Terms of Service

Effective date: 10 April 2026

These Terms of Service ("Terms") govern your access to and use of all services, websites, and applications provided by Datalytic AS ("we", "us", "our"), collectively referred to as the "Services".

By using the Services, you agree to these Terms. If you do not agree, do not use the Services.

1. Service Categories

Our Services fall into two categories:

• Account-Based Services: Services that require you to create an account to access core functionality.
• Anonymous Services: Services that do not require an account and can be used without providing identifying information.

2. Eligibility

You must be at least 16 years old to use the Services.

By using the Services, you confirm that you have the legal capacity to enter into these Terms.

3. Accounts

For Account-Based Services:

• You are responsible for providing accurate account information
• You are responsible for maintaining the confidentiality of your login credentials
• You are responsible for all activity occurring under your account

We may suspend or terminate accounts that violate these Terms or applicable law.

4. Use of the Services

You agree to use the Services only:

• In accordance with these Terms
• For lawful purposes
• In compliance with applicable laws and regulations

You agree not to:

• Upload unlawful, infringing, or harmful content
• Attempt to bypass security or access controls
• Reverse engineer or interfere with the Services
• Use the Services to distribute malware, spam, or abusive content
• Use the Services in a way that could harm others or our infrastructure

5. User Content

You retain ownership of any content you upload or submit ("User Content").

By using the Services, you grant us a limited, non-exclusive, worldwide license to:

• Host, process, store, and transmit User Content
• Use it solely to provide and improve the Services

We do not claim ownership of your User Content.

You are responsible for ensuring you have the rights to upload and process the content you submit.

6. Automated Processing

Some Services use automated processing, including AI-powered features provided by third-party services (such as Google), to analyze or transform content you submit. By using these features, you acknowledge that your content may be shared with these providers for processing.

• Processing occurs only to deliver the requested functionality
• Outputs are not guaranteed to be error-free and should not be relied upon as professional advice
• You are responsible for verifying outputs before use

We do not guarantee accuracy, completeness, or suitability of automatically generated outputs.

7. Availability and Changes

We do not guarantee uninterrupted or error-free operation of the Services.

We reserve the right to:

• Modify or discontinue parts of the Services
• Add or remove features
• Perform maintenance that affects availability

We are not liable for interruptions caused by maintenance, updates, or factors beyond our reasonable control.

8. Fees and Subscriptions

Some Services or features require payment.

Where applicable:

• Prices and billing terms are disclosed before purchase
• Subscriptions renew automatically unless cancelled
• Taxes apply depending on your location

For mobile applications, payments are handled through the platform provider (such as Apple or Google) and are subject to their terms.

9. Data Deletion

Account-Based Services: You can delete your account and associated data directly within the application. Upon deletion, your data is permanently removed within 30 days.

Anonymous Services: Data is automatically deleted according to the retention periods specified in our Privacy Policy.

We may suspend or terminate your access immediately if you:

• Violate these Terms
• Misuse the Services
• Are required to do so by law

10. Intellectual Property

The Services, including software, design, text, graphics, and logos, are owned by or licensed to Datalytic AS and protected by intellectual property laws.

You may not copy, modify, distribute, or exploit any part of the Services without our prior written permission, except as permitted by law.

11. Privacy

Our processing of personal data is governed by our Privacy Policy, which forms an integral part of these Terms.

By using the Services, you acknowledge that you have read and understood the Privacy Policy.

12. Disclaimer of Warranties

The Services are provided "as is" and "as available."

To the maximum extent permitted by law, we disclaim all warranties, including:

• Implied warranties of merchantability
• Fitness for a particular purpose
• Non-infringement

We do not warrant that the Services will meet your requirements or operate without errors.

13. Limitation of Liability

To the maximum extent permitted by law:

• We are not liable for indirect, incidental, consequential, or special damages
• Our total liability for any claim related to the Services shall not exceed the amount you paid to us in the 12 months preceding the claim, or EUR 100 if no fees were paid

Nothing in these Terms limits liability where such limitation is prohibited by law.

14. Consumer Rights

Nothing in these Terms affects your statutory rights as a consumer under applicable law, including mandatory consumer protection laws in your jurisdiction. Where these Terms conflict with mandatory consumer protection laws, those laws shall prevail.

15. Indemnification

You agree to indemnify and hold harmless Datalytic AS from claims, damages, and expenses arising from:

• Your use of the Services
• Your User Content
• Your violation of these Terms or applicable law

16. Governing Law and Jurisdiction

These Terms are governed by the laws of Norway, without regard to conflict-of-law principles.

Any disputes shall be subject to the exclusive jurisdiction of the courts of Oslo, Norway, unless mandatory consumer protection laws provide otherwise.

17. Changes to these Terms

We may update these Terms from time to time.

If changes are material, we will provide reasonable notice through the Services. Continued use after changes take effect constitutes acceptance of the updated Terms.

18. Contact

For questions about these Terms:

Datalytic AS
Thomas Heftyes gate 50
0267 Oslo
Norway
[email protected]

Privacy Policy

Effective date: 10 April 2026

This Privacy Policy explains how Datalytic AS ("we", "us", "our") collects, uses, shares, and protects your personal data when you use any of our services, websites, and applications (collectively, the "Services").

We process your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Service Categories

Our Services fall into two categories based on how you interact with them:

Account-Based Services

Services that require you to create an account to use core functionality.

