Skip to content
es

Privacy notice

Last updated: October 23, 2026

This notice explains what personal data we handle on the nori.software site and in the Nori mobile app for Android and iOS, what we use it for and how you can exercise your rights. It is issued in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), published in the Official Gazette of the Federation (DOF) on March 20, 2025.

Who controls your data

The controller of your data is Jorge Zamarrón Gómez, who operates the Nori software and brand (hereinafter, "Nori").

Address: Cerrada Tenayuca #415, Col. Santa Cruz Atoyac, Benito Juárez, Mexico City, C.P. 03310.

For anything related to this notice, write to us at hola@nori.software.

Controller or processor: it depends on the data

Nori is the controller of the data from the site forms and of your user account data: name, username, email and access records.

The data you enter in Nori on behalf of the company you work for, such as customers, sales, collections, visits or equipment photos, belongs to that company. The company is the controller and Nori processes that data as its processor ("encargado"), only to provide the service and following its instructions. To learn what your company does with that data, check its own privacy notice.

What data we collect on the site

On nori.software we only collect the data you give us in the forms and some technical connection data:

  • Contact or guided demo form: name, company, email address, phone or WhatsApp, industry, the ERP you use, number of users and the message you write.
  • "Try the demo" form: name, email address, company and, if you provide it, phone. We also record the date and time you entered the demo.
  • Technical data: IP address, browser type and the date and time of each submission, which we use to prevent abuse of the site.

We do not collect sensitive personal data. If you write sensitive data in the message, we delete it.

What we use the site data for

Primary purposes, necessary to handle what you ask of us:

  • Respond to your request for information, a demo or a quote.
  • Give you access to the public Nori demo.
  • Follow up commercially on your request: schedule the demo, send you the quote and answer your questions.
  • Protect the site: limit repeated submissions and detect automated forms.

Secondary purposes, which are not necessary to serve you: sending you news, promotions and commercial information about Nori, and asking for your opinion about our service. If you do not want us to use your data for these purposes, check the "I do not want to receive commercial information" box on the form or write to us at hola@nori.software at any time. Declining does not affect how we handle your request.

The public demo

The demo is a fictitious company shared by all visitors. Anything you enter in the demo, such as customers, sales or notes, can be seen by other people and is deleted every night. We ask that you do not enter real personal data in the demo.

No emails or WhatsApp messages are sent from the demo, and invoices are stamped in test mode, with no tax validity.

The Nori mobile app

The Nori app for Android and iOS is a work tool for employees of companies that use Nori. There is no open sign-up: your company's administrator creates your account and you sign in with the company code, your username and your password. The app only talks to your company's Nori server. It shows no ads and uses no third-party analytics or crash reporting tools.

This is the data the app handles:

  • Your account data: name, username, email, company and roles. The session is kept in the phone's secure storage.
  • Company data you enter on its behalf: customers (name, phone, email, RFC tax ID and address), sales, orders, invoices, collections, visit notes, approvals and inventory.
  • Precise location, only when you tap Arrived or Leave the customer during a visit on your route, so the company can verify the visit took place at the customer's address. It is requested only while the app is open and the app does not track you in the background. If you deny the permission, the visit is recorded without coordinates.
  • Camera, to scan product barcodes and to take photos of service work on customer equipment, such as refrigerators. Photos are uploaded to your company's server.
  • Bluetooth, to find and connect to the thermal printer you use for receipts. We do not use it to know where you are.
  • Phone make, model and operating system, to name your session and give you support. We do not collect the IMEI or the advertising ID.
  • Fingerprint or face, if you turn on biometric unlock. The phone does the check and that data never leaves it.

To work with no signal, the app keeps a copy of the catalog, your customers and whatever you enter while offline on the phone, and sends it to the server as soon as the connection is back. That copy lives in the app's private storage and is deleted when you sign out or another user signs in.

