Privacy Policy for Normi

1. About this Privacy Policy
   
   

   This privacy policy applies to the Normi platform ("Service"), provided by Auge Technologies AS, org.no. 931 848 291 ("we", "us", or "Provider").
   We process personal data as a service provider, for marketing purposes, and in connection with visits to our website www.normi.no.

2. What Information We Process
   
   

   Information you provide
   When registering and using Normi, we collect:

   1. Name
   2. Email
   3. Address
   4. Phone number
   5. Skills added to profile
   6. Roles and goals added to profile
   7. Experience added to profile
   8. Education added to profile

   Information we collect automatically
   We also collect the following information about your use of Normi:

   1. Searches in the service: When a user performs a search, we log date/time, search terms, search type, and a unique alphanumeric ID for the user. This ID alone cannot identify the user.
   2. Login activity
   3. Number of skills and roles added
   4. Number of pages visited

   This data is used to produce relevant user statistics and industry insights about skill trends. Personal data will not be linked to individual users in the statistics.

3. Purpose of Processing
   
   

   Personal information is collected and processed to:

   1. Deliver and manage the Normi service
   2. Fulfill the agreement with you as a user
   3. Improve the service and provide better recommendations
   4. Produce anonymized statistics and industry insights about skill trends
   5. Send newsletters and marketing (only with your consent)
4. Legal Basis
   
   

   The legal basis for processing is:

   1. Performance of contract (GDPR Art. 6(1)(b)) - to deliver core service such as skills mapping and matching
   2. Consent (GDPR Art. 6(1)(a)) - for marketing, newsletters, and optional analytics
   3. Legitimate interest (GDPR Art. 6(1)(f)) - for service improvement, aggregated statistics, and industry insights

   You can withdraw your consent for marketing and optional analytics at any time.

5. Sharing of Personal Information
   
   

   We do not share your personal information with others unless there is a legal basis. We use the following data processors under data processing agreements:
   Technical service providers

   1. Clerk: Handles login, registration, and authentication. Clerk is based in the USA and processes data according to their privacy policy.
   2. Vercel: Hosting and server operations in EU/EEA
   3. OpenAI: Provides AI services for skills matching. No user data is used to train their models.
   4. Uploadthing: Handles uploading and storage of profile pictures
   5. AI providers: See terms of service for additional details about AI processing

   Payment provider

   1. Vipps: Handles all payments. We are not responsible for personal information you share directly with Vipps. Read their privacy policy for more information.
6. Cookies
   
   

   We use different types of cookies in Normi:
   Necessary cookies
   These are essential for the service to function and cannot be disabled:

   1. Authentication: To keep you logged in (via Clerk)
   2. Security: To protect against fraud attempts
   3. User preferences: To remember your choices (e.g., language)

   Optional cookies
   You can choose whether to allow these:

   1. Analytics: To understand how the service is used and improve it

   You can change cookie settings in your browser.

7. Storage and Security
   
   

   Storage location

   1. Data is stored on servers in EU/EEA with our provider Vercel
   2. We take regular backups of all data

   Storage period

   1. Basic contact information is retained until the user relationship ends
   2. Personal data is deleted when you withdraw your consent or request deletion
   3. Anonymized statistics are stored indefinitely

   Security
   Auge Technologies AS ensures that information is stored securely in accordance with applicable privacy legislation, with necessary technical and organizational security.

8. Your Rights
   
   

   You have the following rights under privacy legislation:

   1. Access: Right to know what information we have about you
   2. Rectification: Right to correct inaccurate information
   3. Erasure: Right to have your personal data deleted
   4. Restriction: Right to limit processing
   5. Data portability: Right to receive your data in a structured format
   6. Object: Right to object to processing. You can request at any time that we stop using your data for statistics and service improvement.

   To exercise your rights, contact us at contact@normi.no.
   You can also export your data by contacting the same email address.

9. Changes to the Privacy Policy
   
   

   We may update this privacy policy when there are changes to the service or regulations. We will notify you of significant changes at least 14 days before they take effect via email and/or notification in the Normi platform.

10. Right to Complain
    
    

    If you believe that our processing of personal data does not match what we have described here or that we are otherwise violating privacy legislation, you may file a complaint with your local data protection authority.

11. Contact Information
    
    

    For questions about our processing of personal data, contact us at:
    Auge Technologies AS
    Org.no: 931 848 291
    Email: contact@normi.no
    Phone: +47 413 08 097
    Address: Høgskoleringen 4, 7034 Trondheim

By using the Normi service, you confirm that you have read and understood this privacy policy.