Nory and your privacy
Your finances are sensitive. Here is how Nory handles them: with your control, read only on your banks, and never selling your data.
To help you, Nory looks at your finances: it is fair to want to know how that works. This article reviews the safeguards that frame the assistant, from the control you keep to what Nory simply cannot do.
You keep control, domain by domain
Nory works with permissions that you set yourself, domain by domain. Reading is enabled by default so it can answer, and writing is disabled by default: it therefore cannot change anything until you allow it. You adjust all of this whenever you want.
The two levels of permission
- Reading
- Allows Nory to consult a domain (for example your transactions) to answer you. Enabled by default.
- Writing
- Allows Nory to propose and then, after your confirmation, carry out an action in this domain. Disabled by default.
Nothing moves without your confirmation
Even when writing is enabled, Nory does nothing on its own. It proposes an action, you see it clearly, and you decide. For the most sensitive actions, a double confirmation is requested. You always remain the last person to validate.
The connection to your accounts is read only. Nory can analyse your transactions, but neither it nor anyone else can trigger a payment or a transfer from the app.
A limited memory that you control
Nory keeps a few pieces of context to stay relevant over the course of your exchanges. This memory is deliberately limited, and you can view and erase it at any time from its settings. You choose what it keeps in mind.
Where your data lives
- Your data is encrypted and hosted in Europe.
- It is never sold or handed over for advertising purposes.
- The connection to your banks happens via open banking, framed by the DSP2 regulation.
- You keep your rights of access, export and deletion at any time.
You can disable writing for a domain, erase Nory's memory, or export and delete your data from your settings. Nothing is permanent on the permissions side.
What Nory never does
| What is guaranteed | What never happens |
|---|---|
| You set the permissions | Nory acts without permission |
| You confirm each action | An action happens behind your back |
| Read only on your banks | A payment triggered by Nory |
| Data hosted in Europe | Your data being sold |
Privacy by designOperational
These safeguards are active at all times, without any setting on your part.
The practical detail for choosing what Nory can read and do.