Privacy Policy

1. Who We Are

Normalize is a data normalization tool that transforms raw tabular files — CSV, Excel, and JSON — into typed, validated, reproducible analytical datasets. This Privacy Policy explains how we handle data when you use the service.

2. What Data We Collect

2.1 Files You Upload

When you use Normalize, you upload a source file. That file is stored ephemerally on Cloudflare R2 (EU region) solely to make it available to the processing backend. Normalize samples the file to infer column types, formats, and null tokens, and presents this as a suggestion for you to review. You confirm or adjust the configuration per column, then set your output preferences before the normalization runs. Once your output is ready, the source file is deleted immediately. We do not read, analyze, index, or retain file contents beyond what is needed to execute the workflow you initiated. The engine is content-blind — it works from structure and type metadata, not from the semantic values in your data.

2.2 Normalized Output

The normalized output artifacts (normalized dataset (in the format you selected), trace file, and manifest) are stored on Cloudflare R2 for a maximum of 1 hour so you can download your results. After 1 hour, all artifacts are automatically and permanently deleted at the infrastructure level.

2.3 Server Logs

Standard server request logs (IP address, timestamp, HTTP method, response code) may be retained briefly for security and abuse-prevention purposes. These are not used for analytics, profiling, or any purpose beyond operating the service.

2.4 Contact Form

If you contact us via our contact form, we collect the information you provide (name, email address, message) in order to respond to your inquiry. This data is not shared with third parties and is retained only as long as necessary to resolve your inquiry.

3. What We Do Not Collect

• No user accounts or profiles — Normalize is currently anonymous.
• No cookies beyond what is technically necessary for the service to function.
• No third-party analytics, tracking pixels, or advertising tools.
• No persistent storage of your files or results beyond the 1-hour window.
• No data about the content of your files — only structural metadata needed to normalize it.

4. How We Use Your Data

The only purposes for which data is used:

• Executing the normalization workflow on your uploaded file.
• Delivering the processed output artifacts for download.
• Maintaining service security and preventing abuse.
• Responding to inquiries submitted through the contact form.

5. Legal Basis for Processing

• Contract performance (Art. 6(1)(b) GDPR): Processing your file to deliver the normalization output you requested.
• Legitimate interests (Art. 6(1)(f) GDPR): Retaining minimal server logs for security and abuse prevention.

6. Data Retention

• Source files: Deleted immediately after normalization completes.
• Output artifacts: Automatically deleted after 1 hour.
• Server logs: Retained briefly for security purposes, not used for analytics.
• Contact form submissions: Retained only as long as needed to resolve your inquiry.

7. Infrastructure and Data Residency

All data remains within the European Economic Area at all times. The processing backend runs on Microsoft Azure (EU region) and file storage is on Cloudflare R2 (EU region). No data is transferred outside the EEA.

8. Third Parties and Sub-Processors

We do not sell, rent, or share your data with third parties for commercial purposes. The only sub-processors involved in the normalization workflow are:

• Microsoft Azure — backend compute (EU region), subject to a GDPR-compliant Data Processing Agreement.
• Cloudflare R2 — ephemeral file storage (EU region), subject to a GDPR-compliant Data Processing Agreement.

9. Open Source Engine

The normalization engine is fully open source and available at github.com/htvictoire/normalize. You can inspect exactly what the engine does with your file and verify the content-blind processing claims made in this policy.

10. Your Rights

Because Normalize does not retain personal data about you beyond your active session, most data subject rights are satisfied by design. If you have a specific concern or believe data about you is being held contrary to what is described here, contact us via our contact form. You also have the right to lodge a complaint with your local data protection supervisory authority.

11. Changes to This Policy

This policy will be updated when the service changes — particularly when user accounts are introduced. Material changes will be communicated prominently before they take effect.