1. Data Controller

SOMESimplify AS (in formation), Oslo, Norway. Email: hei@somesimplify.com.

2. Data we collect

We only collect what's necessary to deliver the service:

Waitlist: email address, number of locations, and selected language when you sign up.
Account (after launch): name, email, business info (venue name, concept, tone), content you upload, generated text, and publishing history.
Usage data: page views and clicks via Plausible Analytics (cookieless, anonymized) and Microsoft Clarity (session replay for UX improvement).
Third-party connections: if you connect Instagram, Facebook, or Google Business Profile, we store the access token to publish on your behalf. Tokens can be revoked any time at /app/integrasjoner.

3. Why we process the data (purposes)

Deliver the service you requested (publish content, generate captions).
Contact you about waitlist status and pilot invitations.
Improve the product based on anonymized usage statistics.
Meet legal obligations (bookkeeping, GDPR, VAT).

4. Legal basis (GDPR Art. 6)

Processing is based on contract (Art. 6.1.b) for service delivery, legitimate interest (Art. 6.1.f) for product improvement, and consent (Art. 6.1.a) for the waitlist and marketing communications.

5. Where data is stored

All personal data is stored in the EU. We use:

Supabase (Frankfurt) — database, auth, file storage.
Vercel (Frankfurt) — hosting + serverless functions.
Plausible Analytics (Germany) — page statistics.
Microsoft Clarity (Microsoft Azure EU) — session replay.
Anthropic (USA) — for AI-generated captions. Covered by Standard Contractual Clauses (SCC) for EEA transfers.

6. Cookies and tracking

Vercel Analytics and Speed Insights are cookieless and run unconditionally. Google Analytics 4 and Microsoft Clarity set first-party cookies and only run after you accept consent in the banner. Clarity masks all form input and personal text; Google Analytics anonymizes IP addresses.

7. Your rights (GDPR)

You have the right to:

Access your data
Have inaccurate information corrected
Have your data deleted ("right to be forgotten")
Receive your data in a machine-readable format (data portability)
Withdraw consent at any time
Lodge a complaint with the Norwegian Data Protection Authority

Send requests to hei@somesimplify.com — we respond within 30 days.

8. Changes

Material changes are notified via email (if you have an account) or updated on this page with a new date. Continued use of the service after changes constitutes acceptance.

9. Contact

For all privacy-related questions: hei@somesimplify.com

Privacy Policy