Privacy Policy
Last updated: November 3, 2026
Nort ("we") helps people apply for H-2A and H-2B seasonal jobs in the United States. This policy explains what data we collect, why, how we protect it, and the choices you have. Contact: [email protected].
What we collect
- Account: your email address and login codes.
- Profile and resume: name, country, city, WhatsApp number, work experience, English level, whether you have a passport and previous H-2 experience. We never ask for passport numbers or photos.
- Job search: visa type, fields, states and minimum hourly wage you choose.
- Gmail connection: your Gmail address and an authorization token from Google (see "Google user data").
- Applications: which jobs we applied to on your behalf, when, and the delivery status.
- Payments: plan, amounts and dates. Card and Pix data are handled by the payment provider; we do not store card numbers.
Google user data
When you connect Gmail, we request only two kinds of access: send email on your behalf (gmail.send) and see your email address (openid, email). We do not read, search, store or delete any email in your inbox.
We use this access only to send the job applications you approved, from your own Gmail, to employers listed in the U.S. Department of Labor's public job orders. The authorization token is encrypted (AES-256-GCM) before it is stored, and only our sending service can use it. You can disconnect at any time in your Nort account or at myaccount.google.com/permissions; we then delete the token.
Nort's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, do not use it to train AI models, and no human reads it except with your explicit permission, for security, or to comply with the law.
How we use your data
- To build your resume and letters in English, and translate them for you.
- To find jobs that match your search and send applications from your Gmail.
- To show your applications, replies and remaining sends.
- To process payments, prevent fraud and keep the service secure.
Who processes data for us
We use providers under data processing terms: Supabase (database and servers, São Paulo region), Cloudflare (website and DNS), Anthropic (AI to write letters; it does not train on our data), Google (Gmail sending), Zoho (our own email) and payment providers (Mercado Pago, Stripe). We do not sell personal data.
Security
Access to every record is restricted to its owner (row-level security). Sensitive fields such as your phone number are encrypted at rest, connections use HTTPS, and we keep personal data out of our logs.
Retention and your rights
We keep your data while your account is active. You can download a copy or delete your account at any time in "My account"; deletion is completed within 15 days, except records we must keep by law (such as payment records). Under Brazil's LGPD and similar laws you may access, correct, port or delete your data and withdraw consent. Write to [email protected].
Changes
If we change this policy, we will update the date above and notify you in the app before material changes take effect.