Privacy Policy

1. Introduction

Norfolk AI, LLC ("Norfolk AI," "we," "us," or "our") operates the proposal and marketing website located at https://norfolkai.vip (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit the Site or interact with our proposal materials.

By accessing the Site you agree to the practices described in this Policy. If you do not agree, please discontinue use of the Site immediately.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily submit, including:

• Name, job title, company name, and business email address when you submit a contact or pilot-request form.
• Messages, questions, or feedback you send through the Marcela AI assistant or any contact channel.
• Email address provided when downloading the PDF version of this proposal.

2.2 Information Collected Automatically

When you visit the Site, our servers and analytics tools automatically collect:

• IP address, approximate geographic location (city/country), and Internet Service Provider.
• Browser type, operating system, device type, and screen resolution.
• Pages visited, sections viewed, time spent on each section, and scroll depth.
• Referral URL and search terms that directed you to the Site.
• Timestamps of visits and interactions.

2.3 Cookies and Similar Technologies

We use session cookies and local storage to maintain your browsing session and remember your preferences (such as sidebar state). We do not use third-party advertising cookies. You may disable cookies in your browser settings; however, some Site features may not function correctly without them.

3. How We Use Your Information

We use the information collected for the following purposes:

• To deliver, operate, and improve the Site and proposal materials.
• To respond to inquiries, schedule discovery calls, and progress commercial discussions.
• To send the PDF proposal or other requested materials to your email address.
• To analyze engagement with proposal sections and optimize content for future prospects.
• To detect, prevent, and address technical issues, fraud, or unauthorized access.
• To comply with applicable legal obligations.

4. Legal Basis for Processing (GDPR / LGPD)

If you are located in the European Economic Area (EEA), the United Kingdom, or Brazil, our legal bases for processing your personal data are:

• Legitimate interests — analyzing proposal engagement and improving our commercial materials.
• Contract performance — processing your information to respond to a request or fulfill a commercial inquiry.
• Consent — where you have explicitly opted in (e.g., subscribing to communications).
• Legal obligation — where processing is required by applicable law.

5. Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Service providers who assist us in operating the Site (e.g., cloud hosting, email delivery, analytics) under contractual data-processing agreements.
• Professional advisors (lawyers, accountants) under confidentiality obligations.
• Law enforcement or regulatory authorities when required by law or to protect our legal rights.
• A successor entity in the event of a merger, acquisition, or asset sale, subject to the same privacy commitments.

6. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy, or as required by law. Proposal engagement analytics are retained for up to 24 months. Contact form submissions are retained for up to 36 months or until the commercial relationship concludes. You may request earlier deletion at any time (see Section 8).

7. Data Security

We implement industry-standard technical and organizational measures to protect your information, including TLS encryption in transit, access controls, and regular security reviews. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security but commit to prompt notification in the event of a breach affecting your rights.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data ('right to be forgotten').
• Restriction — request that we limit processing of your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

9. International Data Transfers

Norfolk AI is headquartered in Austin, Texas, USA. If you are located outside the United States, your information may be transferred to and processed in the United States or other countries. Where required, we rely on Standard Contractual Clauses or equivalent mechanisms to ensure adequate protection.

10. Children's Privacy

The Site is intended for business professionals and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately.

11. Third-Party Links

The Site may contain links to third-party websites or resources. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective Date" at the top of this page reflects the date of the most recent revision. Continued use of the Site after any changes constitutes your acceptance of the updated Policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy, please contact: