This Privacy Policy describes how NORJI Ltd ("NORJI", "we", "us", "our") collects, uses, and protects your personal data when you use our website at norji.co.uk and our NORJI cloud service on Telegram (collectively, the "Service").
Data Controller
NORJI Ltd
Registration pending
Email: support@norji.co.uk
If you have any questions about how we handle your personal data, please contact us at support@norji.co.uk.
This policy applies to individuals aged 18 and over. Our Service is not intended for use by anyone under the age of 18, and we do not knowingly collect personal data from children.
We process your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. The lawful bases we rely on are:
When you create a NORJI account, we collect:
When you use our website or Service, we may automatically collect:
When you use NORJI via Telegram, the text of commands you send is transmitted to our servers for processing. We retain command logs for a limited period for debugging and security purposes (see Section 7 — Retention).
We do not store your payment card details. All payment processing is handled by Stripe (see Section 6 — Third-Party Processors). We receive and store confirmation of payment status and subscription period from Stripe.
Important: Data processed by NORJI — including invoices, proposals, organised downloads, and other documents — are created and stored in your isolated account. Your data is isolated from other users and never shared with third parties other than our AI processing provider's servers.
| Purpose | Data Used | Lawful Basis |
|---|---|---|
| Providing and managing your account | Account data | Contract |
| Processing subscription payments | Account data, payment status | Contract |
| Processing your Telegram commands | Command data | Contract |
| Security, fraud prevention, debugging | Technical data, command logs | Legitimate interests |
| Responding to support enquiries | Account data, communications | Contract / Legitimate interests |
| Compliance with legal obligations (e.g. tax records) | Account data, payment data | Legal obligation |
| Service improvement and analytics | Aggregated technical data | Legitimate interests |
| Sending transactional emails (receipts, alerts) | Email address | Contract |
| Sending marketing communications (if opted in) | Email address | Consent |
We use essential cookies only. We do not use advertising, tracking, or analytics cookies.
Essential cookies we set include:
localStorage, not as a cookie).We do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts on our website. We do not sell your data to advertisers or data brokers.
We share personal data with the following third-party service providers acting as data processors on our behalf. Each is contractually required to process your data only as instructed and to maintain appropriate security measures.
| Processor | Purpose | Location | Safeguard |
|---|---|---|---|
| Stripe | Payment processing and subscription management | USA (and UK/EEA) | UK adequacy decision / Standard Contractual Clauses (SCCs). Stripe Privacy Policy |
| Anthropic | AI language model processing (powering NORJI's command understanding and content generation) | USA | Standard Contractual Clauses (SCCs). Anthropic Privacy Policy |
| Telegram | Command delivery interface (messages you send to your NORJI bot) | UAE / distributed | Telegram's data processing terms apply. Telegram Privacy Policy |
| Vercel | Website hosting | USA / EEA | Standard Contractual Clauses (SCCs). Vercel Privacy Policy |
| Railway | Backend API hosting | USA | Standard Contractual Clauses (SCCs). Railway Privacy Policy |
We will not sell, rent, or trade your personal data to any third party.
We retain your personal data only for as long as necessary for the purposes set out in this policy, or as required by law.
| Data Type | Retention Period |
|---|---|
| Account data (email, password hash, subscription status) | Duration of your account + 6 years (legal obligation) |
| Payment records | 7 years (UK tax / financial reporting obligations) |
| Command logs (for debugging/security) | 30 days, then automatically deleted |
| Server access logs (IP, timestamps) | 90 days, then automatically deleted |
| Support communications | 3 years from last contact |
| User-uploaded content | Under your control — deleted on request |
When you close your account, we will delete or anonymise your personal data within 30 days, except where retention is required by legal obligation.
Some of our third-party processors operate outside the UK, including in the United States. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including:
Details of the safeguards for each processor are listed in Section 6.
Under the UK GDPR and Data Protection Act 2018, you have the following rights in relation to your personal data:
To exercise any of these rights, contact us at support@norji.co.uk. We will respond within one calendar month. We may need to verify your identity before fulfilling a request.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:
No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at support@norji.co.uk.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO as required by law.
NORJI is intended for use by individuals aged 18 and over only. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by prominent notice on our website, giving at least 14 days' notice before changes take effect. The current version will always be available at norji.co.uk/privacy.
If you have a concern about how we handle your personal data that we have not resolved to your satisfaction, you have the right to lodge a complaint with the UK's supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: ico.org.uk
We encourage you to contact us first at support@norji.co.uk and we will do our best to resolve any concern.
© 2026 NORJI Ltd. Registration pending. | Terms of Service | Home