Cookies and similar technologies

The site uses a session cookie and a cross-site request forgery (CSRF) protection cookie, both necessary for the forms to work. Your light or dark theme preference is stored in your browser. We do not use advertising cookies. To know which pages are visited we use Google Analytics, which sets its own cookies and receives browsing data such as the pages you view, your IP address, your browser and your device. It only runs on the public website, not inside Nori or the app.

The site loads fonts from Google Fonts. When it does, your browser connects to Google servers, which receive your IP address.

You can delete or block cookies in your browser settings; if you block the session cookie, the forms cannot be submitted.

Who we share your data with

To run the site and the app, some data reaches providers that process it on our behalf and under our instructions:

  • Amazon Web Services (AWS), which hosts the site, the companies' servers and their databases.
  • The email delivery provider, which we use to reply to you and which the app uses to email the documents you choose to send to a customer.
  • Google, for Google Analytics, which measures visits to the public website.
  • Google, through ML Kit, the library that reads barcodes in the app. Scanning happens on the phone and images are not sent to Google, but the library sends Google usage and diagnostic data, such as performance, errors and the phone model.
  • OpenStreetMap or the configured map provider, which serves the route map images and therefore sees your IP address and the area you look at.
  • Recaudo, only if your company turns on that integration. It receives the customer and document data needed to send the document by WhatsApp or to create a payment link.

We do not sell your data or use it for advertising. We only hand it over to an authority when a law or an order from a competent authority requires it.

How long we keep the data

We keep the data from the site forms while we follow up on your request and up to two years after the last contact, unless you ask us to delete it sooner.

Your account data is kept while the account exists. When it is deleted, we delete your access, your sessions and your personal data.

The company's data is kept while the company has Nori and is deleted or handed over to it when the service ends. Invoices and records with tax effects are kept for the time the law requires, which in Mexico is five years under the Federal Tax Code.

How we protect your data

All communication between the app, the browser and the server is encrypted with HTTPS. Passwords are stored with one-way encryption, so nobody at Nori can read them. Each company has its own database, separate from the others, and each user sees only what their permissions allow. On the phone, the session is kept in the system's secure storage (Keystore on Android, Keychain on iOS).

No system is infallible. If a breach ever significantly affects your data, we will let you or your company know so you can protect yourself.

Your ARCO rights

You have the right to access your data, rectify it if it is inaccurate, cancel it when you consider it is not needed for the purposes of this notice, and object to its processing for specific purposes.

To exercise them, email hola@nori.software with the following:

  • Your name and the email or channel where you want to receive the answer.
  • A valid official ID or, if you act through a representative, the document proving the representation.
  • A clear description of the data and the right you want to exercise.
  • Anything that helps us find your information, such as the approximate date you filled in the form or the name of your company.

We answer within 20 business days at most. If your request is granted, we carry it out within the 15 business days following our answer. If your request is about data entered by a company that uses Nori (for example, you are a customer of that company), we forward it to the company, which is the controller, and tell you who we sent it to.

Revoking your consent or limiting the use of your data

You can revoke the consent you gave us at any time, or ask us to stop using your data for marketing purposes, by writing to hola@nori.software. We confirm the revocation by email. If the revocation prevents us from handling a request in progress, we will tell you.

In the app you can remove the location, camera, Bluetooth and notification permissions at any time from the phone settings. The features that use them will no longer be available, but the rest of the app keeps working.

If you believe your right to data protection has been violated, you can turn to the Ministry of Anti-Corruption and Good Governance, the authority in charge of enforcing the law.

Deleting your Nori account

You can ask us to delete your account and your personal data from the app, under More › Account › Delete my account ("Más › Cuenta › Eliminar mi cuenta"), or from our account deletion page, even if you no longer have access to the app. We delete it within 30 days at most and let you know by email when it is done.

The company's tax records are kept, without your name, for the time required by law.

Delete your Nori account

Minors

The site and the app are made for companies and their adult employees. They are not directed at anyone under 18 and we do not knowingly collect their data. If you believe a minor gave us their data, write to us and we will delete it.

Changes to this notice

If we change this notice, we will publish the new version at nori.software/privacy with its update date. If the change affects the purposes for which you gave us your data, we will let you know by email or in the app.