What we do with your data.

Who is responsible

Softeria AS is the data controller for the personal data described in this notice. That means we decide why it is collected and what happens to it, and we are the ones you hold answerable for it.

Company

Softeria AS, organisation number 930 796 352

Address

Langelandsvegen 35, 6010 Ålesund, Norway

Email

hi@softeria.com

We are not required to appoint a data protection officer, so privacy questions go to the address above and are answered by the team, not by a mailbox nobody reads.

When you just read the site

Browsing softeria.com does not create a profile of you. To be specific about what is not here, because most privacy notices are vague about it:

• No analytics — no Google Analytics, no Plausible, no heatmaps, no session recording.
• No advertising or social media pixels, and no cross-site tracking of any kind.
• No cookies. The site sets none at all, which is why you are not being asked to dismiss a consent banner.
• No fonts fetched from Google. The typeface is bundled with the site itself, so your browser never makes a request to a third party to render the page.
• One setting kept on your device, and only if you ask for it. The site has a light version and a dark one, and it follows your operating system unless you press the switch in the header — at which point your browser remembers that you did, under the name theme, with the value light or dark. That is the only thing this site stores, it is not a cookie, it is never sent to us and it tells us nothing: clearing this site's data in your browser removes it, and the page goes back to following your system. It is stored only because you pressed the switch, which is why it needs no consent banner either.

Our servers do keep ordinary access logs, as every web server does: the requested address, a timestamp, an HTTP status code, the browser's user agent string and the IP address the request came from. We use these to keep the site running and to investigate faults and abuse. They are not used to build a picture of individual visitors, and they are deleted on a rolling basis.

When you send us a message

The contact form on the about page is the only place this website asks you for personal data. When you submit it we receive:

• Your name and email address — required, because we cannot answer you without them.
• Your company — optional, and only used to understand the context of your question.
• Your message — whatever you choose to write. Please do not put sensitive personal information or confidential material in it; email is not the place for that, and we will tell you the same thing if you ask.
• Which page you wrote from and your browser's user agent — collected automatically, and used only to reproduce problems people report and to spot automated spam.

The message is stored on our own platform and is also emailed to the Softeria colleagues who answer enquiries. We use it to reply to you and to follow up on that conversation. We do not add you to a marketing list, and we do not sell, rent or share the data with anyone for their own purposes.

What allows us to do this

Under the General Data Protection Regulation we need a lawful basis for each purpose. Ours are:

Answering your enquiry

Legitimate interest (art. 6(1)(f)) — you asked us a question and expect a reply; or, where your message is about a possible agreement, taking steps at your request before entering into a contract (art. 6(1)(b)).

Server logs, security and spam prevention

Legitimate interest (art. 6(1)(f)) in keeping the site available and free of abuse.

Who else can see it

We keep the list of outside parties short on purpose. For this website it is one supplier:

Resend

Delivers the notification email that tells us your message has arrived. Your name, email address, company and message pass through their service. They act as our processor and may not use the data for anything else.

Beyond that, we will disclose personal data only where the law requires it — for example in response to a valid order from a court or a public authority. We do not sell personal data, and we never have.

Where your data is stored

Contact messages are stored on our own platform, in a region inside the EU/EEA. We chose that deliberately: it is one of the reasons customers in Norway and the rest of Europe can use us without a data residency argument.

Where a supplier processes data outside the EU/EEA, that transfer is covered by the European Commission's Standard Contractual Clauses together with the additional safeguards those clauses require. You can ask us for the details of any transfer that affects you.

How long we keep it

Contact messages

Up to 24 months after our last exchange with you, then deleted. If the conversation turns into a customer relationship, the data moves into that relationship and is kept for as long as it lasts.

Server access logs

A short rolling window, kept only as long as they are useful for operations.

Light or dark, if you pressed the switch

Until you clear this site's data in your browser. It never leaves your device, so we could not delete it for you even if you asked — and we never knew it was there.

You can ask us to delete your message sooner, and we will.

Your rights

If we hold personal data about you, the GDPR gives you the right to ask us for a copy of it, to have it corrected if it is wrong, to have it deleted, to have our use of it restricted, to receive it in a portable format, and to object to processing we base on legitimate interest.

Write to hi@softeria.com and we will answer within one month. You do not need to fill in a form or explain why, and we will not make it difficult.

If you think we have handled your data badly, please tell us first — we would rather fix it. You also have the right to complain to the Norwegian Data Protection Authority, Datatilsynet, or to the supervisory authority in the EU country where you live.

Data inside our products

This notice covers the softeria.com website. It does not cover the data you put into Softeria Studio or RestAPI.com when you are a customer.

For that data you are the controller and we act as your processor: it is your data, we handle it on your instructions, and the arrangement is governed by a separate data processing agreement rather than by this page. Ask us at hi@softeria.com and we will send you the current version.

Changes to this notice

When we change how we handle personal data, we update this page and change the date at the top. If a change matters to people who have already contacted us, we will tell them directly rather than relying on them to re-read a web page.