Privacy notice

[operating entity] is responsible for the personal data processed in North. Contact: [contact address]. The laws of [jurisdiction] apply.

What we process

• Account: your email address, time zone, decision quota and brief hour.
• Companies: theses, goals, budgets, plans, tasks, artifacts, decision cards, the action log and the results ledger of the companies you create.
• Connections: tokens for the accounts you connect, stored encrypted and used only with the narrowest scope the provider offers.
• Billing: your plan, its status and the Stripe customer reference. Card details are entered on Stripe's pages and never reach North.
• Leads and contacts: lists you upload or that agents research for your companies, used only for those companies.

What we do not do

• Your data is not used to train models.
• One company's memory is never used for another company.
• We do not sell personal data and set no third-party advertising cookies.

Processors

Hosting and database (Supabase, Vercel, Fly.io), workflow scheduling (Inngest), model providers (Anthropic), email delivery (Resend), payments (Stripe) and error monitoring (Sentry, without personal data in reports). Each processes data only to run North.

Keeping and deleting

While your subscription is active we keep your data. After it ends we keep it for 90 days so you can export it; after that it may be deleted, including the action log, through a single audited deletion.

Your rights

You may access, export, correct or delete your data. Use the export in Settings or write to [contact address].