Privacy

Who is responsible

[Company name], org. no. [organisation number], is the data controller for personal data in Orvian. Contact us at [email address].

What we store

• Account: email address, display name, password (stored only as a one-way hash, never in plain text) and which company the account belongs to.
• Content you add: projects, the building owner and contact details you enter, article lists and FDV documents with source links.
• Activity log: who did what and when (for example "project created"). We do not store IP addresses in the log.
• Cookies: one for sign-in, one for form security and one that remembers your language. All are strictly necessary. We use no tracking or advertising cookies.

Who we share it with

• Hosting: Hetzner Online GmbH, in EU data centres (Finland or Germany). All data is stored there.
• AI search: when you ask Orvian to find FDV documents, we send the article code, description, quantity and optionally the trade to Anthropic. Project names, building owners, addresses and user details are not sent. Please do not put personal data in article descriptions.
• Email: an email provider (currently Postmark) delivers notifications and password-reset links. They receive the email address and message text.
• Other companies: documents from verified contractors appear in the shared library for other Orvian users. Documents from building owners and private users, and documents you mark sensitive, are never shared.

How long we keep it

As long as the account is active. Deleted data remains in backups for up to six months (daily copies for 7 days, weekly for 4 weeks, monthly for 6 months). Ask for an account or project to be deleted at [email address].

Your rights

You can ask for access to, correction of, deletion of and a copy of the data we hold about you. You can complain to the Norwegian Data Protection Authority (datatilsynet.no).