What we keep, and for how long.

Last updated: October 20, 2026.

Who we are

Norvi is run by one person, Robbie Garcia, as a sole proprietor. There is no company behind it. Our postal address is 1502 Park Hill Ct, Fallston, MD 21047, and our email is info@heynorvi.com. Write to us there about anything on this page.

Two kinds of people

Businesses sign up to Norvi. They are our customers. Callers phone a business that uses Norvi. They have not signed up for anything with us.

When you call a business that uses Norvi, we handle your call for that business, and the business decides what happens to what was said. If you want your information removed, write to us or to the business.

What we keep about a business

Your business name, your email address, your time zone, and your password, which we store only as a scrambled hash that cannot be read back. The facts you give your receptionist: hours, services, prices and policies, and the number calls are handed to. Your calendar connection, kept encrypted. For an Apple calendar that is an app-specific password you make for Norvi. Your plan, and the seconds of calls you use.

When you sign up, we keep the date and the version of the terms you agreed to. When you sign in, we keep your email address and network address for about a day, to stop people guessing passwords.

What we keep about a caller

What was said on the call, as a written transcript and a short summary, with how long the call lasted and how it ended.

Anything the caller gives for a booking or a message: a name, a phone number, an address, the reason for the visit, a time, and the message itself. The phone number comes from caller ID, or it is the number the caller gives us to call back. We keep it with a booking or a message, not with every call.

We do not record audio. Every call starts by saying it is the business's assistant and that the call is transcribed. When the assistant passes a call to the business, the transcript can include what is said after that, until the call ends.

Calendars

When a business connects a Google, Microsoft or Apple calendar, we read when the owner is busy, and we add the bookings the receptionist makes. The event we add holds the caller's name, phone number, address and notes, so anyone who can see that calendar can see them. For Outlook, Microsoft's consent screen asks to read and write your calendars; we read only when you are busy and write only our own bookings.

We use calendar information only to find free times and to book, move and cancel appointments for that business. We do not use it for ads, we do not sell it, and we do not use it to train AI models. Norvi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We treat Microsoft and Apple calendar information the same way.

This website

heynorvi.com has no analytics, no ads and no tracking cookies. Its fonts and files come only from our own server, so opening a page tells no one else that you visited. Hostinger hosts the site and our email, and its servers note the network address of each visit. Hostinger's privacy policy gives no fixed time for keeping those logs. Hostinger may set one cookie, called hcdn, when it checks that a visitor is a person and not a bot.

The site keeps one small note in your browser for the length of a visit, so the logo rings only once. The demo dashboard keeps what you type into it in your own browser only. Nothing you type there is sent to us.

Who helps us

These companies handle information for us so the service works. Each has its own privacy terms.

Vapi runs each call. Audio recording is switched off there, but Vapi keeps its own records of each call on its own clock, 14 days by Vapi's support team (read October 20, 2026). Vapi's network capture of each call's setup is switched off in our settings too. Soniox turns the caller's speech into text, and hears the business name as a hint. Anthropic's Claude model, reached through Vapi, reads the conversation and the business's facts and writes the receptionist's replies. Postmark sends our emails to business owners, such as sign-in links and the messages callers leave. Hostinger hosts heynorvi.com and our email. Google, Microsoft and Apple hold the calendars a business connects.

We do not sell information, and we do not give it to anyone for their own marketing. On training AI models, their terms differ, as we read them on October 20, 2026: Anthropic's terms say it does not train its models on what its business customers send it. Soniox says it does not use customer audio or text to train its models. Vapi's privacy policy says call recordings, transcripts and logs may be kept to help train and improve its AI models. We have audio recording turned off there.

How long we keep it

Transcripts, summaries and messages: 90 days, then deleted. Bookings: 90 days after the appointment, then deleted. Sign-in notes: about a day.

We make a copy of our records every day and keep each copy for up to 14 days, so something we delete can stay in a backup for up to 14 more days.

When a business cancels, we disconnect its calendar the day the service ends, delete everything else 30 days later, and the backups roll off 14 days after that. Billing records are kept for four years, as Maryland's tax rules require.

Some copies are outside our systems, and deleting ours does not remove them: an email we sent you, an event in your own calendar, and whatever Vapi, Soniox, Anthropic and Postmark keep on their own terms.

Your choices

A business or a caller can write to info@heynorvi.com to ask what we hold about them, or to have it deleted. We answer within 30 days. We say yes unless the law makes us keep something, and if we cannot, we say why.

Today a business gets each message a caller leaves by email.

Security

Passwords are stored only as scrambled hashes. Calendar connections are encrypted. heynorvi.com and the Norvi dashboard are served only over HTTPS. Each business can see only its own information. No system is perfectly safe. If something goes wrong with a business's information, we tell that business within 72 hours of finding out.

Children

Norvi is for businesses. You must be 18 or older to sign up, and it is not meant for children.

Calls and the law

Some states require everyone on a call to agree before it is recorded or transcribed. That is why every call says it is transcribed at the start. Businesses agree to this in our terms.

Health information

Norvi does not handle health information under HIPAA today. If you run a medical or dental practice, talk to us first, at info@heynorvi.com.

Changes

If this page changes in a way that matters, we email business customers before the change takes effect, and the date at the top changes.