Norma QI is a product of Norma Wealth, LLC, a Delaware company based in the GCC ("Norma", "we", "us"). Norma Wealth, LLC is the company responsible for your personal data under this policy.
This policy covers two things: the Norma QI website and platform at normaqi.com, and the Norma QI connector for Claude (the "connector"). If you only use the website, sections 1 to 4 and 6 to 11 apply to you. If you also use the connector, section 5 applies as well.
Account data. Accounts are created by invitation. When you register we collect your first name, last name, work email, a password, and optionally your job title. We also record when you accepted our terms and when you verified your email. We store your password only as a one-way hash, never in readable form.
Profile data you may add. In your profile you can add a phone number, department, short biography, photo, and your focus areas by industry and geography. You choose whether to fill these in.
Google sign-in. If you sign in with Google, Google tells us your name, email address and a Google account identifier. We do not receive your Google password. We only accept the sign-in if Google confirms that the email belongs to you.
Sign-in and security data. When you sign in we record your IP address and browser details (user agent) against your session, and the time of your last login. We also log your account activity, such as which features you use and which items you open, with your IP address and browser details. Sign-in sessions last up to 7 days.
Content you create. The platform stores what you save or upload, which can include watchlists, saved searches, alerts, notes, portfolios and holdings, trade plans and records, screener settings, playbook rules, uploaded files and documents, and your conversations with the Norma QI chat assistant (the full text of the messages).
Billing data. When you pay by card, Stripe collects your card details. We never see or store the full card number. We keep the plan, status and payment references that Stripe gives us. Customers who pay by bank transfer give us company billing details, and we keep invoices.
Email data. We send you emails such as your verification code, a welcome message, receipts and alerts you asked for. We keep a record of what we sent.
Usage counters. We count your use of features each month (for example reports, chat questions and AI usage) to apply plan limits.
Trial requests. If you ask for a trial, we collect your name, work email, company, firm type, role, your chosen market, and, if you give it, your phone number and how you heard of us. We check the request automatically: whether your email domain is a free mail domain, whether your firm or domain already holds a trial, and whether your firm type or name appears on an internal screening list. We record the result of that check.
Trial use. Once a trial is open, we record the same account, sign-in, content and billing data as any other account (see above), plus: every page you view, every item outside your trial access that you click on, every chat question (up to 20 messages) and its answer, every export you attempt, and whether you save a card, cancel, convert to a plan, or let the trial end. A small, fixed watermark naming your name, firm and the date appears on every page while the trial is open; this is not a tracking cookie, it is text rendered on the page itself.
The trial request form. The form is protected by a bot check (Cloudflare Turnstile) before it will submit. Turnstile runs a short automated test in your browser and may set a small amount of browser storage to do this; it does not show you a puzzle in the ordinary case. See "Who we share it with" for Cloudflare's role as a processor.
Cookies and browser storage. We use only what is needed to run the site, plus Google Analytics if you accept it:
We do not use advertising cookies. The only analytics on the site is Google Analytics, and nothing from it loads, and nothing is sent to Google, until you accept it in the banner shown on your first visit; declining, or making no choice, means none of it runs.
Google Analytics. If you accept it, Google Analytics tells us which pages are visited, roughly how long for, your approximate location from your IP address, your device and browser type, and which site sent you to ours. We only ever send Google the address of the page itself; everything after a question mark or a hash in the address bar is removed first, so an email address, an invite link or a payment reference that happens to be in the address never reaches Google. It does not collect your name, your email address, or anything you type into the platform. You can change your mind at any time using the "Cookie choices" control below. Choosing "Decline" there stops our page view tracking at once, removes the Google Analytics script and clears its cookies, and stops it fully on your next page load.
Use to reopen the Google Analytics banner and change your choice.
We use your data to:
We do not sell your personal data. We do not use it for advertising.
Where the law requires a legal basis (for example in the EU or UK), we rely on: performing our contract with you, our legitimate interest in running and securing the service, your consent where we ask for it (including for Google Analytics), and legal obligation.
Our hosting is in Germany. Norma Wealth, LLC is a Delaware company based in the GCC, and some of our providers are in the United States. Your data may therefore be handled in countries other than your own. Where the law requires it, we rely on approved safeguards, such as the standard contractual clauses offered by our providers.
The connector lets you use Norma QI reports from inside your own Claude account. It is a remote MCP server.
Sign in. You sign in with your Norma QI account. You approve access once. Our server then issues access tokens that last 1 hour and refresh tokens that last up to 90 days and are replaced each time they are used. We store only hashed copies of these tokens. The connector accepts requests that come from claude.ai and claude.com.
What it can do. Access is read only. The connector can read Norma QI reports that your plan already includes. It cannot change your account, your data, your billing or anything else in Norma QI. Each plan has a monthly limit on connector calls and on rows delivered, plus limits on rows per answer and on how fast calls can be made.
What we log. Each time the connector is called, we log:
When a call returns rows of a dataset, we also log the identifiers of the rows delivered. We use these logs to count calls against your plan's monthly quota and row limits, to stop bulk copying of our data, to investigate errors and abuse, and to support you. Arguments may contain what you or Claude typed, such as a company name or a search term. Do not put sensitive personal data into requests to the connector.
What Anthropic receives. When your Claude asks for a Norma QI report, the connector returns the result to Anthropic so that Claude can show it to you. That result passes through Anthropic's systems. Anthropic's handling of it is governed by your own Anthropic account terms and privacy policy, not by this policy. We do not control it. Please read them.
What we do not receive. We do not receive your Claude conversations. We only see the requests your Claude sends to the connector.
How to remove the connector. Open the connector settings in your Claude account and remove Norma QI. You can also write to [email protected] and we will revoke your connector tokens. Norma QI does not yet have its own page for this.
We keep personal data only as long as we need it for the purposes above.
If the law requires us to keep something longer, we will, and we will use it only for that purpose.
Depending on where you live (for example under the GDPR, the UK GDPR or California law), you may have the right to:
To use any of these rights, write to [email protected]. We will reply within 30 days. We may need to confirm who you are first. Organization owners can also ask for an export or deletion of their organization's playbook and learning data at the same address.
When you ask us to delete your data, we delete your account and content but keep the trial audit record described above, as the law allows, for security, abuse prevention and the defence of legal claims. We do not use the identifiable record for anything else.
You can object to our use of your data for product development by writing to [email protected].
We do not sell personal data and we do not share it for cross-context advertising.
Traffic between you and normaqi.com is encrypted in transit (TLS). Passwords are stored as hashes. Connector tokens are stored as hashes. Access to accounts is controlled by sign-in and by roles inside each workspace. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.
To report a security problem, write to [email protected].
Norma QI is for business and professional use. It is not for anyone under 18. We do not knowingly collect data from children. If you think we have, write to us and we will delete it.
If we make important changes, we will post the new version here, update the date at the top, and email account holders.
Norma Wealth, LLC, Delaware, USA
Email: [email protected], for privacy requests, questions and security reports.