How we handle your information.

Who is the controller

Until the company (AS) behind AppDistillery is registered, the controller for the information collected on this website is:

Mats HagenOslo

Questions about privacy go to mats@appdistillery.ai.

What we collect on the website

We collect what you write or choose yourself, and what we need to answer you. We count visits with Vercel Web Analytics, without cookies and without names, email addresses or text. We also count a few events, such as a draft being sent, without linking them to you. The purpose is to see what works on the website, and the basis is our legitimate interest (Article 6(1)(f)). Vercel keeps the figures for at least 12 months and may keep them longer. No tracking or advertising.

When you book a call

Your name and email, your company if you give it, your choices under “What is it about?”, anything you write to the assistant, and the time you choose. If you came in through a link on the site or one of the tools, Mats also sees which one, and which questions the tool found unanswered. If you came in through a campaign link or from another website, Mats also sees which campaign and which website.

When you send a draft with a price

Your description, answers and comments, your name and email, and the company you choose. The company and its number of employees are looked up in the Brønnøysund Register; the number of employees sets the price of the assessment. If you came in through a link on the site or one of the tools, Mats also sees which one, and which questions the tool found unanswered. If you came in through a campaign link or from another website, Mats also sees which campaign and which website.

In your browser

If you use the assistant on Get started, a cookie keeps track of how much it has been used in the last 30 minutes, so it cannot be misused. The conversation, the agenda and what you filled in there stay in the browser until you close the tab. If you press “Pause motion”, the browser remembers your choice. The answers in the builder are in the address, so they stay in your browser history.

Technical data

Vercel, which runs the website, processes technical data such as your IP address to serve the site and stop misuse. The forms are processed on servers in the EU (Frankfurt).

Why, and on what basis

To answer your request, prepare the call and make the draft you ask for. The basis is that you ask us to, before any agreement (GDPR Article 6(1)(b)). We process technical data to keep the website secure, which is our legitimate interest (Article 6(1)(f)).

The AI assistant

On Get started you can describe what you need in your own words to an AI assistant. It says clearly that it is an AI. The assistant replies and suggests an agenda for the call, and the agenda is marked “Made with AI” when the AI wrote it. If you would rather not use it, you can book a call directly without writing anything to it.

Language model

From OpenAI, through Vercel’s AI Gateway.

Where the text is processed

OpenAI runs the language model in the EU. Vercel’s gateway may process the text outside the EU.

Storage and training

Neither keeps the text after answering or uses it to train models. The exception is text OpenAI flags as possible abuse: OpenAI may keep it under its own rules, possibly outside the EU.

Name, email and company

What you fill in on the form is not sent to the language model. When the language model suggests the agenda, it only learns how many people the company employs, as a range.

When you book or send

Your text, the conversation and the draft go to Mats by email with the booking request, and from Get started also your choices and the agenda. The calendar invite only gets a short summary, and from Get started a fixed agenda from your choices: the first step with its price and a possible path. The AI’s agenda points never go in the invite.

If you don’t send

Then we don’t store the text. What has already gone to the language model is handled as described above.

Who decides

The assistant makes no decisions about you. It helps you put the need into words and suggests answers you can correct, and the prices come from fixed rules, not from the AI.

Who processes data for us

We use Google Workspace for email and calendar. The booking request arrives as an email to Mats, and you usually receive a confirmation by email. When a time is booked, a calendar event is made with the time, your name and email address and a short summary – not the whole conversation. If you book on Get started, it also gets a fixed agenda from your choices, never the AI’s. You receive the invite by email.

Vercel

Runs the website and AI Gateway. Vercel also processes technical data and logs as an independent controller, under its own privacy notice.

OpenAI

The language model, in the EU (see The AI assistant).

Google

Email, calendar and Google Meet (Google Workspace).

Vercel, OpenAI and Google are US companies, and some processing may happen outside the EU/EEA: Vercel’s gateway, text OpenAI flags as possible abuse, and email and calendar at Google. The Brønnøysund Register is a public register we look up, not a processor.

Transfers outside the EU/EEA follow the data processing agreements with Vercel and Google: at Vercel, the EU Standard Contractual Clauses (SCCs); at Google, the EU-U.S. Data Privacy Framework. OpenAI is reached through Vercel’s AI Gateway.

How long we keep it

We keep information no longer than we need it.

Requests, drafts and conversations

Deleted after 12 months if no project follows.

If a project follows

For as long as the agreement runs, and under the accounting rules where they apply.

In your browser

The assistant usage counter for 30 minutes, the conversation, the agenda and the form until you close the tab, and the motion choice until you clear your browser data.

At OpenAI

Nothing after the answer, with the exception under The AI assistant.

Logs

Vercel keeps a log of requests to the website, which we can see for one day. AI Gateway also logs calls to the language model, without the text, and we can see the details of each call for 30 days. What the website itself writes to the log never contains your text, name or email.

Your rights

Email mats@appdistillery.ai, and we reply within one month.

• AccessYou can find out what information we hold about you.
• CorrectionIf something is wrong, we correct it.
• ErasureYou can ask us to delete the information about you.
• Restriction and objectionYou can ask us to restrict the use of your information, or object to it.
• Data portabilityYou can get the information you gave us in a common format.
• ComplaintsIf you think we break the rules, you can complain to Datatilsynet, the Norwegian Data Protection Authority.

Contact

Questions about privacy, or about anything on this page: mats@appdistillery.ai.

If we change how we handle information, we update this page and the date at the top.