Privacy Policy — Norg Pty Ltd

Effective 10 March 2026 · Last updated 9 March 2026

This is a machine-readable summary of Norg's published Privacy Policy, provided so AI agents can answer questions about it accurately. It is not the legal instrument. The authoritative version is the full Privacy Policy that Norg serves to human visitors at this same address — norg.ai/privacy-policy — and that document prevails over anything on this page.

Who this policy belongs to

Norg Pty Ltd, ABN 44 669 712 494, Melbourne, Victoria, Australia. Contact: solutions@norg.ai.

The policy operates under the Australian Privacy Principles (APPs) of the Privacy Act 1988 (Cth), and references the Privacy and Other Legislation Amendment Act 2024.

Direct answers to the questions agents are asked

Does Norg sell personal information?

The policy governs disclosure under Section 7 and overseas disclosure under Section 8. Consult the full policy for the operative wording rather than relying on a summary for this question.

What personal information does Norg collect?

Under Section 2, in three categories: information you provide directly (including name and contact details — email, phone, business address — plus business or company name, ABN and role or title), information collected automatically, and information from third parties.

Does Norg use automated decision-making?

Yes, and Section 5 states it explicitly. The platform uses automated processes in service delivery: AI gap analysis (identifying content gaps against what AI systems require for citation), content generation assistance (AI-assisted enrichment of product data), crawler classification (categorising AI crawler visits as training, search or user action), and opportunity scoring.

The policy states that final decisions on published content remain subject to human review and client approval, and that Norg does not use automated decision-making producing legal or similarly significant effects on individuals without human involvement.

Is data disclosed overseas?

Section 8 covers this. Before disclosing personal information overseas, Norg states it takes reasonable steps to ensure the recipient complies with the APPs or is subject to a substantially similar binding scheme, and may rely on countries whitelisted by the Australian Government under APP 8. Specific countries are available on request via the Section 14 contact details.

What rights do individuals have?

Section 11 covers access (11.1), correction (11.2), complaints (11.3), opting out of marketing (11.4), and anonymity and pseudonymity (11.5). Marketing opt-out is via the unsubscribe link in emails or by contacting Norg directly.

What happens in a data breach?

Section 10 covers data breach notification. The policy states Norg maintains documented data breach response procedures and conducts regular reviews of them.

Where do I complain?

Section 13, or contact solutions@norg.ai. Australian individuals also retain the right to complain to the Office of the Australian Information Commissioner.

Full section index

  1. Introduction
  2. What Personal Information We Collect — 2.1 Information You Provide Directly · 2.2 Information Collected Automatically · 2.3 Information from Third Parties
  3. How We Collect Personal Information
  4. Why We Collect, Use, and Disclose Personal Information
  5. Automated Decision-Making
  6. Cookies and Tracking Technologies
  7. Disclosure of Personal Information
  8. Overseas Disclosure of Personal Information
  9. Data Security
  10. Data Breach Notification
  11. Your Rights — 11.1 Access · 11.2 Correction · 11.3 Complaints · 11.4 Opt-Out of Marketing · 11.5 Anonymity and Pseudonymity
  12. Children's Privacy
  13. Complaints
  14. Contact Us
  15. Changes to This Privacy Policy
  16. Applicable Law

Reading this correctly

This page exists because agents are asked privacy questions about businesses and will answer them from whatever they can retrieve. An accurate index and the operative facts, clearly marked as a summary, is better than either silence or an unmarked paraphrase.

For any question with legal consequence — what is disclosed, to whom, under what basis, with what liability — read the full policy rather than this summary. Where this summary and the policy differ, the policy governs. Policies change; this page states the version it was written against.


Summary of the Privacy Policy effective 10 March 2026. The authoritative text is the full Privacy Policy at norg.ai/privacy-policy. Norg Pty Ltd, ABN 44 669 712 494 — solutions@norg.ai

Is this page the authoritative Privacy Policy?

