Privacy Policy

  • How we process personal data on this website and in our AI chat assistant.

Last updated: November 2026

1. Data controller

The controller of your personal data is NORQ AI, ul. Spacerowa 11L, 32-600 Babice, Poland, KRS: 0001218884, NIP: PL6343066384. In all matters concerning personal data you can contact us at contact@norq.ai.

2. The AI chat assistant

This website includes an AI chat assistant. When you use it, the following data is processed:

  • Message content - the messages you type are transmitted to our systems running on Google Cloud and processed by an AI model in order to generate an answer. Conversations (your messages and the assistant's answers) are stored for up to 30 days and then deleted automatically. We analyze them to see which questions the assistant answers poorly or not at all, and to improve it. Your data is not used to train AI models.
  • Answer ratings - if you rate an answer (thumbs up/down), the rating is stored together with the conversation, under the same 30-day retention.
  • Conversation history in your browser - also kept in your own browser (localStorage), so the conversation survives a page refresh. You can delete it at any time by clearing your browser's site data.
  • Technical metadata - we log technical information about each interaction (timestamps, a random session identifier, message counts, response times and technical status) without message content, for up to 30 days, to operate and improve the service.
  • Language of your message - we detect which language you wrote in, so that the assistant can answer you in that language. The detected language is recorded with the conversation, under the same 30-day retention, and we use it in aggregate to see which languages our visitors use. Detection runs on our own infrastructure; your message is not sent to a separate service for this.
  • IP address - processed for abuse prevention (rate limiting) in short-lived technical counters that are deleted automatically, and in standard server logs.
  • Contacting our team from the chat - if you choose "talk to a human" and leave your e-mail address (optionally with a note), we store the address, the note and the conversation transcript for up to 90 days — longer than the 30 days above, because a reply and the exchange that follows it can run for weeks — and send them in a notification e-mail to contact@norq.ai so that we can reply to you directly. The reply and any further exchange take place as ordinary e-mail correspondence (see section 4).

Please do not enter personal data - yours or anyone else's - into the chat. The assistant answers questions about NORQ AI and does not need personal data to do so. If you nevertheless entered personal data and want it deleted before the retention period ends, write to contact@norq.ai. The chat is not a channel for exercising data protection rights; for that, write to contact@norq.ai.

3. The AI voice assistant and text messages

Our hotel demonstration assistant also answers a telephone line. The call is answered by an AI assistant, which says so in its first sentence. We process your telephone number as presented by your network, what you say during the call and the assistant's replies, for up to 30 days — the same retention as the chat above — in order to answer your questions. Calls are not recorded: the audio is converted to text as the call proceeds and the audio itself is not stored.

Text messages (SMS). During a call you may ask us to text you a link to the booking page. The assistant reads your number back to you and sends the message only after you say yes, so consent is given verbally, by you, during that call. This is the only text message we send: one message per call, containing a link to our booking page and nothing else. There is no marketing, no newsletter and no recurring messaging, and agreeing to it is never a condition of using the assistant or any other service of ours. Reply STOP to any message to stop receiving them. Message and data rates may apply.

Mobile telephone numbers and messaging consent are not shared with third parties or affiliates for marketing or promotional purposes. Text messages are delivered by Twilio Inc. and its EU affiliates acting as a data processor, which is the only party your number is disclosed to and only for the purpose of delivering the message you asked for.

4. Contact form and e-mail

When you contact us via the form, e-mail or phone, we process the data you provide (such as name, e-mail address and message content) in order to respond and handle your inquiry. Meeting booking is provided by Calendly, an external service with its own privacy policy. Enquiries — including those sent through the form on our advertising landing page at go.norq.ai — are recorded in our customer relationship management system, HubSpot (see section 6).

5. Legal bases

We process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in operating and improving the website and chat assistant, ensuring their security and preventing abuse - and, for inquiries (including contact requests submitted through the chat), on the basis of taking steps prior to entering into a contract (Art. 6(1)(b) GDPR). Analytics cookies are used only with your consent (Art. 6(1)(a) GDPR), which you give or refuse in the cookie banner and can withdraw at any time in the same place.

6. Recipients and data location

Our infrastructure runs on Google Cloud (Google Cloud EMEA Ltd. / Google LLC) as a data processor under the Google Cloud Data Processing Addendum. The assistant on our own pages stores conversations and runs its AI processing with data residency in the European Union.

The hotel demonstration and its telephone line are the exception: they run in the United States. The chat on the hotel demonstration pages – in both the English and the Polish version – and the line +1 978 757 2826 are hosted in Google Cloud's us-east4 region, because the demonstration was built for clients in the United States and the number is American. Conversations there, the transcription of what you say during a call and the AI processing behind the answers therefore take place in the United States. Retention is the same 30 days and calls are still not recorded. The text of demonstration conversations is also kept in our analytics – in the same region and for the same 30 days, after which it is deleted automatically; we use it to improve the quality of answers and it is not used to train models. The assistant on our own pages – the chat bubble on norq.ai, in both language versions – stays in the European Union.

That is a transfer of personal data outside the European Economic Area. Google LLC participates in the EU–US Data Privacy Framework, which the European Commission has decided provides an adequate level of protection, and the Google Cloud Data Processing Addendum additionally incorporates the European Commission's standard contractual clauses. Write to contact@norq.ai for a copy of those safeguards. If you would rather your data were not processed in the United States, write to us or use the contact form instead of the demonstration assistant.

Notification e-mails from the chat's contact option are delivered by Twilio SendGrid (Twilio Inc. and its EU affiliates) as a data processor, which also delivers the text messages the voice assistant sends.

Website analytics, our advertising landing page at go.norq.ai and our record of enquiries run on HubSpot (HubSpot Ireland Ltd. / HubSpot, Inc.) as a data processor. Our HubSpot account is hosted in HubSpot's European Union data centre.

7. Cookies and local storage

With your consent, this website uses HubSpot's analytics cookies to see how visitors use it and which pages and campaigns lead to enquiries. They are set only after you accept them in the cookie banner, and you can change your choice at any time from the same banner. The website template may use technical cookies necessary for interface functions, and the chat assistant uses your browser's localStorage to keep the conversation history on your device.

8. Your rights

You have the right to access your data, rectify it, erase it, restrict its processing, object to processing, and data portability - contact us at contact@norq.ai. You also have the right to lodge a complaint with a supervisory authority; in Poland this is the President of the Personal Data Protection Office (PUODO).

9. Changes

We may update this policy as the website and our services evolve; the current version is always available on this page.