1. Data Controller

Svartdal App & Web (org.no. 926 747 452), Drammen, Norway. Email: hei@somesimplify.com.

2. Data we collect

We only collect what's necessary to deliver the service:

Waitlist: email address, number of locations, and selected language when you sign up.
Account (after launch): name, email, business info (venue name, concept, tone), content you upload, generated text, and publishing history.
Payment (on subscription): payments are handled by Stripe. We store a Stripe customer ID and subscription status, but never card numbers or CVC – card data is handled directly by Stripe (PCI-DSS certified).
Usage data: page views and clicks via Vercel Analytics and Vercel Speed Insights (cookieless, anonymized), Google Analytics 4 (anonymized IP) and Microsoft Clarity (session replay for UX improvement). Google Analytics and Clarity set first-party cookies and require consent via the banner.
Third-party connections: if you connect Instagram, Facebook, or Google Business Profile, we store the access token to publish on your behalf. Tokens can be revoked any time at /app/integrasjoner.

3. Why we process the data (purposes)

Deliver the service you requested (publish content, generate captions).
Contact you about waitlist status and pilot invitations.
Improve the product based on anonymized usage statistics.
Meet legal obligations (bookkeeping, GDPR, VAT).

4. Legal basis (GDPR Art. 6)

Processing is based on contract (Art. 6.1.b) for service delivery, legitimate interest (Art. 6.1.f) for product improvement, and consent (Art. 6.1.a) for the waitlist and marketing communications.

5. Where data is stored

All personal data is stored in the EU. We use:

Supabase (Frankfurt) – database, auth, file storage.
Vercel (Frankfurt) – hosting + serverless functions.
Vercel Analytics + Speed Insights (Frankfurt) – page statistics and performance.
Google Analytics 4 (USA) – audience analysis, anonymized IP, covered by Standard Contractual Clauses.
Microsoft Clarity (Microsoft Azure EU) – session replay.
Stripe (Stripe Payments Europe, Ireland) – payment processing. Card data is never stored by us. Transfers to Stripe Inc. (USA) are covered by Standard Contractual Clauses.
Anthropic (USA) – for AI-generated captions. Covered by Standard Contractual Clauses (SCC) for EEA transfers.

6. Cookies and tracking

Vercel Analytics and Speed Insights are cookieless and run unconditionally. Google Analytics 4 and Microsoft Clarity set first-party cookies and only run after you accept consent in the banner. Clarity masks all form input and personal text; Google Analytics anonymizes IP addresses.

7. Your rights (GDPR)

You have the right to:

Access your data
Have inaccurate information corrected
Have your data deleted ("right to be forgotten")
Receive your data in a machine-readable format (data portability)
Withdraw consent at any time
Lodge a complaint with the Norwegian Data Protection Authority

Send requests to hei@somesimplify.com – we respond within 30 days.

8. Changes

Material changes are notified via email (if you have an account) or updated on this page with a new date. Continued use of the service after changes constitutes acceptance.

9. Contact

For all privacy-related questions: hei@somesimplify.com

Privacy Policy