Legal

Privacy Policy

Effective date: November 1, 2026

1. Who we are

This policy explains how Norhchron, LLC ("Norhchron", "we", "us") handles personal information when you visit norhchron.com (the "website") or use the Norhchron client portal, called the Command Center (the "portal"). Norhchron, LLC is a Florida limited liability company.

For privacy questions or requests, email [email protected].

2. Information we collect on the website

Contact form

When you use the contact form, we collect your name, your email address and your message. The form also contains a hidden field that people never see; if it is filled in, we treat the submission as automated spam and discard it without sending it on.

Your submission is sent by email, through Microsoft 365, to our business mailbox. A copy is kept in that mailbox, including its sent items, so that we can reply and keep a record of the conversation. We use it to respond to your inquiry and to follow up about our services if you asked us to.

Spam and abuse protection

To limit abuse, we cap how many messages can be sent from one place in a short period: five submissions per minute, followed by a 10-minute pause if that limit is exceeded. To do this, we take the network (IP) address that our hosting provider reports for your connection and turn it into a keyed HMAC-SHA-256 digest using a secret key. That one-way code, not your IP address, is used to keep the counter. Our code does not store your raw IP address, and it does not log it. The counter is deleted automatically, normally about 10 minutes after the last submission or after any pause ends.

Hosting and server logs

The website is hosted on Cloudflare's network. Like any web host, Cloudflare necessarily processes technical information to deliver pages and protect the site, such as your IP address, browser type, the pages requested and the time of the request. Cloudflare may keep this information in its own logs under its own policies. We do not use these logs to build profiles of visitors.

Fonts

The website loads its typefaces from Google Fonts. When your browser downloads a font, Google receives your IP address and basic browser information as part of that request.

Cookies and analytics

The website itself sets no cookies and uses no analytics, advertising or tracking tools. Our hosting provider may set a strictly necessary security cookie in some situations, for example to tell people apart from automated traffic during an attack. If we ever add analytics, we will update this policy first.

3. Information we process in the client portal

The portal is for Norhchron clients and is not yet generally available. When it is, and you use it, we process:

• Account information: your name, work email address, company, role, and sign-in details.
• Messages and instructions: what you write to the AI agents assigned to you, and their replies.
• Files and deliverables: documents you upload and work products the agents create for you.
• Voice: if you use voice features, the transcripts of what you say. Transcripts are saved as chat messages in the portal. We do not record or store the audio.
• Billing records: invoices and payment status for the services you purchase.
• Usage and security information: sign-in times, activity records and technical logs needed to run, secure and troubleshoot the portal.

We use this information only to provide, secure and support the services you've engaged us for, to bill for them, and to meet our legal obligations. We do not use your portal content to train AI models of our own.

AI processing with Microsoft Azure

The AI agents' language models run on Microsoft Azure AI services. Under Microsoft's terms:

• your prompts and the outputs generated for you are not used to train or improve the underlying foundation models;
• they are not shared with other Azure customers or with the model developers; and
• any model customized for you is for your use only.

Microsoft runs automated abuse monitoring. If it detects possible misuse, it may store limited samples for a limited time, and authorized Microsoft personnel may review them.

We use Azure deployments that keep this processing within the United States.

Voice

Voice features use Azure AI Speech. Microsoft processes real-time speech-to-text audio in memory and does not store it at rest. Norhchron does not record or store your audio. When agents reply out loud, the generated speech is held only briefly in memory so it can play, and is not saved.

What you say is turned into a text transcript, and Norhchron keeps that transcript as a chat message in the portal. Transcripts are kept and deleted like other portal content, as set out in "How long we keep information" below.

Your agreement with Norhchron may contain additional commitments about your data. If it does, those commitments apply in addition to this policy and prevail if there is a conflict.

4. Service providers

We use carefully chosen service providers to run our business. They process personal information on our behalf and only as needed to provide their service to us:

• Website hosting and network security, to serve the website and protect it from abuse.
• Email and productivity services, to receive contact-form messages and correspond with you.
• Cloud hosting and storage, to run the portal and store its data.
• AI services (Microsoft Azure AI services), to generate the agents' responses and work, using the instructions, messages and files needed for each task.
• Speech services (Azure AI Speech), to turn voice into text and text into speech when you use voice features.
• Web font delivery, to supply the website's typefaces.
• Payment and accounting services, to invoice and collect payment.

We may also disclose information if the law requires it, to protect the rights or safety of any person, or as part of a merger, acquisition or sale of our business, in which case this policy would continue to apply to it. We do not sell personal information or share it for targeted advertising.

5. How long we keep information

• Contact-form messages: for as long as needed to handle your inquiry and any relationship that follows, and then for up to 24 months unless you ask us to delete them sooner.
• Spam-protection counters: deleted automatically, normally within about 10 minutes.
• Portal content and account information, including chat messages and voice transcripts: for the length of your engagement. When it ends, we return or delete your content on request, and delete what we no longer need, unless your agreement says otherwise. Records we need to meet legal, tax, regulatory or federal record-keeping obligations are kept for up to 7 years as required for those purposes.
• Billing records: as long as tax and accounting laws require.

6. Security

We protect personal information with measures that fit its sensitivity. These include encrypted connections, access limited to people who need it, secrets kept out of our public code, and separate, private access for each client in the portal. No system is perfectly secure; if a breach affects your personal information, we will notify you as the law requires.

7. Your choices and rights

You can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct information that is wrong;
• delete your information, where we are not required to keep it; and
• stop contacting you.

Depending on where you live, you may have other rights under local law, such as the right to object to or restrict certain processing, or to complain to a data protection authority. To make a request, email [email protected]. We will confirm your identity before acting and reply within the time the law requires. We will not treat you differently for exercising your rights.

If you are a client's employee and your company manages your portal account, we may refer some requests to your company.

8. Children

Our website and services are for businesses and are not directed to children under 16. We do not knowingly collect their personal information.

9. International transfers

We and our service providers may process information in the United States and other countries. Where the law requires it, we use appropriate safeguards for these transfers.

10. Changes to this policy

We will update this policy when our practices change, and we will change the effective date at the top. If a change is significant, we will give clients notice through the portal or by email.

11. Contact us

Norhchron, LLC · Email: [email protected]