Privacy Policy
Effective Date: September 23, 2026
TYPENORM ("TYPENORM", "we", "us") operates typenorm.com and the services available there. This policy explains what personal data we collect, why, who we share it with, and the rights you have. It applies to visitors, account holders and people whose data appears in content on the site.
1. Data we collect
- Account data. When you sign up we collect your email address and, if you sign in with Google, the name and identifier your Google account provides. We do not receive your Google password.
- Things you submit. URLs you ask us to capture and analyse; images and text you upload to testing and generator tools; survey and test material; project, file and canvas content; feature requests, votes and comments; audit-request form entries (name, email, company or website, project details).
- Generated data. Captures, scores, findings, generated text and reports produced from what you submit, and the credits, plan and usage records tied to your account.
- Usage data. Pages visited, actions taken, approximate location derived from IP address, browser and device type, referrer, and error logs. We use cookies and similar technologies as described in the Cookie Policy.
- Communications. Emails you send us and the alert emails we send you.
We do not collect payment card numbers. Where a purchase is offered, the payment processor collects them under its own policy.
2. Why we use it
- To provide the services you use: create and run accounts, capture and analyse the URLs you submit, generate and store reports, send monitor alerts, meter credits.
- To publish what you choose to publish: public and unlisted reports, gallery listings, Collective requests.
- To respond to you and to deliver audit services you request.
- To keep the services secure, prevent abuse and enforce our Terms.
- To understand how the site is used and improve it, using aggregated analytics.
- To meet legal obligations.
Under the Brazilian General Data Protection Law (LGPD) and, where it applies, the GDPR, we rely on: performance of a contract (providing the services), our legitimate interests (security, analytics, improving the services, publishing research), your consent (non-essential cookies, marketing emails), and legal obligation.
3. Personal data of other people
Two kinds of content on the site may contain personal data of people who are not our users.
- Catalog screenshots. We capture third-party product interfaces from public pages without signing in and try to avoid capturing anyone's personal data. A public page may still show a name, photo or comment. We publish these captures for research and commentary under our legitimate interest, as described in the Content & Rights Policy.
- User-submitted URLs. When a user asks us to capture a page, the capture may show personal data present on that page. Any publicly reachable page may be submitted; the capture is made without signing in and shows only what that page shows to any visitor. We store the capture to render the user's report; it is visible only to the user unless the user publishes the report.
If you appear in content on the site and want it edited or removed, contact us at hello@typenorm.com. You can exercise the rights in section 9 for any of your data we hold.
4. Who we share it with
We do not sell personal data. We share it with:
- Service providers who process it for us under contract: hosting and content delivery, database and file storage, authentication, email delivery, analytics, error monitoring, and AI model providers (section 5). Our current providers include Vercel, Google Cloud and Firebase, Google Analytics, Resend and OpenRouter.
- The public, for content you choose to publish.
- Authorities or other parties when the law requires it, to enforce our Terms, or to protect rights, safety or property.
- A successor if TYPENORM is acquired or merged, under the same protections.
5. AI-assisted processing
Some tools generate or score content using third-party AI models reached through an API gateway. The inputs you provide to those tools, including captured screenshots, are sent to the model provider that serves the request. Requests are routed through OpenRouter to one of several model providers. We do not yet limit routing to providers that keep no inputs, so the provider that serves a request may retain or use your input under its own terms. We keep the outputs with your report. Do not enter information you are not allowed to share with a third-party service provider.
6. International transfers
Our providers process data mainly in the United States and the European Union. When we transfer personal data outside Brazil, or outside the EEA for people in Europe, we rely on the transfer mechanisms permitted by the LGPD and the GDPR, including standard contractual clauses, and on the provider's own safeguards.
7. Retention
Account data is kept while your account is open and deleted within a reasonable period after you close it. Reports, captures and uploads are kept until you delete them or close your account; deleting a report removes its capture. Usage, metering and security logs are kept for a limited period for the purposes in section 2. Published content that others have already accessed may persist in caches or copies we do not control. We may keep data longer when the law requires it or to defend a claim.
8. Security
We use technical and organisational measures appropriate to the risk, including encrypted connections, access controls, and separation of production and development environments. No system is perfectly secure; if we learn of a breach affecting your data we will notify you and the competent authority as the law requires.
9. Your rights
You may ask us to confirm whether we process your data, to access it, correct it, delete it, port it, restrict or object to its processing, and to withdraw consent where processing is based on consent. You may also complain to the data-protection authority where you live; in Brazil that is the ANPD. To exercise a right, email hello@typenorm.com from the address on your account, or with enough detail for us to identify you. We answer within the time the law sets.
10. Children
The services are not directed at people under 18, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
11. Cookies
See the Cookie Policy for the cookies we use and how to manage them.
12. Changes
We may update this policy. The current version is always at this address with its effective date; material changes will be announced on the site or by email to account holders.