Privacy policy

NordicAI.dev is an AI implementation consultancy. For the purposes of the EU General Data Protection Regulation (GDPR), we are the data controller for the personal data described in this policy.

We collect the following categories of personal data:

• Enquiry data. When you submit the contact form we collect your name, work email address, company name, and the content of your message.
• Account data. When you create a client portal account we collect your name, email address, a hashed password, and the company details you provide.
• Project data. Information you submit through the portal, including discovery responses, documents, signatures, and messages exchanged with our team.
• Technical data. Session identifiers, IP address, and user agent strings, recorded when you sign in so that sessions can be secured and audited.

We process enquiry and account data to respond to your request and to provide the portal as a service you have asked for. We process project data to deliver and administer our engagements. We process technical data on the basis of our legitimate interest in keeping accounts secure and preventing abuse.

We do not sell personal data, and we do not use client project data to train third-party machine learning models.

We use a small number of processors to operate the service: Vercel for application hosting, Neon for database hosting, and Resend for transactional email delivery. Each processor is bound by a data processing agreement and only handles data on our instructions.

Application and database infrastructure is hosted in EU regions. Where a processor transfers data outside the EEA, we rely on the European Commission's Standard Contractual Clauses.

Enquiry data is retained for 24 months from last contact. Account and project data is retained for the duration of the engagement and for the period required by Norwegian bookkeeping law thereafter. Session records expire automatically.

You have the right to access, correct, export, and erase your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with Datatilsynet, the Norwegian data protection authority.

We use a single essential cookie to keep you signed in to the client portal. We do not use advertising or third-party tracking cookies. Because the cookie is strictly necessary to provide a service you requested, it does not require consent.

For any privacy question or request, contact us through the form on our homepage and mark your message for the attention of the data protection contact.