Privacy Policy | Northern Logic

Who we are

This website is operated by Northern Logic (“Northern Logic,” “we,” “us,” or “our”). You can reach us about privacy questions at hello@northernlogic.ai.

Northern Logic provides business-focused AI assessment, implementation, and Managed AI Operations services. This policy describes privacy practices for northernlogic.ai and related public website features, not the separate contractual data terms that may apply once you engage us for client work.

What this policy covers

This Privacy Policy applies to personal information we collect when you:

visit or browse this website;
send a message through our contact form;
book a free Workflow and AI Assessment or other scheduling link we publish;
use our live chat widget; or
email us at an address published on this site.

It does not replace a signed services agreement, statement of work, data processing agreement, or other written engagement terms. Client projects may involve additional systems, access controls, and data-handling commitments documented separately. See also our Security & Data page for how we approach scoped access and governance in delivery work.

Information we collect

We collect only what we need to operate the site, respond to inquiries, schedule conversations, and protect the service from abuse. We do not operate advertising pixels or third-party marketing trackers on this version of the site.

Information you provide

Contact form: name, email address, optional company name, and message content.
Scheduling: name, email address, and any other details you enter when booking time (for example, company name or notes about the problem you want to discuss).
Live chat: message content and any name, email, or other contact details you choose to share in the conversation.
Email and other direct messages: whatever you include when you write to us.

Please do not submit sensitive personal information (such as government ID numbers, health details, financial account numbers, or credentials) through public website forms or chat unless we specifically ask for something in a controlled channel.

Information collected automatically

Technical request data: IP address, browser and device information, approximate location derived from IP, requested pages, timestamps, and similar server or edge-network logs needed to deliver, secure, and troubleshoot the website.
Security and abuse signals: information used by bot protection (Cloudflare Turnstile) and hosting security controls to distinguish legitimate traffic from automated abuse.
Chat and widget technical data: if you use live chat, our chat provider may process device/browser data, cookies or local storage needed to run the widget, and related session information.

Information from service providers

Processors that help us run the website may generate operational data (for example, email delivery status, scheduling confirmation metadata, or security verification results). We use that information to complete the request you started and keep the site reliable.

How we use information

We use personal information to:

operate, maintain, and improve the website;
respond to questions, assessment requests, and other messages;
schedule and prepare for conversations you request;
provide live chat support and keep a record of the discussion;
protect the website, users, and our systems from fraud and abuse;
comply with law, enforce our terms, and defend legal claims; and
communicate about services you asked about, including follow-up related to an assessment or proposal.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

Legal bases (EEA/UK visitors)

If European Union, European Economic Area, or United Kingdom data protection law applies to processing about you, we rely on one or more of the following legal bases:

Legitimate interests: for example, securing the website, responding to business inquiries, keeping basic operational records, and improving site reliability, where those interests are not overridden by your rights.
Contract or steps prior to contract: when you ask us to schedule a conversation or take steps toward an engagement.
Consent: where required for non-essential cookies, certain chat storage technologies, or optional communications. You can withdraw consent where processing is based on consent.
Legal obligation: when we must retain or disclose information to meet applicable law.

Cookies and similar technologies

This website uses a limited set of cookies and similar technologies:

Strictly necessary / security: technologies needed to deliver the site, maintain basic functionality, and protect forms (including Cloudflare Turnstile where the contact form is active).
Live chat: Tawk.to may set cookies or use local storage so the chat widget can function, remember a session, and deliver your messages. Where required, chat-related storage should only begin after you accept the chat provider’s consent prompt.
Scheduling embed: Cal.com may use cookies or similar technologies necessary to display availability and complete a booking.

We have not added marketing cookies, advertising pixels, or third-party ad networks to this site. You can control cookies through your browser settings. Blocking some cookies may limit chat, booking, or form features.

If you are in a region that requires consent before non-essential storage (including parts of the EU/UK under the ePrivacy rules that sit alongside the GDPR), use the consent options presented by the relevant widget and your browser controls. Enabling Tawk.to’s visitor consent form in the chat configuration is recommended before serving EU visitors.

Live chat

We use Tawk.to to provide optional live chat with Northern Logic. When chat is available and you open or use it:

Tawk.to may process technical data needed to run the widget, plus any message or contact details you provide;
we use the conversation to answer your question and, where relevant, continue the discussion by email or scheduling;
chat content is not a substitute for a written services agreement; and
you should avoid sharing passwords, secrets, or sensitive personal data in chat.

Tawk.to acts as a service provider/processor for chat functionality. Review the Tawk.to Privacy Policy for its practices. Northern Logic configures chat for human conversation with the founder team; do not treat chat transcripts as legal advice or as binding commercial commitments.

Scheduling and assessments

Booking a free Workflow and AI Assessment (or similar published event type) is handled through Cal.com embeds or links. Cal.com processes the information you submit to create the appointment and send confirmations or reminders. Northern Logic receives booking details so we can prepare for and attend the conversation.

