Privacy
Privacy
Normatico is designed to normalize names without hoarding personal data. Privacy behaviour is controlled per request via privacy_mode.
Privacy modes
| Mode | What is stored |
|---|---|
standard
|
A privacy-safe aggregate row (normalized value + salted input hash), plus a cacheable rendering. |
aggregate_only
|
Counts only — no raw or normalized input value is stored. |
no_store
|
Nothing is persisted. The response carries a privacy_no_store warning.
|
Identifiers & logs
-
customer_idis hashed with a server-side salt before storage — name tables never contain a recoverable customer id. - Raw names are never logged in production. Structured logs use a strict field whitelist (input hash/length, script, locales, purpose, confidence, method — never the name).
- Emails, phones and CRM identifiers are never stored in name tables.
Retention
Observation and feedback retention windows are configurable
(NORMATICO_OBSERVATION_RETENTION_DAYS,
NORMATICO_FEEDBACK_RETENTION_DAYS). See
the API docs and the project's PRIVACY_GDPR documentation.