Last updated September 21, 2026
Norman reads your email and calendar so it can do your busywork. That only works if you can see exactly what it reads, what it keeps, and who else touches it. This page is that accounting, in plain language.
Norman (“Norm”) is an assistant that reads your inbox and calendar, drafts replies and briefings, and waits for your approval before anything goes out. This policy covers the Norman web console at meetnorm.app, the Norm for Mac and Windows companion apps, and the background jobs that run on your behalf.
Norman is operated by Dunnewold Labs LLC. Questions, requests, and deletion demands go to ryan@dunnewold.studio.
Your account. When you sign in with Google we store your name, email address, profile picture, and the OAuth tokens that let Norm act for you. We never see or store your Google password.
Your mail and calendar. Message senders, recipients, subjects, dates, and bodies; calendar events, times, and attendees. Norm reads these to do its work and keeps what it needs to show you why it proposed something — the card, the draft, and the message it was replying to. Email bodies, extracted summaries and semantic embeddings are also kept in a search index.
What Norm writes down. Drafts and proposals awaiting your approval, tasks, meeting notes, saved reference material, and a short profile of how you write — distilled from a sample of your own sent mail so drafts sound like you. Use the console controls or contact us to request removal of retained copies.
From Norm for Mac, if you install it. Which apps and windows held focus and for how long, and — when you turn day capture on — short notes about what was on screen. Those notes are written by a model running on your Mac. Screenshots and the raw text read off your screen never leave the machine; only the notes are uploaded.
Meeting audio, if you record one. Audio is uploaded for transcription and stored with the transcript and recap. Dictation audio is not written to disk by the streaming transcription client. Cloud upload off stops new capture transfers and cloud voice asks, and cancels active transfers. Recordings stay on your device. Data already sent is not recalled; use deletion controls to remove it.
Norman requests the narrowest set of scopes that lets it do the job, and the console shows which ones you have granted at any time. If a capability needs a permission you have not granted, Norm does without it rather than asking for blanket access.
| Permission | Why Norman needs it |
|---|---|
| gmail.modify | Read your mail so Norm can triage the inbox and write briefings, create drafts, send a reply once you approve it, and archive mail on an approved cleanup. This is the single Gmail permission Norman uses — it replaces the four narrower ones we used to request. |
| calendar.events | Read your events for briefings and meeting prep, and create or update the ones you approve. Norman does not ask for access to your calendar settings or sharing. |
| calendar.calendarlist.readonly | See the names of the calendars on your account, so you can pick which ones the calendar page shows. Read-only; Norman never adds, removes, or shares a calendar. |
Norman’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, and without exception:
Mail and calendar content may be processed by Anthropic and Google models through Vercel AI Gateway. Email content is also sent to OpenAI embedding models for semantic search. The line you type or say to Norm in the command bar is sent to TypeSafe AI to decide how to handle it; no mail or calendar content goes with it. These transfers support the features above. Provider processing, security logs and retention are governed by the applicable service terms and configured retention controls.
Norman runs on infrastructure operated by other companies. The services used by this app are listed below. We do not sell your data, rent it, or hand it to advertisers — there is no advertising in Norman and no plan for any.
| Company | What they do |
|---|---|
| Vercel | Hosts the app, agent workflows and background jobs; stores audio and attachments; routes AI requests through AI Gateway. |
| Neon | Postgres storage for your account, synced content, email search index, cards, tasks, transcripts and notes. |
| Anthropic | Claude models process mail, calendar, meeting transcripts and instructions to draft work through AI Gateway. |
| Sign-in, mail and calendar APIs. Gemini models also classify and summarize mail, extract its search index and answer questions through AI Gateway. | |
| OpenAI | Creates embeddings of email content for semantic search through AI Gateway. |
| TypeSafe AI | Its Jev model sorts what you type or say to Norm in the command bar into a to-do, something to remember, a question, or a job. It receives that one line only, never your mail, calendar or transcripts. |
| Deepgram | Transcribes uploaded meeting audio and live cloud dictation. New transcription requests explicitly opt out of its Model Improvement Program. |
| Mixpanel | Optional browser product analytics tied to an internal user id, including feature usage and browser/device metadata. You can disable this in Settings. |
| Resend | Delivers invitations and other app-generated email, including recipient addresses and message content. |
| Slack | Connected workspace messages and actions. Receives submitted contact details when used as the configured contact-notification destination. |
Processing locations depend on the service and configured region. Contact form submissions may also be delivered to the configured notification destination. Ask us for the current destination and regional details. We may also disclose data if the law requires it, or to protect someone’s safety. If Norman is ever acquired, your data moves with it, and you will be told before that happens.
Your account data, cards, tasks, and notes are kept until you delete them or close your account. Meeting audio and transcripts are kept until you delete the meeting. Day-capture notes are kept as the daily record they exist to produce.
Account deletion immediately closes access and removes account-linked live database rows. An encrypted deletion record is retained while cloud storage and provider cleanup is pending. Cleanup is retried; the request stays pending until retained processor copies are verified deleted or their retention period has expired. Backups age out under their configured retention policies. Contact us for the status of your request. Deleting cloud data does not remove local recordings, or messages and files already delivered to other people.
Data is encrypted in transit and at rest. OAuth tokens are held in an access-controlled database and never exposed to the browser. Norm for Mac authenticates with a device token you can revoke. No system is perfect, and we will tell you promptly if a breach affects your data.
Norman is not for anyone under 18, and we do not knowingly collect their data.
If this policy changes in a way that affects what we do with your data, we will tell you before it takes effect — by email, or in the console. The date at the top always reflects the current version.
Questions: ryan@dunnewold.studio. See also the Terms of Service.