See the Cal.com Privacy Policy for processor details. Completing a booking does not create a paid services contract unless and until we agree to engagement terms in writing.

Contact form and bot protection

Messages submitted through the website contact form are sent to Northern Logic by email using Resend as our email delivery provider. We use the information to reply to you, typically within one business day.

The form uses Cloudflare Turnstile to reduce spam and automated abuse. Turnstile may process technical signals about your browser session for verification. A hidden honeypot field and basic timing checks may also be used to filter bots; those fields are not intended for human use.

We share personal information only as needed to run the website and respond to you, or when the law requires it. Categories of recipients include:

Hosting and security: Cloudflare (website delivery, security, and Turnstile bot protection).
Email delivery: Resend (contact form messages).
Live chat: Tawk.to.
Scheduling: Cal.com.
Professional advisors and authorities: if needed to comply with law, protect rights and safety, or respond to lawful requests.
Business transfers: if we explore or complete a merger, acquisition, or asset sale, information may transfer as part of that transaction under appropriate safeguards.

We do not sell personal information. We do not share personal information with third parties for their independent marketing.

International transfers

Northern Logic operates primarily in the United States. Our service providers may process data in the United States or other countries. If you contact us from the EEA, UK, or another region with data-transfer restrictions, your information may be transferred to countries that do not provide the same legal protections as your home country. Where required, we rely on appropriate transfer mechanisms used by our providers (such as standard contractual clauses) and limit what we collect on the public website.

How long we keep information

We retain personal information only as long as reasonably necessary for:

responding to your request and any related follow-up;
operating and securing the website;
maintaining ordinary business records; and
meeting legal, tax, accounting, or dispute-related obligations.

Contact form emails and chat transcripts are typically kept for the period needed to complete the conversation and maintain a normal business record, then deleted or archived according to our operational practices unless a longer retention period is required. Hosting and security logs are retained according to our providers’ standard retention windows and our security needs.

Security

We use administrative, technical, and organizational measures appropriate to the nature of a public marketing website, such as HTTPS, access controls on business accounts, and bot protection on public forms. No method of transmission or storage is completely secure. For how we approach security in client AI implementations, see Security & Data.

Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection related to personal information we hold about you, and to withdraw consent where processing is based on consent.

To exercise privacy rights, email hello@northernlogic.ai with “Privacy request” in the subject line and enough detail for us to understand and verify the request. We may need to confirm your identity before fulfilling it. You may also have the right to lodge a complaint with a supervisory authority in your country or state of residence.

If GDPR or UK GDPR applies to you, those rights generally include access, rectification, erasure, restriction, data portability, and objection, as well as the right not to be subject to certain solely automated decisions with legal or similarly significant effects (this website does not use such automated decision-making about you).

California residents

The California Consumer Privacy Act (CCPA), as amended by the CPRA, applies to “businesses” that meet specific thresholds (for example, revenue or volume of California personal information processed). Northern Logic may not currently meet those statutory thresholds. Even so, we aim to provide clear notice about website data practices and will respond in good faith to privacy requests from California residents.

In the preceding 12 months, depending on how you use the site, we may have collected the following categories of personal information:

Identifiers (such as name, email address, IP address)
Commercial or inquiry information (such as messages about services you are considering)
Internet or electronic network activity (such as page requests and security logs)
Professional or employment-related information (such as company name, if you provide it)
Inferences drawn from the above only insofar as needed to respond to your request (for example, that you asked about a particular service)

We collect this information from you directly, from your device/browser, and from service providers listed above. We use it for the business purposes described in this policy. We do not sell personal information and do not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes that would require a right-to-limit notice under California law on this website.

California residents may have rights to know/access, delete, correct, and non-discrimination for exercising privacy rights. Submit requests to hello@northernlogic.ai. Authorized agents may contact us with proof of authorization. Because we do not sell or share personal information for cross-context behavioral advertising, we do not currently operate a “Do Not Sell or Share My Personal Information” opt-out link; if that changes, we will update this policy and the site.

Children

This website is directed to business audiences and is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it.

Third-party sites and services

This site may link to third-party websites or load third-party embeds (chat, scheduling, bot protection). Those services have their own privacy practices. This policy does not cover them, except to describe how we use them on northernlogic.ai.

Changes to this policy

We may update this Privacy Policy when our practices, vendors, or legal requirements change. The “Last updated” date at the top of this page will change when we do. For material changes, we may also provide additional notice on the website where appropriate. Continued use of the site after an update means the revised policy applies to later collection and use.

Contact us

Privacy questions and requests: hello@northernlogic.ai

Related pages: Terms of Use · Security & Data · Book an assessment

This policy is provided for transparency and general compliance hygiene. It is not legal advice. If you need advice about your own obligations, consult a qualified attorney in your jurisdiction.