Privacy Policy
Last updated: October 28, 2025
Norflock ("we," "our," "us") values your privacy. This Privacy Policy describes how we collect, use, and protect your data when you use our Service.
We collect only the minimal data necessary to operate Norflock:
- Gmail Metadata: Sender address, subject line, and timestamp — accessed through Google OAuth with your consent.
- Account Information: Email address, name (if provided), and authentication data.
- Usage Data: Device, browser, and analytics data to improve performance.
We do not read, store, or share the content of your emails.
- To provide analytics and insights about your email footprint
- To facilitate your GDPR or data reclaim requests
- To improve the performance and reliability of the Service
- To communicate important updates or billing information
Email metadata is processed temporarily and deleted once insights are generated.
We retain account data (like your login email) as long as your account remains active.
We use encryption, secure servers, and OAuth 2.0 standards to protect your data.
Access to user information is restricted to authorized personnel only.
Norflock's use and transfer of information received from Google APIs comply with the Google API Services User Data Policy, including the Limited Use requirements.
We may use third-party processors (e.g., LemonSqueezy for billing, Mails.so for email validation). These services are bound by their own privacy policies.
You have the right to:
- Request access to your stored data
- Request deletion of your account and data
- Withdraw OAuth permissions at any time from your Google account settings
Norflock is not intended for users under 18. We do not knowingly collect data from minors.
We may update this Privacy Policy periodically. Updates will be posted with an effective date revision.
For privacy concerns or data requests, reach out at:
📧 privacy@norflock.com