Anonymous Services

Services that do not require an account and can be used without providing identifying information.

2. Personal Data We Collect

We collect the following categories of personal data across our Services:

2.1 Account Information (Account-Based Services only)

• Email address: Used for account creation, authentication, and service communications
• Name: If provided during registration
• Password: Stored securely for authentication

2.2 User Content

• Documents and files: Content you upload or create within the Services
• Photos and images: Content you capture or upload within the Services, including images submitted for analysis by third-party AI services
• Communications: Support requests and feedback you send to us

2.3 Technical Data

• Device information: Device type, operating system, app version
• Log data: IP address, access times, error logs
• Crash reports and diagnostics: Information about app crashes and performance issues

2.4 Transaction Data (where applicable)

• Subscription status: Active subscriptions and billing periods
• Transaction records: Purchase history

Payment processing is handled by platform providers (such as Apple for iOS apps). We do not receive or store payment card details.

2.5 Processing Data

• Processing inputs: Content you submit for automated analysis or transformation
• Generated outputs: Results produced by automated features

3. How We Use Your Data

We process your personal data for the following purposes:

Purpose	Legal Basis (GDPR)
Providing and operating the Services	Contract performance (Art. 6(1)(b))
Processing transactions	Contract performance (Art. 6(1)(b))
Sending service-related communications	Contract performance (Art. 6(1)(b))
Responding to support requests	Contract performance (Art. 6(1)(b))
Automated processing and analysis	Contract performance (Art. 6(1)(b))
Improving and developing the Services	Legitimate interest (Art. 6(1)(f))
Ensuring security and preventing fraud	Legitimate interest (Art. 6(1)(f))
Complying with legal obligations	Legal obligation (Art. 6(1)(c))

4. Automated Processing

Some of our Services use automated processing to provide features such as document analysis, text extraction, image recognition, and content transformation.

How Automated Processing Works

• Automated processing is performed when you use these features
• Your content is processed to deliver the specific functionality you requested
• Processing occurs securely with appropriate safeguards

Data Use and Retention

• Content submitted for processing is retained only for the duration necessary to complete the requested task
• Your data is not used to train or improve third-party systems
• For Account-Based Services, outputs are stored as part of your user content
• For Anonymous Services, outputs are not retained after delivery

Third-Party AI Providers

We use third-party AI service providers to deliver certain automated processing features. Currently, we use Google (Gemini API) for AI-powered analysis, including image recognition and content identification. These providers:

• Process data solely to deliver the requested functionality on our behalf
• Do not retain your data after processing is complete
• Are prohibited from using your data to train or improve their own models
• Are bound by data processing agreements that comply with GDPR requirements

5. Data Sharing

We share your personal data only in the following circumstances:

5.1 Service Providers

We work with third-party service providers who assist us in operating the Services:

• Infrastructure: For hosting and data storage
• AI processing: Google (Gemini API) for automated content analysis and image recognition
• Communications: For transactional and support communications

All service providers are bound by data processing agreements that comply with GDPR requirements.

5.2 Platform Providers

For mobile applications distributed through app stores, the platform provider (such as Apple) handles app distribution and in-app purchases. Their privacy policies apply to data they collect.

5.3 Legal Requirements

We disclose data when required by law, court order, or to protect our legal rights.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.

We do not sell your personal data to third parties.

6. Data Retention

Account-Based Services

Data Category	Retention Period
Account information	Until account deletion + 30 days
User content	Until account deletion + 30 days
Technical data	12 months from collection
Transaction records	1 year
Financial records	10 years
Support communications	2 years from last interaction

Anonymous Services

Data Category	Retention Period
User content	Duration of session or as specified by the Service
Technical data	12 months from collection
Processing inputs	Duration of processing task only

7. Your Rights

Under GDPR and applicable data protection laws, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Data Portability: Request your data in a structured, machine-readable format
• Right to Restrict Processing: Request that we limit processing of your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time

How to Delete Your Data

Account-Based Services: You can delete your account and associated data directly within the application. Account deletion permanently removes your data within 30 days.

Anonymous Services: Data is automatically deleted according to the retention periods specified above. No action is required.

How to Exercise Other Rights

To exercise any of your rights, contact us at [email protected]. We will respond within 30 days.

Right to Lodge a Complaint

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or your local supervisory authority.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption: Data is encrypted in transit and at rest
• Access controls: Strict access limitations to personal data
• Secure infrastructure: Industry-standard security practices
• Security monitoring: Ongoing monitoring and vulnerability management
• Password security: Passwords are stored securely and never in plain text

9. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We prioritize EU-based processing where available, but cannot guarantee that all processing occurs within the EEA. When transfers outside the EEA occur, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Data processing agreements with all recipients

10. Children's Privacy

Our Services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16.

If we become aware that we have collected personal data from a child under 16, we will delete that information promptly. If you believe we have collected data from a child, contact us at [email protected].

11. Cookies and Tracking

Our Services use only essential cookies required for the Services to function properly. These include cookies for authentication, security, and remembering your preferences.

We do not use:

• Advertising or marketing cookies
• Third-party tracking cookies
• Cookies that track you across other websites

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Services or by other means.

The "Effective date" at the top indicates when this policy was last updated. Continued use of the Services after changes constitutes acceptance of the updated policy.

13. Contact Us

For questions about this Privacy Policy or our data practices:

Datalytic AS
Thomas Heftyes gate 50
0267 Oslo
Norway
[email protected]