Privacy and Data Use
Draft launch-readiness text. This is not final legal advice and should be reviewed before public launch or paid self-service access.
This page explains product data use and remaining limitations. Unconfirmed agreements, regions and operational procedures are identified below. Do not use confidential customer material before these matters are resolved.
Responsibility and contact
NorthSmith is provided by STORBEKK NORDLOGIX, organisation no. 936 628 400, using the brand Norlogix. Account information supports sign-in and access. The allocation of responsibility for personal data a business includes in project work must be settled in the customer agreement. Use the signed-in privacy function below for access and deletion requests. Ola is the responsible contact and checks the privacy channel each business day. Secure access delivery must be arranged and identity verified; do not send identity documents or project content through general feedback.
Purposes and legal grounds
Project information is used to deliver, save and retrieve the work you request. Technical information supports operation and security; voluntary feedback supports follow-up and improvement. Payment information supports payment and subscription flows. Final legal grounds and any balancing assessment for each purpose have not been confirmed. This disclosure is not consent, a processing agreement or a basis for sharing other people's personal data.
Documents and local work
The original file is read locally on import. Unregistered text drafts may be retained in this browser's IndexedDB. Registered text becomes part of the project basis. Clearing an unregistered draft does not delete previously registered documents or saved versions.
When AI is used
An AI investigation sends the task and the project/document basis included in that request, including registered document excerpts and relevant prior source information, to OpenAI to produce and review results. Local file import alone does not start AI execution. Use only material you are entitled to share for this processing.
What the project retains
Saving to Garage can retain document text, quotations, assessments, assumptions and history in project versions at Supabase. AI results containing quotations may also be retained on the server for recovery. Exporting or downloading does not remove server or local copies.
Other information
Account information, voluntary feedback, technical diagnostics and security logs may be processed to deliver and support the service.
Feedback
Feedback is sent to the owner only when the user actively chooses to send it. Local feedback may be stored in the browser without external submission.
Browser storage and optional measurement
Local project drafts use IndexedDB; request recovery can use account-bound sessionStorage. Clearing browser data may remove local drafts and request references without deleting server records. Optional automatic measurement of visited pages and referral sources is disabled. On page load the service attempts to remove only its two legacy local measurement values; blocked storage can prevent cleanup. This does not erase historical server events, other devices or other event sources.
Your rights and requests
You may request access, correction and deletion, and restriction, portability or object where the conditions apply. Consent, where used, may be withdrawn without affecting earlier lawful processing. Identity and scope must be verified before disclosure or deletion. The signed-in form registers manual access/deletion requests; a receipt is not fulfillment. Preserve your attempt reference if delivery is uncertain and check with the same account. For other rights or requests without account access, contact contact@nordlogix.pro. Do not send identity documents or confidential project content in ordinary email. Requests normally require a free response within one month, subject to justified legal exceptions. You may complain to the Norwegian Data Protection Authority (Datatilsynet).
Sensitive data
Users should not enter secrets, personal data or project data that is not necessary for controlled pilot use.
Storage and deletion
An AI recovery window is not a deletion deadline: an expiry timestamp does not establish deletion of data, logs or backups. Complete retention periods, deletion flow and export scope are not yet confirmed as a finished policy and technical process. This text is not a guarantee of complete deletion.
Third parties
The implementation uses Supabase for accounts/project storage, Vercel for hosting, OpenAI for AI investigations and Stripe in the payment flow. Both the primary and QA Supabase projects have verified region eu-west-1. This does not establish that all processing occurs within the EEA. The Vercel function was observed in arn1; this does not guarantee overall data residency. Stripe may act both as processor and independent controller depending on purpose. Applicable account agreements, international transfers, provider logs and backup rules have not been fully confirmed. A technical setting such as store:false in an AI request alone does not establish a deletion or region guarantee.
Datatilsynet: privacy rights and complaints
Privacy contact: Ola · contact@nordlogix.pro
Request access or deletion
For the account you are signed in to. Requests are handled manually. No project files, free text or identity documents are attached. Submitting deletes nothing. Scope and any necessary retention must be clarified before handling.