This policy covers norlyst.com and the Norlyst service at app.norlyst.com, with its apps and its browser extensions. The organization responsible for your personal information is Norlyst, reachable at [email protected].
The person in charge of the protection of personal information is Maxime Francoeur, Founder, who can be reached at [email protected].
To run the service you asked for: keep your workspace and sync it across your devices, admit your account, call the services you use through Norlyst, keep the service secure, answer you when you write, and meet its legal obligations. Norlyst does not sell personal information, does not use it for advertising, and does not use your content to train or improve anything.
In a Google Cloud project operated by Norlyst: Firestore in the us-central1 region and Cloud Storage in the us-east1 region, in the United States, outside Québec and Canada. Traffic to norlyst.com and app.norlyst.com passes through Cloudflare. Your information may therefore be accessible under the laws of the United States.
If you connect OneDrive, your documents, note images and clips are kept in your own OneDrive, with a daily export of the workspace; Norlyst keeps their catalog and a display copy of each image.
You can connect an AI assistant (Claude, ChatGPT, Claude Code or Codex) to your workspace. Nothing is shared until you approve the connection on a Norlyst page. A connected assistant receives what it asks for through the Norlyst connector, as text: your Research profiles and notes, Divers Notes, TODO, situation ideas, merger arbitrage deals, your People and Companies to Avoid registries (your own judgments on real people and companies, with the basis of each motive), your imported financial reports, your LLM Rules and the full reports of your imported analyses, and, for a profile, its SEC filings and the text of the files in its Documents tab.
It can add profiles, notes, links, ideas, TODO, decisions and deals, import analyses into a profile, and modify what you wrote; it can never delete anything. For 10 days, the values an assistant replaced are kept and can be put back, as long as nobody has changed them since. What the assistant receives is then handled by its provider under that provider's own terms and privacy policy.
Analyses run in your assistant, not at Norlyst: Norlyst runs no model and holds no model key. When your assistant imports an analysis, Norlyst stores it like one you paste: its conclusions in the profile, and its full report as a separate document beside the profile, deleted with its version or the profile. You can revoke a connection at any time in Settings › AI assistants; it also ends after 30 days without use, when your access is withdrawn and when your account is closed.
No usage analytics, no advertising identifiers, no tracking pixels, no crash reports. Norlyst never sends your content to a language model on its own initiative: only an assistant you connect receives what it asks for.
From the app, you can export every profile as structured text, retrieve every document you attached, correct anything by editing it, withdraw a consent you gave (disconnect OneDrive, revoke an assistant, clear a saved session), and delete the account and its data.
You can also write to [email protected] to access the personal information Norlyst holds about you, to receive it in a structured, commonly used technological format, or to have it corrected or deleted. You get an answer within 30 days. If you are not satisfied with the answer, you can file a complaint with the Commission d'accès à l'information du Québec or with the Office of the Privacy Commissioner of Canada.
If an incident affecting your personal information presents a risk of serious injury, Norlyst notifies the Commission d'accès à l'information and the people concerned, and records every incident in its register.
norlyst.com sets no cookie and has no form; its fonts load from Google Fonts. The app keeps your session and your preferences in your browser's storage, which it needs to work.
Changes are dated at the top of this page. Before a material change takes effect, the founder writes to every admitted account by email. Questions: [email protected].