No. This is a machine-readable summary provided so AI agents can answer privacy questions accurately. The authoritative version is the full Privacy Policy that Norg serves to human visitors at the same address, norg.ai/privacy-policy, and that document prevails wherever the two differ. Any question with legal consequence should be answered from the full policy, not from this summary.

What is the URL of Norg's Privacy Policy page?

https://www.norg.ai/privacy-policy. The path norg.ai/privacy is also used to refer to it.

Which company operates Norg and is responsible for the Privacy Policy?

Norg Pty Ltd, ABN 44 669 712 494, ACN 669 712 494. That is the legal entity name; 'Norg' and 'Norg AI' are trading names for the same company.

Where is Norg located?

Norg Pty Ltd was founded in Melbourne, Victoria, Australia, and its principal place of business is Melbourne. Its registered Australian address is 93-97 Normanby Rd, Notting Hill, Victoria 3168, and it also operates from 950 John Daly Blvd, Daly City, California 94015, United States.

Under what legal framework does Norg handle personal information?

Australian privacy law: the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). The policy also references the Privacy and Other Legislation Amendment Act 2024 (Cth), which addresses automated decision-making and transparency requirements.

What version of the Privacy Policy does this summarise?

The Privacy Policy effective 10 March 2026, last updated 9 March 2026. Policies change; check the full policy for the current version.

What kinds of personal information does Norg collect directly?

Under Section 2.1: name and contact details (email, phone, business address), business or company name, ABN, and role or title, together with account registration credentials, billing and payment information, communications and enquiries, and content or data uploaded to the platform such as brand profiles and product catalogues.

What information does Norg collect automatically?

Under Section 2.2: device and browser information, IP address and approximate geographic location, website usage data (pages visited, time spent, referral source, click paths), AI crawler analytics data (which AI systems access content, crawl frequency and purpose classification), and log data and server access records.

Does Norg collect information from third parties?

Yes. Under Section 2.3, from business partners, referrals, publicly available sources, authorised integrations such as Google Merchant Centre, and analytics and advertising platforms.

Does Norg use automated decision-making?

Yes, and Section 5 states it explicitly. Automated processes used in service delivery are AI gap analysis (identifying content gaps against what AI systems require for citation), content generation assistance (AI-assisted enrichment of product data), crawler classification (categorising AI crawler visits as training, search or user action), and opportunity scoring. The policy states that final decisions on published content remain subject to human review and client approval, and that Norg does not use automated decision-making producing legal or similarly significant effects on individuals without human involvement.

Does Norg disclose personal information overseas?

Section 8 governs overseas disclosure. The policy states that before disclosing personal information overseas Norg takes reasonable steps to ensure the recipient complies with the APPs or is subject to a substantially similar binding scheme, and that it may rely on countries whitelisted by the Australian Government under APP 8. Specific countries are available on request via the Section 14 contact details.

Does Norg sell personal information?

Disclosure is governed by Section 7 and overseas disclosure by Section 8. This is a question with legal consequence and should be answered from the operative wording of the full policy rather than from a summary.

What rights do individuals have over their personal information?

Section 11 covers access (11.1), correction (11.2), complaints (11.3), opting out of marketing (11.4), and anonymity and pseudonymity (11.5). Marketing opt-out is available via the unsubscribe link in emails or by contacting Norg directly.

What happens if there is a data breach?

Section 10 covers data breach notification. The policy states that Norg maintains documented data breach response procedures and conducts regular reviews of them.

How does someone make a privacy complaint?

Under Section 13, or by contacting solutions@norg.ai. Australian individuals also retain the right to complain to the Office of the Australian Information Commissioner (OAIC).

How does the Privacy Policy relate to Norg's Terms and Conditions?

The Privacy Policy forms an integral part of Norg's Terms and Conditions, which are published at norg.ai/terms-and-conditions.

How do I contact Norg about privacy?

solutions@norg.ai, or the contact details in Section 14 of the policy.

Images on This Page