Legal

Privacy Policy

Last updated: March 2026

The Nora Foundation is a Minnesota nonprofit corporation. determination is pending with the IRS. This policy describes how we collect, use, and protect information when you use our website and services. The Nora Foundation is a nonprofit organization, not a law firm. Nothing here is legal advice or an attorney-client relationship. AI-assisted and automated outputs can be wrong. Verify sources and involve qualified counsel before relying on anything in filings or court.

Information We Collect

We collect information you provide directly: name, email address, and any content you submit through our forms (volunteer applications, partner inquiries, contact messages, newsletter signups, and research queries). Donation transactions are processed by Stripe — we receive confirmation data including amount and email, but never your full card number.

We also collect usage data through PostHog analytics: pages visited, interactions, and general session data. This helps us improve the platform. Analytics are proxied through our own domain to avoid third-party tracking.

How We Use Your Information

Information you provide is used to respond to your inquiry, process your application or donation, send you relevant updates if you opted in, and improve our services. We do not sell, rent, or share your personal information with third parties for marketing purposes.

Research queries you submit to our AI tools are stored to display your history and to improve the service. They are not shared with third parties except as necessary to fulfill the request (i.e., transmitted to Anthropic's API for processing).

Third-Party Services

We use the following third-party services, each governed by their own privacy policies:

• Stripe — Payment processing. Stripe is PCI-compliant. We do not store card data.
• Supabase — File storage for uploaded documents and images.
• PostHog — Analytics and session recording (proxied through our domain).
• Anthropic — AI processing for legal research queries.
• Resend — Transactional email delivery.

Data Retention & Deletion

We retain your information for as long as necessary to provide our services and comply with legal obligations. You may request deletion of your personal data at any time by contacting us at hello@norafoundation.org. We will respond within 30 days.

Cookies

We use cookies for session management (to keep you logged in) and for PostHog analytics. You can disable cookies in your browser settings, but this may affect functionality.

Security

We use industry-standard security practices including encrypted connections (HTTPS), hashed passwords, and access controls. No system is perfectly secure; if you discover a vulnerability, please contact us at hello@norafoundation.org.

Contact

For privacy-related questions or requests, contact us at:
hello@norafoundation.org
Nora Foundation — Minnesota nonprofit corporation. determination is pending with the IRS.