Unorma

Legal

Privacy Policy

What we collect, why we collect it, who we share it with, and the choices you have — in plain language, backed by the detail regulators expect.

Last updated: July 5, 2026

This Privacy Policy explains how Unorma Inc.(“Unorma,” “we,” “us”) handles personal data when you visit unorma.com, sign up for a trial, or use the Unorma platform (together, the “Service”). It does not describe how we handle Customer Content — the AI system data, documents and compliance records our customers upload into the platform — which is governed by our Terms of Service and, where applicable, a separate Data Processing Agreement.

1. Information We Collect

Account & contact information

Name, work email, company name, job title, and billing address you give us when you create an account, start a trial, book a demo, or contact us.

Payment information

Subscriptions are billed through Stripe, Inc., our third-party payment processor. Stripe collects your card or bank details directly and processes them under its own privacy policy and PCI-DSS certification. Unorma never receives or stores full card numbers — we only receive limited billing metadata (e.g. plan, amount, last four digits, invoice history) needed to manage your subscription.

Usage & device data

When you browse our marketing site, we use Google Analytics to collect pages viewed, referring URL, approximate location (derived from IP address), device type, browser, and time on page. This only runs if you accept analytics cookies in our cookie preference manager. See our Cookie Policy for details.

Search performance data

We use Google Search Console to see aggregate, non-identifying information about how unorma.com appears in Google Search results (e.g. impressions, click-through rate, ranking keywords). Search Console does not place cookies on your device and does not tell us who you are.

Communications

Messages you send through our contact form, support inbox, or sales channels, including any attachments.

2. How We Use Information

  • Provide, operate, secure and maintain the Service and your account.
  • Process payments, subscriptions, renewals and invoicing through Stripe.
  • Respond to support requests and communicate about your account.
  • Understand aggregate site usage and search performance to improve our website and content.
  • Send product updates, security notices, and — where you have opted in — marketing communications, which you can unsubscribe from at any time.
  • Detect, investigate and prevent fraud, abuse and security incidents.
  • Comply with legal, tax and regulatory obligations.

Where the EU/UK GDPR applies, we rely on: contract (to provide the Service you signed up for), legitimate interests (to secure, analyze and improve our site and product, in a way that does not override your rights), consent (for analytics and marketing cookies, and marketing emails), and legal obligation (for tax, accounting and regulatory recordkeeping).

4. How We Share Information

We do not sell personal data. We share it only with the following categories of recipients:

  • Payment processing — Stripe, Inc., to process subscription payments and manage billing.
  • Analytics & search tools — Google (Google Analytics and Google Search Console), to understand site usage and search performance.
  • Infrastructure providers — cloud hosting, storage and email-delivery vendors that process data on our behalf under confidentiality and data-processing terms.
  • Professional advisors — auditors, lawyers and accountants, bound by confidentiality obligations.
  • Legal & safety — where required to comply with law, a valid legal process, or to protect the rights, property or safety of Unorma, our customers, or the public.
  • Business transfers — in connection with a merger, acquisition, financing or sale of assets, subject to the same confidentiality obligations described here.

5. International Data Transfers

Unorma Inc. is headquartered in Delaware, United States, with an EU office in Łódź, Poland. Personal data may be transferred to, stored, and processed in the United States and other countries where our service providers operate. Where we transfer personal data out of the EEA, UK or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. Data Retention

We retain account and billing data for as long as your account is active and for a reasonable period afterward to meet legal, tax, audit and dispute- resolution requirements. Analytics data is retained under Google Analytics’ standard retention settings. You may request earlier deletion as described in Your Privacy Rights below, subject to our legal recordkeeping obligations.

7. Data Security

We use encryption in transit and at rest, role-based access controls, and ongoing monitoring to protect personal data. Full detail is available on our Security page. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Privacy Rights

Depending on where you live, you may have the right to: access the personal data we hold about you; correct inaccurate data; delete your data; receive a portable copy; restrict or object to certain processing; and withdraw consent at any time (without affecting processing already carried out). We do not sell personal data, so there is nothing to opt out of a sale of.

To exercise any of these rights, email privacy@unorma.com. We may need to verify your identity before acting on a request, and we will respond within the timeframe required by applicable law.

You can accept, reject or customize non-essential cookies at any time through the cookie preference manager on this site, or from the link in our Cookie Policy.

10. Children’s Privacy

The Service is intended for business use by adults and is not directed to individuals under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last updated” date above, and, where required by law, we will provide additional notice.

12. Contact Us

Questions about this Privacy Policy or how we handle personal data? Email privacy@unorma.com or write to Unorma Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States.