These terms govern Norn Cloud at app.norn.so and the Norn website at norn.so. Norn is operated by Vlad Gorokhov, Praça de Bocage 67, 2900-276 Setúbal, Portugal ("Norn", "we", "us"). You can contact us at privacy@norn.so about these terms, privacy, or data processing, and at content@norn.so about the service and storage requests.
1. Your agreement with us
By accepting these terms when creating an account, or otherwise expressly agreeing to them, you enter into an agreement with us. If you act for an organisation, you must have authority to bind it, and "you" means that organisation where appropriate. You must have the legal capacity to enter this agreement. You remain responsible for the people and agents you authorise to use your workspace.
The Privacy Policy explains how personal data is handled; accepting these terms is not consent to optional processing. The Data Processing Agreement forms part of this agreement where we process personal data on your behalf. A separately agreed written agreement takes priority for the matters it expressly covers, subject to the DPA's rules on data protection.
2. The free Cloud service
Norn is a project management service for issues, projects, collaboration, integrations, and work delegated to agents. Norn Cloud is currently free, with a 1 GB storage limit. There are no paid Cloud plans, automatic subscriptions, or self-service paid upgrades. If you need more storage, email content@norn.so. A request does not create a purchase or guarantee additional capacity; any different arrangement must be agreed separately.
Storage, upload, rate, and execution limits protect the service and other users. You must not circumvent them. The service may refuse an operation that exceeds a limit. Norn does not provide AI subscriptions, model credits, or machines for running your coding agents. Your AI providers, hosting providers, and other connected services may charge you under their own agreements.
There is no Norn subscription to cancel and no Norn subscription payment to refund. You can stop using the service at any time. We will not start charging you automatically: any future paid offer will require a separate, express agreement to its price and terms. Nothing here limits a refund or other remedy required by law.
3. Accounts and workspace administration
Provide accurate account details and keep your credentials, API tokens, provider keys, and runner credentials secure. Notify us promptly if you suspect unauthorised access. Use the available controls to revoke access that is no longer needed.
Workspace administrators control membership, permissions, integrations, and workspace settings, including deletion. If you join someone else's workspace, that organisation or person controls the workspace and its content. Access can change or end at their direction. Do not use a workspace for information you are not authorised to share with its members or connected systems.
4. Your content and our permission to process it
You retain your rights in the content you submit, including issue descriptions, comments, files, source material, instructions, and execution output. You grant us only the permission needed to host, copy, transmit, display, and otherwise process that content to provide, secure, maintain, and support the service in accordance with your instructions and this agreement. This includes sending it to recipients and integrations you authorise.
You are responsible for having the rights and lawful basis needed to submit and use the content, including personal data about other people. Do not submit data subject to special legal handling requirements unless you have established that the service and your configuration meet those requirements. The service is not designed as a repository for special-category personal data or criminal-offence records.
We do not sell customer data, use it for advertising, or use it to train AI models. The permission above does not authorise those uses. Your chosen third-party services are subject to their own agreements, which you should review before connecting them.
5. AI, integrations, runners, and shared previews
AI features use the provider credentials and endpoint you configure. When you use them, instructions, conversation content, relevant workspace information, and tool results can be sent to that provider. Other integrations can read or receive data within the permissions you grant. You instruct us to make these exchanges when you configure or use those features. You are responsible for your provider accounts and their applicable terms, costs, and data handling settings.
Runners operate on machines supplied and controlled by you or your organisation. They can execute code and tools, access connected repositories and services, and send execution information back to Norn. Choose permissions, credentials, and isolation appropriate to the work. Review agent output and proposed changes before relying on or deploying them. AI can make mistakes, produce insecure or infringing material, or take an unintended action; an approval control does not replace your review.
A preview you share by link can be reached by people who have that link, subject to its passcode and expiry settings. Check the content before sharing it and revoke access when it is no longer needed. Removing access in Norn does not recall copies already received by another person or service.
6. Acceptable use
- Use the service lawfully and respect other people's privacy and intellectual property.
- Do not distribute malware, send spam, commit fraud, or use the service to harass people.
- Do not access accounts, workspaces, systems, or data without authorisation.
- Do not bypass security or usage limits, disrupt the service, or interfere with other users.
- Do not use connected agents or runners to do something these terms prohibit you from doing.
Report suspected vulnerabilities privately to privacy@norn.so. These terms do not grant permission to test against other users' data or disrupt production systems.
7. Availability and changes
We maintain and update the service, but do not promise uninterrupted access, error-free operation, a particular support response time, or a service-level agreement. Maintenance, failures, and dependencies can affect availability. Keep your own copies of information you cannot afford to lose. This does not remove our duties under applicable law or the DPA.
We may change features or limits for security, legal, technical, or operational reasons. Where a change materially reduces your use of the service, we will give reasonable advance notice and an opportunity to retrieve your content, unless an urgent security or legal reason prevents that. Any mandatory consumer rights concerning service changes remain unaffected.
8. Suspension, termination, and deletion
We may restrict or suspend access when reasonably necessary to address a breach of these terms, protect the service or other people, or comply with law. Where practicable, we will explain the reason and allow you to resolve it. We may terminate access for a serious or unresolved breach. If we discontinue the free service for operational reasons, we will give reasonable advance notice and an opportunity to retrieve your content where legally and technically possible.
Deleting your account removes its profile information and access, but does not automatically delete content you contributed to someone else's workspace. Workspace deletion is a separate administrator action with a recovery period shown in the service before permanent purge. Transfer administration or deal with a workspace you solely administer before deleting your account. The Privacy Policy and DPA explain retention, backups, and deletion requests.
To request a copy of your personal data or help returning workspace data before deletion, contact privacy@norn.so. Request this before the workspace is purged. We do not promise recovery after permanent deletion.
9. Open-source and self-hosted software
Norn's open-source software is distributed under its AGPL-3.0 licence. That licence, and the licences of included third-party components, govern your rights to use, study, modify, and redistribute the software. These Cloud terms do not replace or restrict those rights.
If you run Norn yourself, you control that installation, its infrastructure, security, backups, and data processing. These terms do not create a managed hosting or support obligation for your installation. Use of our website or any separately agreed service is still governed by the terms applicable to that service.
10. Responsibility and legal rights
Each party is responsible for its obligations under this agreement and applicable law. We do not warrant that Norn will meet every particular requirement or that third-party services or AI output will be accurate or available. These statements apply only to the extent permitted by law. They do not exclude liability for fraud, wilful misconduct, gross negligence, or anything that cannot lawfully be excluded, and do not limit statutory data protection rights or remedies.
If you are a consumer, you retain all mandatory protections, including applicable rights relating to conformity, remedies, and changes to digital services. The fact that Norn Cloud is free does not by itself remove those rights.
11. Changes to these terms and disputes
We will publish revisions with an updated date and notify account holders of material changes before they take effect, except where an immediate change is required by law or security. We will obtain renewed agreement where required. Changes do not retroactively remove accrued rights. You may stop using the service if you do not agree to a revision.
Portuguese law governs this agreement. This choice does not deprive consumers of mandatory protections under the law of their habitual residence or restrict the courts they are entitled to use. Disputes may be brought before the courts competent under applicable law. Please contact us first if you want to try to resolve a concern informally; doing so is not a condition of exercising your legal rights.