Privacy Policy

Last updated October 30, 2026

What Norryx keeps

• Your account: name, email, company, NMLS number and phone.
• If you turn on two-step login: the cell number your codes go to, or your authenticator app's secret.
• Your plan: which plan you're on, its status and dates, and Stripe's customer number for you. Not your card.
• What you enter: client nicknames, loan details, property addresses, your fees and settings, and your estimates.
• Feedback you send, and how many property lookups and Loan Estimate reads you've used each month.
• Sign-in records: a sign-in cookie, and, for 15 minutes, failed sign-in attempts by email and network address to stop password guessing.

What Norryx doesn't keep

• Loan Estimates you upload are read once and not stored.
• What you say to Talk to Norryx: no audio is recorded, and the words aren't kept after the estimate is set up.
• Your password, which is stored only as a scrambled hash.
• Your card number, which only Stripe has.
• Consumer personal information: Norryx asks you not to enter it and has no place for it.

Norryx doesn't sell data, show ads, or use advertising or tracking cookies.

How it's used

To run Norryx for you, keep it secure, answer your questions, and make estimates more accurate.

Services that receive some of it

• Vercel (hosting) and Neon (database), which store and run Norryx.
• The U.S. Census Bureau address lookup, which receives the property address. When it's slow, the FCC's area lookup and the Census Bureau's TIGERweb maps receive the property's map location instead.
• Google Maps, which receives the address as you type it, to suggest full addresses.
• FEMA and North Carolina Emergency Management flood maps, which receive the property's map location.
• RentCast, which receives the property address to return public property records.
• Anthropic, which receives a Loan Estimate or closing cost estimate you upload so its fees can be read.
• Stripe, which receives your name and email and handles your card, your plan and your receipts.
• Twilio, which receives your cell number to text your login code, if you choose text codes.
• Resend, which receives your email address to send a password reset link you ask for.
• When you use Talk to Norryx: your browser's own speech service (Google in Chrome and Edge, Apple in Safari) hears what you say and turns it into words, and Anthropic receives those words and your client nicknames to work out the estimate you asked for. Norryx never records or keeps the audio.

Who can see what

Your clients and estimates are visible only in your account. The Norryx owner can see your account details, your monthly usage counts and any feedback you send, not your clients. An estimate you send a client is a PDF you share yourself; nothing about it is online.

How long it's kept

For as long as your account is open. Ask us to delete your account and we'll remove your data, including from backups, within 30 days.

Security

Norryx only runs over encrypted connections, its hosting and database providers encrypt stored data, passwords are hashed, and sign-in attempts are limited.

Your choices

You can see and change your information in Norryx at any time, and ask us for a copy or to delete it.

Contact

Privacy questions or requests: sally@norryx.com.