Privacy notice
How Nordbits AI handles personal data on nordbits.ai. Short version: we only collect what we need to answer you, analytics run only if you accept, and we never sell data.
Who is responsible
Nordbits AI, org.nr. 937 142 188, Henrik Ibsens gate 90, 0255 Oslo, Norway, is the data controller for the personal data described here.
Questions about privacy go through our contact form. Choose Privacy as the topic.
What we collect and why
| When | What | Why | Legal basis (GDPR) |
|---|---|---|---|
| You send the contact form | Name, email, company (optional), topic and your message | To answer your inquiry and follow it up | Your consent, art. 6(1)(a), and steps before a possible agreement, art. 6(1)(b) |
| You accept analytics | How the site is used: pages viewed, clicks and scrolling, device and browser type, collected by Microsoft Clarity | To see what works on the site and improve it | Your consent, art. 6(1)(a) |
| You use the contact form | Technical signals such as IP address and browser data, checked by Cloudflare Turnstile | To stop spam and automated abuse | Legitimate interest, art. 6(1)(f) |
| You visit any page | Technical data such as IP address, needed to deliver the page | To serve and protect the site | Legitimate interest, art. 6(1)(f) |
Cookies and your choice
Analytics cookies are only set if you choose Accept analytics. If you decline, Clarity runs without cookies. Your choice is saved in your own browser (local storage), not sent to us, and you can change it at any time under Cookie settings at the bottom of every page.
The site loads its fonts from our own server and uses no advertising or social media trackers.
Who processes data for us
- Cloudflare: hosting, security and bot protection (Turnstile).
- Resend: delivers contact form messages to our inbox.
- Microsoft: our email (Microsoft 365) and site analytics (Clarity).
They process data on our behalf, under data processing agreements. Some of them are based in the United States; transfers outside the EEA rely on safeguards required by GDPR, such as the EU–US Data Privacy Framework or the EU Standard Contractual Clauses.
How long we keep it
We follow GDPR: we keep personal data only as long as we need it for the purpose it was collected for, and then delete it. Contact form messages are kept while we answer and follow up your inquiry, and deleted no later than 12 months after our last contact with you, unless they become part of an agreement we must keep records of.
Your rights
You can ask for access to the data we hold about you, and have it corrected or deleted. You can also ask us to restrict or stop processing, ask for a copy in a portable format, and withdraw consent at any time. Use the contact form with the topic Privacy.
If you think we handle your data wrongly, you can complain to the Norwegian Data Protection Authority, Datatilsynet.
What we never do
We never sell personal data, never use it for advertising, and never use what you send us to train AI models.