Privacy Policy

This Privacy Policy applies to Norvan Technologies Inc (USA), 308 W Lincoln Avenue, Montebello, CA 90640, USA, and its affiliate Norvan Technologies Sdn. Bhd. (Malaysia, Reg. No. 202601022926 / 1685023-U) (together, "Norvan", "we", "us"). Contact: info@norvan.io · US +1 (443) 322-3232 · MY +60 3-5624 4426.

It covers this website, norvan.io. Questions about this policy or your personal data can be sent to info@norvan.io.

Information you give us. When you take the Intelligence Assessment, request the PDF report, book a call, contact us, apply for a role, or talk to Nexus (our on-site assistant), you may provide your name, work email, company, role, industry, company size, phone number, and the content of your messages, typed or spoken. Assessment answers and scores are stored with your request when you ask for the report.

Consent records. If you tick either consent box, for marketing text messages or for calls and service messages, we record that consent separately for each box: your phone number, the date and time, the page you were on, the wording you agreed to, and your IP address and browser details. We keep this as proof of what you agreed to.

Information collected automatically. Like most websites we record standard technical data: pages visited, referring URL, campaign parameters (UTM), approximate location derived from your IP address, browser and device type, and interaction events used to understand how the site is used. If you arrive from an advertisement, we also record the click identifier the advertising platform added to the link.

Cookies and browser storage. We set one first-party cookie, nv_attr. It lasts 90 days and records how you first reached the site: the campaign parameters and advertising click identifier in the link you followed, the first page you opened, and the site that referred you. It is read when you send us an enquiry, so that we know which campaign it came from. Your browser's local storage holds a visit counter and the time of your last visit (norvan_visit_count, norvan_last_visit) and your Nexus session (nexus_session_id, nexus_session_data), which keeps the details you gave Nexus so that it does not ask for them twice and is replaced after 30 days. A session-storage entry (nexus_idle_popup_dismissed) remembers that you closed a prompt until you close the tab. Our analytics, Vercel Web Analytics and Speed Insights, do not use cookies. You can delete all of these at any time in your browser settings.

Fonts. The site loads its typefaces from Google Fonts. Your browser requests them from Google directly, and Google receives your IP address as part of that request.

To deliver what you asked for: your assessment results, the PDF report, a call back, a reply to your enquiry, or a response from Nexus.

To follow up on a genuine business enquiry with relevant information about Norvan Nous and our services. You can ask us to stop at any time.

To call or text you where you have agreed to it, as described under "Phone Calls & Text Messages (SMS)" below.

To operate, secure, and improve the website, and to measure which content is useful.

We do not sell personal data. We do not use it for automated decisions that have legal or similarly significant effects on you.

Consent. Marketing text messages and calls or service messages are consented to separately, through two distinct checkboxes on our website. Neither is required, and you may tick one, both or neither. If you provide your phone number and check the marketing box, you agree that Norvan Technologies may send recurring marketing text messages to that number, such as product updates, feature announcements, event invitations and special offers. If you check the calls and service box, you agree that Norvan Technologies may call that number and send it non-marketing text messages, such as demo scheduling, follow-ups on your inquiry and appointment reminders. Calls may be placed by our staff or by an AI voice assistant, which identifies itself and Norvan Technologies at the start of the call, and may use automated technology. Consent is not a condition of purchase.

Frequency and cost. Message frequency varies; marketing messages are typically up to 4 per month. Message and data rates may apply.

Opting out. Reply STOP to any text to unsubscribe; you will receive one final confirmation message. Reply HELP for help, or contact info@norvan.io or +1 (443) 322-3232. You can also tell us during any call that you no longer wish to be called. We honor opt-outs promptly and add your number to our internal Do Not Call list. We call only between 8:00 a.m. and 9:00 p.m. in your local time and do not call numbers on the National Do Not Call Registry without your express consent.

Call recording. Calls may be recorded and transcribed for quality, training and service purposes. Where required by law, we will notify you at the start of the call.

No sharing of SMS opt-in data. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Your mobile number and SMS consent are shared only with service providers (such as our telecommunications provider) that help us deliver the messages and calls you requested, and are never sold, rented or shared with third parties or affiliates for their own marketing purposes.

The terms of the text messaging program are in our Terms of Service.

Where the Malaysian Personal Data Protection Act 2010, the GDPR, or similar laws apply, we rely on your consent (for marketing follow-up and for marketing calls and texts), the performance of a contract or steps taken at your request (for reports, calls, and enquiries), and our legitimate interests in running, measuring, and improving the site. Where we rely on your consent, you can withdraw it at any time.

Service providers who process data on our behalf: our hosting and database providers, our email delivery provider, our telecommunications provider, our analytics tooling, and the AI model providers that power Nexus and our voice assistant (conversation text, and the audio of a voice conversation, is sent to them to generate a reply). Each is bound by a contract that limits use of the data to providing the service.

Within the Norvan group of entities, so that the right team can respond to you.

Where required by law, regulation, or a valid legal process.

Mobile phone numbers and SMS opt-in consent are excluded from any sharing described above, except with service providers that deliver our messages and calls on our behalf.

Norvan operates from the United States and Malaysia, and our providers may process data in other countries. Where a transfer leaves the jurisdiction the data was collected in, we rely on safeguards recognised by the applicable law, such as contractual data-protection commitments from the provider.

We keep personal data only as long as needed for the purposes described in this policy. Records of consent to receive calls and text messages, and opt-out requests, are kept for at least five (5) years after your last interaction with us, to demonstrate compliance with applicable law. Other contact and inquiry data is kept for up to three (3) years after your last interaction, unless a longer period is required by law.

Nexus conversations, typed or spoken, and call recordings and transcripts are inquiry data and are kept on the same terms. Analytics data is retained in aggregated form.

Depending on where you are, you may have the right to access the personal data we hold about you, to correct it, to ask for it to be deleted, to object to or restrict certain processing, to withdraw consent, and to receive a copy in a portable format. To exercise any of these, email info@norvan.io. We will respond within the period required by the applicable law.

Consent and opt-out records are the exception to deletion for as long as the law requires us to keep them.

You may also have the right to lodge a complaint with your local data protection authority.

We use technical and organisational measures appropriate to the sensitivity of the data, including encrypted connections, access controls, and separation between client data and platform intelligence. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Our deployment and data-handling options for clients are described on the Security page.

This site is intended for business use and is not directed at children under 18. We do not knowingly collect data from children.

We may update this policy from time to time. The date at the top shows when it was last changed. Material changes will be highlighted on this page.