Privacy Policy

Nort ("we") helps people apply for H-2A and H-2B seasonal jobs in the United States. This policy explains what data we collect, why, how we protect it, and the choices you have. Contact: hello@getnort.com.

What we collect

Google user data

When you connect Gmail, we request only two kinds of access: send email on your behalf (gmail.send) and see your email address (openid, email). We do not read, search, store or delete any email in your inbox.

We use this access only to send the job applications you approved, from your own Gmail, to employers listed in the U.S. Department of Labor's public job orders. The authorization token is encrypted (AES-256-GCM) before it is stored, and only our sending service can use it. You can disconnect at any time in your Nort account or at myaccount.google.com/permissions; we then delete the token.

Nort's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, do not use it to train AI models, and no human reads it except with your explicit permission, for security, or to comply with the law.

How we use your data

Who processes data for us

We use providers under data processing terms: Supabase (database and servers, São Paulo region), Cloudflare (website and DNS), Anthropic (AI to write letters; it does not train on our data), Google (Gmail sending), Zoho (our own email) and payment providers (Mercado Pago, Stripe). We do not sell personal data.

Security

Access to every record is restricted to its owner (row-level security). Sensitive fields such as your phone number are encrypted at rest, connections use HTTPS, and we keep personal data out of our logs.

Retention and your rights

We keep your data while your account is active. You can download a copy or delete your account at any time in "My account"; deletion is completed within 15 days, except records we must keep by law (such as payment records). Under Brazil's LGPD and similar laws you may access, correct, port or delete your data and withdraw consent. Write to hello@getnort.com.

Changes

If we change this policy, we will update the date above and notify you in the app before material changes take effect.