Normyn Privacy Policy

Effective date: September 26, 2026 Last updated: September 26, 2026

This Privacy Policy explains how Normyn LLC ("Normyn," "we," "us," or "our") collects, uses, shares, and protects information when you use the Normyn website at normyn.com, the Normyn applications, and related services (the "Service").

Normyn is accounting software used by businesses. We handle two kinds of information differently:

• Account information — information about you as a Normyn user (for example, your name, email, and how you use the Service). Normyn is responsible for this information.
• Customer Data — the financial records and documents your business stores in Normyn, which may include information about your employees, contractors, customers, and vendors. Your business owns and controls Customer Data. We process it on your behalf to provide the Service, as described in our Terms of Service.

1. Information We Collect

Information you provide

• Account details: name, email, phone number, password, business name, and business details you enter during setup.
• Customer Data: transactions, invoices, bills, payroll records, reports, uploaded documents (such as receipts, bank statements, and invoices), and notes.
• Communications: messages you send to support, feedback, and survey responses.
• Billing information, when paid plans are offered (payment card details are collected and stored by our payment processor, not by Normyn).

Information from Connected Services you authorize

• QuickBooks Online (Intuit): when you connect QuickBooks Online, we retrieve accounting data from your QuickBooks company, such as your chart of accounts, customers, vendors, items, transactions, attachments, and reports, in order to import it into Normyn and verify the import.
• Bank and card accounts: through our bank data provider (such as Plaid), account names, balances, and transaction history for accounts you connect. We do not receive or store your bank login credentials.
• Payment processors, payroll, and tax providers: transaction, payout, fee, and related data from services you connect.

Information collected automatically

• Device and usage data: IP address, browser and device type, pages and features used, and timestamps.
• Security and audit logs, including a record of changes made in your account.
• Cookies and similar technologies needed to keep you signed in and to understand how the Service is used. We do not use cookies for third-party targeted advertising.

2. How We Use Information

We use information to:

• provide, operate, and maintain the Service, including importing, organizing, and reporting on your data;
• power AI Features that suggest categories, extract information from documents, match records, and answer questions about your data;
• secure the Service, prevent fraud and abuse, and maintain audit trails;
• provide support and communicate with you about your account, updates, and security;
• process payments when paid plans are offered;
• comply with legal obligations and enforce our Terms; and
• improve the Service. We may use Customer Data in de-identified and aggregated form to improve the Service, including our AI Features. De-identified data cannot reasonably be linked to you, your business, or any individual; we take reasonable measures to keep it that way and will not attempt to re-identify it. We do not use identifiable Customer Data to train AI models used for other customers. You may opt out in your account settings or by contacting support@normyn.com.

Data from QuickBooks Online and other Connected Services is used only to provide the Service to you. We do not sell it, use it for advertising, or use it for purposes unrelated to the Service.

3. How We Share Information

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

We share information only as follows:

• Service providers that help us operate the Service under contracts requiring them to protect the information and use it only to provide services to us. Our current service providers that process Customer Data are:

We will update this list when we add or change providers that process Customer Data. We also use providers for email delivery and customer support, which receive only the information needed for those functions.

• AI providers. To deliver AI Features, relevant portions of Customer Data (for example, a document you upload or transaction descriptions) are sent to third-party AI model providers for processing. Our AI provider, Anthropic, processes this data under commercial terms that prohibit it from training its models on the content we send.
• Connected Services, at your direction — for example, when you send an invoice through a payment processor.
• Users you authorize — such as teammates, accountants, or bookkeepers you invite to your company.
• Legal and safety reasons — to comply with law, legal process, or government requests; to protect the rights, property, or safety of Normyn, our users, or others; or to investigate fraud or security issues.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Privacy Policy's protections.
• With your consent.

4. Data Security

We use administrative, technical, and physical safeguards designed to protect information, including encryption in transit and at rest, access controls that separate each company's data, and multi-factor authentication for user accounts. No system is completely secure; if we learn of a security incident affecting your information, we will notify you as required by law.

5. Data Retention

• We keep Customer Data for as long as your account is active, because accounting records must remain available to you.
• If your account is closed, you will have 60 days to export your data. We then delete Customer Data from active systems within a reasonable time and from backups on their normal rotation schedule, unless we must retain it to comply with law or resolve disputes.
• We keep account information and security logs as long as needed for the purposes described in this policy or as required by law.

6. Disconnecting Connected Services

You can disconnect QuickBooks Online or any other Connected Service at any time from your Normyn settings (Settings → Connections) or from the provider's own settings. When you disconnect, Normyn stops accessing that service. Data already imported stays in your Normyn account unless you delete it or close your account.

7. Your Choices and Rights

• Access, correction, export, and deletion. You can view, correct, and export most information directly in the Service. You can request deletion of your account by contacting us.
• Marketing emails. You can unsubscribe from marketing emails at any time using the link in the email. We will still send service and security messages.
• State privacy rights. Depending on where you live, you may have rights under state privacy laws, such as the right to know what personal information we hold, to request its correction or deletion, and to appeal a decision about your request. To exercise these rights, contact us at support@normyn.com. We will verify your request and respond as required by applicable law. We will not discriminate against you for exercising your rights.
• Customer Data about others. If you are an employee, customer, or vendor of a business that uses Normyn and want to exercise rights over information that business stores in Normyn, please contact that business. We will assist them in responding.

8. Children

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 18.

9. Where We Process Data

Normyn is based in the United States, and information is processed and stored in the United States.

10. Changes to This Policy

We may update this Privacy Policy. If changes are material, we will notify you by email or in the Service before they take effect. The "Last updated" date shows when this policy last changed.

11. Contact Us

Normyn LLC
3 Mariposa Pkwy W
Boerne, TX 78006
support@normyn.com