Privacy

Privacy statement

What data Kolaris collects, why, and what rights you have. We process data in line with the GDPR.

Last updated 30 July 2026.

1. Data controller

The controller of your data is Kolaris Mehammer (Kolaris), organisation number 927014076. You can reach us via the contact form.

2. What we process

  • Information about your business: company name, industry and the descriptions you give us during onboarding.
  • Images and captions: content you upload, or that we fetch from your Instagram and Facebook accounts with your consent.
  • Social media connection: access tokens and account and page identifiers that let us publish on your behalf. We never see your password.
  • Contact details: email address and optionally phone number.
  • Technical usage data: operational logs needed to deliver and secure the service.
  • App usage data (Kolaris Lens): performance and diagnostic data from the app, such as how long image processing takes, file sizes and image dimensions, as well as events like a campaign being created or edited. This is linked to your user account. We use it to improve and troubleshoot the app, never share it with third parties, and do not use it for tracking.

3. Purpose and legal basis

  • Delivering the service, that is creating and publishing marketing content for you. Basis: performance of a contract.
  • Connecting to and publishing on your Instagram and Facebook accounts. Basis: your consent, which you can withdraw at any time.
  • Operations, security and support. Basis: legitimate interest in providing a safe, stable service.
  • Improving the Kolaris Lens app by understanding which features work well and catching technical issues early. Basis: legitimate interest in making the service better for you.

4. Who we share data with

We never sell your data. We use selected processors: Meta (Instagram and Facebook), Google (Gemini and ad measurement), Supabase, Amazon Web Services, Cloudflare, Grafana and Proton. Some may process data outside the EEA, in which case transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses (SCC).

5. Retention

We keep your data for as long as you are a customer, plus a short period afterwards for accounting and documentation. Social media access tokens are deleted when you disconnect. You can request deletion at any time, see Data deletion.

6. Your rights

  • Access to the data we hold about you.
  • Correction and updating of data.
  • Deletion of data.
  • Data portability, that is receiving a copy of your data.
  • Withdrawing consent at any time.
  • Lodging a complaint with the Norwegian Data Protection Authority.

To exercise your rights, contact us via the contact form.

7. Cookies

Fonts are served directly from kolaris.no, no data is sent to a third party for this.

We use the Meta pixel (Facebook pixel) and the Google tag to measure the effect of our advertising on Instagram, Facebook and Google, that is, how many people visit the site after seeing an ad. They set cookies in your browser. They only load if you actively accept it in the consent window shown when you arrive on the site. If you decline, no such cookies are set. You can change your choice at any time via cookie settings, or by deleting cookies in your browser. Meta and Google are data processors for this information, see point 4.

8. Changes

We may update this statement. Material changes are announced here with a new date.

9. Contact

Questions about privacy? Use the contact form and we will respond.