Privacy Notice

This notice explains what personal information Quantra Innovation & Technology, Inc. ("Norma", "we") collects, why, who we share it with, and the choices you have. It covers normaqms.com and the Norma apps.

Two roles

• For the records your organization keeps in Norma — documents, nonconformances, training records, the people on your org chart — your organization is in charge of the data and we process it on its behalf. Our Data Processing Addendum covers that. If you have a question about a record your employer keeps in Norma, ask them first.
• For the account and business information we need to run Norma — who signed up, who pays, who contacted support — we decide how it's used, and this notice covers it.

What we collect

• Account details: your email address, name, password (stored by our sign-in provider as a one-way hash; we never see it), the organizations you belong to and your role in them.
• What you put in Norma: the records, files and signatures your organization creates. Each recorded action carries the name of the person who took it and the time — that's the point of an audit trail.
• Billing details: the billing contact and company details you give Stripe. Card numbers go straight to Stripe; we never receive them.
• Support messages: what you send to support@normaqms.com.
• Security and service records: sign-in attempts (with your network address stored only as a hash), session activity for the 15-minute idle sign-out, which versions of our Terms and this notice you accepted, and error reports (an error message and the page it happened on — never what you typed).
• Product usage: if your organization's owner leaves it switched on, counts of which features are used. These never include record content or free text, and the person is stored only as a scrambled code that can't be matched across organizations.
• Marketing list: if you ask to be notified about Norma, your email address.

Cookies

Norma uses only the cookies it needs to work: keeping you signed in, registering a shop-floor tablet, opening a supplier portal link, and completing a QuickBooks connection. We don't use advertising or analytics cookies, and there are no third-party trackers on our pages.

Why we use it

• to provide Norma, sign you in, and keep each organization's data separate and secure;
• to send the emails Norma sends: invitations, sign-in links and codes, notifications and digests, and billing notices;
• to bill for paid plans;
• to answer support requests and fix problems;
• to meet legal obligations and enforce our Terms.

We don't sell personal information, we don't share it for advertising, and we don't send your data to AI services or use it to train AI models.

If you are in the EU or UK, our legal bases are: performing our contract with your organization, our legitimate interest in running and securing a business service, and legal obligations.

Who we share it with

Only the service providers that run Norma for us, listed on our Subprocessors page, each limited to its job. We may also disclose information when the law requires it, or as part of a merger or sale of our business (we'd tell you first).

Where it's stored

In the United States. If you're outside the US, your information is transferred there; for EU and UK customers our DPA includes the Standard Contractual Clauses.

How long we keep it

• While your organization's account is open, its records stay for as long as your organization keeps them — Norma is built so records aren't silently changed or deleted.
• When an account is closed, we keep its data for 90 days and then delete it. Backups age out within the following 7 days.
• Billing records are kept as long as tax law requires.
• Marketing list entries until you ask us to remove them.

Your choices and rights

You can see and update most of your account details in Settings. You can ask us to access, correct, export or delete your personal information, or to stop a particular use, by writing to support@normaqms.com. Depending on where you live (for example California, the EU or the UK), the law may give you specific rights; we'll honor them and won't treat you differently for using them. Where the information sits in your organization's records, we'll work with your organization to respond. You can also complain to your local data protection authority.

Children

Norma is a business service and isn't meant for anyone under 16.

Changes

If we change this notice, the version date at the top changes and we'll ask you to accept the new version the next time you sign in.

Contact

Quantra Innovation & Technology, Inc., 2157 Clearwater Drive, Deltona, FL 32738. Email: support@normaqms.com.