Legal
Privacy policy
Last updated
Draft. Under review before publication.
North Arm AI publishes this website to describe North Arm and to take demo requests. This policy explains what happens to information about you while you read it and if you ask for a demo. The short version: the site sets no cookies, runs no analytics, and has one form. Apart from what you type into that form, the only parties that see anything about your visit are Vercel, which hosts the site, and Google, which serves its fonts. North Arm AI is the controller for the data this policy describes.
What this site collects
This site is a set of pages to read and one form. It has no accounts, no sign-in, and no comment box. Unless you request a demo, we do not ask for your name, your email address, or anything else about you.
Two things happen in the background when a page loads, and each involves a third party: Vercel records the request that served the page, and your browser fetches the site's fonts from Google. The next two sections describe both. Where the GDPR applies, our basis for each is our legitimate interest in keeping the site available, secure, and consistent to read.
We do not sell data, we do not share it for advertising, and we do not use advertising trackers.
Server logs
Vercel hosts this site. When your browser requests a page, Vercel's servers record the request the way most web servers do: your IP address, the page you asked for, the time, the address of the page that linked you here if your browser sends one, and the browser and device type it reports.
We use those logs to keep the site running and to investigate a fault or abuse, and for nothing else. We add no logging of our own. Vercel keeps the logs for the retention period its platform sets, and we do not export them or keep a separate copy.
Fonts and third-party requests
The typefaces on this site load from Google Fonts. To fetch them, your browser sends a request to Google's servers at fonts.googleapis.com and fonts.gstatic.com. That request carries your IP address and the standard headers your browser attaches, such as its type and the address of the page that asked for the font. Google receives it directly; it does not pass through us, and we do not see it.
Google's privacy policy governs what Google does with that request. We load fonts this way so the site renders the same on every device. If you block third-party requests in your browser, the site still works and falls back to a typeface installed on your device.
No other third-party script, pixel, or embed loads on this site. If we add a scheduling embed to the demo form, we will name its provider here first.
The demo request form
The demo form asks for your name, your work email address, your firm, and, if you want to add one, a note about what you are working on. We accept personal email domains. The form also contains a hidden field that people never see; if software fills it in, we treat the request as spam and drop it without sending it.
When you submit the form, our site sends the four fields to us as one plain-text email through Resend, an email delivery service. Resend processes the message only to deliver it, under its own privacy policy, and we do not use Resend for anything else. The site stores nothing you enter, writes nothing to a database, and shares the request with nobody but us and Resend.
We use the request to reply to you and to arrange the demo, and for nothing else. We do not add you to a mailing list, because we do not keep one. Where the GDPR applies, our basis is the steps you asked us to take before entering into a contract, and our legitimate interest in answering you.
We keep the request in our mailbox for as long as the conversation it started is open, and we delete it when the conversation closes or when you ask us to, whichever comes first.
Your rights
Subject to the law that applies to you, including the GDPR where it applies, you have the right to:
- Access the personal data we hold about you.
- Correct it if it is wrong.
- Delete it, sometimes called the right to erasure.
- Export it in a portable form.
- Object to further contact and withdraw any consent you gave earlier.
Reading the site produces nothing about you beyond the request logs described above, which we do not use to identify anyone, so in most cases there is nothing for us to act on. If you have requested a demo, one message to the address below covers what you entered. Withdrawing consent does not undo processing that happened before you withdrew it.
Changes to this policy
We will update this page when what the site does changes, and we will change the date at the top when we do. The version published here is the one that applies.
Contact
For questions about this policy, or to exercise any of the rights above, email us at [contact email].