your device as you use the Services, and from service providers such as our payment processor, background-check vendor (for Providers), and analytics/communications tools.
4. How We Use Your Information
We use personal information to: (a) confirm, schedule, and complete your Booking; (b) process payments, including card holds and deposits; (c) send transactional and service messages by email and SMS (with consent where required); (d) document jobs with before/after photos for quality, warranty, and dispute resolution; (e) operate, secure, and improve the Platform; (f) prevent fraud and enforce our Terms; (g) administer promotions, referrals, and the reward points professionals give their customers; and (h) comply with legal obligations.
We do not use sensitive personal information for purposes other than those permitted by law.
5. How We Disclose Information
We disclose personal information to: service providers/processors who act on our behalf under contract (payments, SMS/voice, email, hosting, media storage, route planning and store lookup, analytics, background checks); the independent Provider assigned to your Job, to the extent needed to perform it; authorities or others where required by law or to protect rights and safety; and a successor in connection with a merger, acquisition, or sale of assets.
We require service providers to use personal information only to perform services for us.
6. We Do Not Sell Your Personal Information; Your Right to Opt Out of SharingKey terms
In short. We do not sell your data. You can switch off advertising measurement in one click, and your browser’s privacy signal is honored automatically.
NorTech does not "sell" personal information for money. We do use advertising measurement tools from advertising networks to measure whether our ads lead to bookings. Those tools can receive information about your visit and, when you book, protected (hashed) contact details, and under the CCPA/CPRA that can count as "sharing" for cross-context behavioral advertising.
You can opt out at any time. Use "Your Privacy Choices" (a link in the footer of every page, or nortech.site/privacy-choices) or turn on the Global Privacy Control (GPC) in your browser, which we treat as an opt-out automatically. If you opt out, those tools do not load for you and nothing about your visit or your booking is sent to an advertising network.
7. Cookies & Tracking Technologies
We use cookies and similar technologies for essential site functionality, security, remembering preferences, and basic analytics and performance measurement (for example, page-speed measurement and bot protection on forms). We also use advertising measurement cookies and pixels, for example to see which ad led to a booking. Those are only set if you have not opted out.
You can opt out at any time through "Your Privacy Choices" or with the Global Privacy Control (GPC) signal, and you can control cookies through your browser settings. The advertising tools that load for visitors who have not opted out can collect information about activity on this site.
We do not respond to browser "Do Not Track" signals, because there is no common standard for them, but we do honor GPC. More detail is in our Cookie Policy.
8. SMS / Text Messaging (TCPA)
By opting in at booking, you consent to receive transactional and informational text messages from NorTech (for example, booking confirmations, reminders, arrival alerts, and warranty updates) at the number you provide, including via automated technology. Consent is not a condition of purchase. Message frequency varies. Message and data rates may apply.
Reply STOP to unsubscribe at any time and HELP for help. We retain SMS consent records per CTIA guidelines and do not share opt-in data with third parties for their own marketing. Marketing texts, if any, are sent only with separate consent and honor STOP and applicable quiet hours.
9. Your California Privacy Rights (CCPA/CPRA)Key terms
In short. See, correct or delete your data from your account settings. We confirm within 10 business days and answer within 45 days.
If you are a California resident, you have the right to: know the categories and specific pieces of personal information we collect, use, and disclose; delete personal information (subject to legal exceptions); correct inaccurate personal information; opt out of the sale or sharing of personal information (we do neither); limit the use of sensitive personal information; and not be discriminated against for exercising your rights.
We extend these rights to California residents whether or not the CCPA applies to us by its size thresholds. NorTech does not disclose personal information to third parties for their direct-marketing purposes (California Shine the Light law).
The fastest way to exercise these rights is "Your data & privacy" in your client account settings, where you can request a copy of your data, a correction, or deletion. You can also email privacy@nortech.site (two methods).
We confirm receipt of your request within 10 business days and respond within 45 days, as California law requires (the law allows one extension of up to 45 more days when needed, and we will tell you if we use it). We will verify your request using information associated with your account. You may use an authorized agent to submit a request with proof of authorization.
We do not charge a fee for exercising your rights.
10. Financial Incentives (Pro Rewards & Referrals)
The reward points independent professionals give their customers, NorTech's referral program, and any first-booking discount a professional offers may be considered "financial incentives" under the CCPA because they provide a benefit related to the collection of personal information.
Participation is voluntary, you may withdraw at any time by contacting us, and the value of the incentive is reasonably related to the value of the data you provide (used only to administer the program). Program details are described in the program's posted terms.
11. Photo Documentation
Before-and-after photos are taken on every Job for quality assurance, warranty, and dispute resolution, and are stored in secure cloud storage with access controls. If you consent at booking, de-identified photos (with identifying information removed) may be used in marketing. You can decline or withdraw marketing-use consent by contacting privacy@nortech.site.
12. Provider Location Data
For independent Providers, we collect precise GPS location only during active jobs, to support arrival notifications, routing, safety, and job verification. Location collection stops when the job ends. Providers are notified of this collection and may control device-level location permissions, subject to the impact on their ability to use the Provider app.
13. Third-Party Services
To run the Services we rely on trusted service providers, each under contract and each limited to using personal information to perform services for us.
They fall into these categories: payment processing and identity verification; text-message and voice delivery; email delivery; cloud hosting, database and file storage; maps and route planning; bot protection and security; background-check screening companies (for Providers); error and performance monitoring; scheduling and background-processing tools; advertising measurement tools from advertising networks (see Section 6); and artificial-intelligence services that power our chat and phone assistants, message translation, voice features, and internal support and document tools.
Each service provider operates under its own privacy policy and processes data on our behalf. We do not sell your data to advertisers or data brokers.
14. Data Retention
In short. Booking and tax records are kept about 7 years. Everything else is kept only as long as it is needed.
We keep personal information only as long as needed for the purposes described here or as required by law: booking and transaction records for approximately 7 years (tax and legal compliance); SMS consent records per CTIA guidelines; job photos for the warranty period plus a reasonable archival window; account information while your account is active and for a reasonable period afterward.
We then delete or de-identify the information.
Provider identity documents, selfies, dates of birth, home addresses and background-check records are kept while an application is pending and while the Provider is active, and for a limited period after a decision or after the Provider leaves (as the law requires or allows), and are then deleted or de-identified.
Recordings and transcripts of calls and chats with our assistants are kept for a limited period for quality, safety and dispute handling, and are then deleted or de-identified. You may request deletion of non-essential data as described in Section 9.
15. Data Security
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and trusted processors. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and any authorities as required by applicable law.
16. Children’s Privacy
The Services are intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact privacy@nortech.site and we will delete it.
17. Changes to This Policy
We may update this Policy from time to time. Material changes will be posted here with an updated "Last Updated" date and, where appropriate, additional notice. Your continued use of the Services after changes take effect constitutes acceptance.
18. Pros Covering Facilities & Facility Account Data
NorTech — 2570 N First St, San Jose, CA 95131 · privacy@nortech.site
This collection is limited to scheduled shift windows and checkpoint scans; it does not continuously track a pro outside those events. Pros are notified of this collection.
When a facility sends a work order to one of its pros, we share the building address, the request, any photos the facility or a person scanning a report code attached, and the needed-by date with that pro, and we share the pro's response, notes and completion with the facility.
A facility's compliance calendar, the certificates it uploads and its spend and usage analytics (for example supply usage and visit counts) are visible to that facility's own administrators.
19. Contact
NorTech — 2570 N First St, San Jose, CA 95131 · privacy@nortech.site