Privacy statement

Who is responsible

Kveck AS (org. no. 937 484 771) is the data controller for the processing described here. If you have any questions, email hei@kveck.no.

What we process, and why

Your access request

When you ask for access to Vera, we process your name, email and company, plus any sector or project details you choose to add, so we can follow up. We have no database — the form is delivered to us as an email. Legal basis: your consent and our legitimate interest in responding to you (GDPR art. 6(1)(a) and (f)).

Your conversation with Vera

What you type to Vera is processed to give you a source-based answer. The AI processing runs on Anthropic (Claude). You don't need to share sensitive personal data or trade secrets for Vera to help — please don't enter more than you're comfortable sharing. Legal basis: providing the service you asked for and our legitimate interest (art. 6(1)(b) and (f)).

Sharing your conversation with Kveck (testing period)

While Vera is in invited testing, your conversation is sent to Kveck automatically — when Vera hits a knowledge gap, and also for answered questions — so we can research what she couldn't answer and verify that her confident answers were actually right. The unlock screen tells you this before you start. Please keep it in mind while chatting, and avoid entering data you would not want shared with us. Legal basis: our legitimate interest in giving you correct answers and improving the service (art. 6(1)(f)).

Follow-up by email

If you leave your email to receive a researched answer, we use it only to send you that answer and any needed clarification.

Feedback

Feedback on Vera is optional. To make it actionable, the feedback includes the question and answer it refers to — the same sharing described under the testing period above. We ask for no personal data; anything you write in a free-text comment is up to you.

Analytics

We use Plausible Analytics (hosted in the EU, in Estonia) to count page views and understand roughly how the site is used. It is cookieless and aggregate, and sets no identifier that follows you across sites or days. Legal basis: our legitimate interest in understanding site usage (art. 6(1)(f)). Because it stores nothing on your device, it does not require consent under the Norwegian Electronic Communications Act § 3-15.

Cookies and local storage

We do not use tracking or advertising cookies, so there is no cookie banner.

Access cookie

A strictly necessary cookie is set when you unlock Vera with an invite code, so the app remembers that you are allowed in (kept for 30 days).

Local storage

Your browser stores a small flag (vera_unlocked) so it remembers you have unlocked Vera, and your Vera conversation (vera_historikk: the messages and the answers as they were shown, including their source labels) so you can pick up where you left off. The conversation history is stored only in your own browser — it is not sent anywhere by being stored, it disappears if you clear your browser data, and you can delete it at any time with “Start over” in the chat. Note that it remains on a shared computer until deleted.

Who we share data with

We use a small number of processors who handle data on our behalf under data-processing agreements: Resend (email delivery), Anthropic (AI processing of your Vera conversation), Plausible (cookieless analytics, EU) and Vercel (hosting). We never sell your data.

Some of these processors are based outside the EEA (for example in the US). Where that is the case, the transfer is covered by [appropriate safeguards — to be confirmed in legal review, e.g. EU Standard Contractual Clauses / the EU–US Data Privacy Framework].

How long we keep it

We keep enquiries and conversations only as long as we need them to follow up and improve Vera, then delete them. [Specific retention periods to be confirmed in legal review.] Plausible holds only aggregate figures that contain no personal data.

Your rights

You can ask us for access to, correction of, or deletion of your personal data, and you can object to or ask us to restrict our processing. Contact hei@kveck.no and we will help. You also have the right to complain to the Norwegian Data Protection Authority (Datatilsynet).

Contact

Questions about privacy or this statement? Email hei@kveck.no.