Last updated: 29 September 2026
This policy explains how Framvind AS processes personal data when you use framvind.no, chat or speak with our AI assistant, or use the Customer Loss Test. We are the controller of this data.
Contact details, your needs and requested follow-up are used to respond to your enquiry, deliver the website analysis and arrange meetings. For contact on behalf of a business, we rely on our legitimate interest in answering relevant enquiries (GDPR Article 6(1)(f)). Where you are personally the contracting party and request pre-contractual steps, Article 6(1)(b) applies. Security and abuse prevention rely on our legitimate interest in safe operation. Analytics and optional service loading rely on consent. An enquiry or meeting booking is not consent to newsletters or general email/SMS marketing.
These providers are involved in the website features. The information they receive depends on which features you use:
| Provider | Role |
|---|---|
| GoHighLevel | CRM, calendar and booking |
| ElevenLabs | Voice assistant (speech-to-text and speech synthesis) |
| Anthropic | AI model for chat and analysis |
| Netlify | Website hosting and temporary storage of submitted enquiries to ensure receipt and follow up delivery failures |
| Google Workspace | Email and calendar |
| Browserless | Technical rendering of websites in the Customer Loss Test |
| Automattic (WordPress.com mShots) | Fallback screenshot provider for the website address you ask us to analyse |
Providers and their subprocessors may process data outside the EU/EEA, including in the United States. Their data processing agreements describe transfer mechanisms, including EU Standard Contractual Clauses (SCCs). Contact ole@framvind.no for information about relevant recipients and a copy of applicable safeguards. We do not state that all processing takes place in the EU/EEA.
Netlify website functions run in IAD (Northern Virginia, United States). The Anthropic workspace is based in the United States, with global routing permitted. Netlify, Anthropic, ElevenLabs and GoHighLevel include data processing agreements in their standard terms.
Enquiry retention is assessed against the need for agreed follow-up, any customer relationship and statutory retention requirements. An automatic deletion period for CRM contacts has not yet been confirmed. Storage of new audio recordings in ElevenLabs was disabled on 29 September 2026. Transcripts are retained; the account currently has no automatic deletion period for them. Existing history was not deleted by this change. You can request access and deletion at ole@framvind.no.
Anthropic uses 30-day standard retention for API content in the reviewed workspace. Content may be retained longer for security investigations or legal requirements. Zero data retention is not enabled.
The technical receipt copy at Netlify is cleaned up automatically: forwarded enquiries are deleted after 30 days, and enquiries with unresolved or rejected forwarding after 90 days. Submissions in test and preview environments are kept separate from normal customer enquiries and deleted after 7 days. Technical abuse-prevention counters for this intake are deleted after 8 days. Deletion takes place at a subsequent automatic check. Any further contact information and appointments in the CRM follow the retention periods above.
When you submit an enquiry, the information is kept in the memory of the open browser tab so you can retry if an error occurs. This flow does not store your name, email address, phone number or needs description in permanent browser local storage.
The website check score and up to three findings are available without contact information. The rest of the report opens on the page after your name and email address have been received and stored with the request. Phone is optional, and an empty field is not stored as a number. Temporary reports and access tokens are valid for 24 hours and removed during subsequent automatic checks. Contact information follows the enquiry retention periods above.
You may request access, correction, deletion and restriction, and object to processing based on legitimate interests. You have the right to data portability where applicable. You may withdraw consent without affecting the lawfulness of earlier processing. Use “Privacy choices” for browser preferences and ole@framvind.no for other requests. We normally respond within one month; if an extension is needed, we explain why within that month. You may complain to the Norwegian Data Protection Authority. AI responses and website scores are guidance; they are not used to make decisions with legal or similarly significant effects on you.
Analytics is off until you choose to allow it. “Reject optional” and “Allow analytics” are available directly. The GoHighLevel calendar and ElevenLabs voice assistant ask separately before loading. You can use the website and contact us without allowing these services. Change your choices at any time using “Privacy choices” at the bottom of every page. Withdrawal stops further first-party analytics and reloads the page if the calendar or voice service has already been loaded. We cannot delete cookies on a provider’s own domain from our domain; use your browser settings for those.
With consent, Framvind counts page views, referring domains and feature use at Netlify. We do not use analytics cookies, visitor IDs or fingerprints derived from IP addresses and browser characteristics. Statistics are aggregated by day. Hosting transport and security logs may still contain IP addresses. DataFast has been removed from this website version; old DataFast cookies on our domain are cleared in the browser. No Meta or Google advertising pixels are installed.
A receipt for allowed purposes is stored at Netlify with a random ID, timestamp and notice version. It contains no name, email, IP address or conversation content. It is removed after 181 days during daily cleanup. Choices apply to this browser on this domain.