Privacy Policy

Last updated: March 2026 — Walters & John Capital Trust

What NORJI Is

NORJI is a desktop application that runs on your Windows PC and takes commands via text or voice. It executes actions locally on your machine.

Data That Stays On Your Machine

NORJI processes your commands locally. Your files, emails, screenshots, and desktop activity are never uploaded to our servers. The desktop agent runs entirely on your PC. We do not have access to your computer, your files, or your screen.

Data We Collect

When you create an account, we collect your email address, name, and password (stored as a salted hash — we never see your actual password). We track usage metrics: how many commands you send per day, token counts for billing purposes, and your subscription tier. We do not collect the content of your commands.

How We Use Your Data

Your email and name are used for account management and communication. Usage metrics are used for billing, rate limiting, and improving the service. We do not sell, share, or provide your personal data to third parties, except payment processors (Stripe) as required to process your subscription.

Third-Party Services

Anthropic (Claude API): Your commands are sent to Anthropic's API for processing. Anthropic's privacy policy applies to this processing. Commands are not stored by Anthropic beyond the API request lifecycle.
Stripe: Payment processing is handled by Stripe. Your payment details are stored by Stripe, not by us. See Stripe's privacy policy.
OpenAI Whisper: Voice transcription runs locally on your machine. No audio is sent to external servers.

Data Retention

Account data is retained while your account is active. Usage logs are retained for 90 days for billing purposes. You can request deletion of your account and all associated data at any time.

Your Rights (GDPR)

You have the right to: access your personal data, correct inaccurate data, delete your account and data, export your data in a portable format, object to processing, and withdraw consent. To exercise any of these rights, email privacy@norji.ai.

Data Security

Passwords are hashed with PBKDF2-SHA256 with a unique salt. All API communication uses HTTPS/TLS. Database access is restricted to authorised personnel only.

Children

NORJI is not intended for users under 18. We do not knowingly collect data from minors.

Changes

We may update this policy. Material changes will be communicated via email. Continued use after changes constitutes acceptance.

Contact

Walters & John Capital Trust
York, United Kingdom
privacy@norji.ai