Privacy Policy

Information We Collect

Personal Information. When you complete our CoreScore assessment, contact forms, or other interactive tools, we may collect your name, email address, phone number, and business details that you voluntarily provide.

Usage Data. We collect anonymized usage data including page views, click events, and session information. We assign anonymous visitor and session identifiers using localStorage and sessionStorage in your browser. These identifiers do not contain personally identifiable information.

Framework Interaction Data. When you use interactive tools such as calculators, scorecards, or assessment frameworks on our site, we may collect the inputs you provide in order to generate results and improve our tools.

How We Use Information

• To provide CoreScore diagnostic reports and operational assessments
• To send follow-up emails related to your assessment results
• To improve our services, tools, and website experience
• To track aggregate website performance and usage patterns

Data Storage

Your data is stored in a PostgreSQL database hosted in the United States via Supabase. We implement reasonable security measures to protect your information. We do not sell your data to third parties.

Cookies and Tracking

We use localStorage and sessionStorage to assign anonymous visitor and session identifiers for analytics purposes. These are not traditional cookies but serve a similar function for understanding how visitors interact with our site.

We do not use third-party tracking scripts. We do not use advertising cookies. All analytics data is collected and processed by our own systems.

Email Communications

After completing a CoreScore assessment, you may receive up to 5 follow-up emails containing operational insights and recommendations related to your results. Every email includes an unsubscribe link, and you can opt out at any time.

Third-Party Services

We use the following third-party services to operate our platform:

• Supabase — database hosting and data storage
• Vercel — website hosting and deployment
• Anthropic — operational analysis engine used to generate diagnostic insights

Each of these services maintains its own privacy practices and data handling policies.

Data Retention

We retain your data for up to 2 years from the date of collection, or until you request deletion, whichever comes first.

Your Rights

You have the right to request access to, correction of, or deletion of your personal data at any time. To exercise any of these rights, contact us at operations@norvau.co.

California Residents. We do not sell personal information as defined under the California Consumer Privacy Act (CCPA).

Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. The “Last Updated” date at the top of this page indicates when the policy was most recently revised.

Contact

If you have any questions about this Privacy Policy or our data practices, contact us at operations@norvau.co.