Privacy

Privacy statement

What data Kolaris collects, why, and what rights you have. We process data in line with the GDPR.

Last updated 20 June 2026. Draft for review: fill in the legal company name, organisation number and address before publishing, and have the text reviewed by a lawyer.

1. Data controller

The controller of your data is [Legal company name] (Kolaris), organisation number [ORG.NR], [address]. You can reach us via the contact form.

2. What we process

  • Information about your business: company name, industry and the descriptions you give us during onboarding.
  • Images and captions: content you upload, or that we fetch from your Instagram and Facebook accounts with your consent.
  • Social media connection: access tokens and account and page identifiers that let us publish on your behalf. We never see your password.
  • Contact details: email address and optionally phone number.
  • Technical usage data: operational logs needed to deliver and secure the service.

3. Purpose and legal basis

  • Delivering the service, that is creating and publishing marketing content for you. Basis: performance of a contract.
  • Connecting to and publishing on your Instagram and Facebook accounts. Basis: your consent, which you can withdraw at any time.
  • Operations, security and support. Basis: legitimate interest in providing a safe, stable service.

4. Who we share data with

We never sell your data. We use selected processors: Meta (Instagram and Facebook), Google (Gemini), Supabase, Amazon Web Services, n8n, Cloudflare and Proton. Some may process data outside the EEA, in which case transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses (SCC).

5. Retention

We keep your data for as long as you are a customer, plus a short period afterwards for accounting and documentation. Social media access tokens are deleted when you disconnect. You can request deletion at any time, see Data deletion.

6. Your rights

  • Access to the data we hold about you.
  • Correction and updating of data.
  • Deletion of data.
  • Data portability, that is receiving a copy of your data.
  • Withdrawing consent at any time.
  • Lodging a complaint with the Norwegian Data Protection Authority.

To exercise your rights, contact us via the contact form.

7. Cookies

The site uses no cookies for tracking or marketing. Fonts load from Google Fonts, which may receive your IP address as part of the technical delivery.

8. Changes

We may update this statement. Material changes are announced here with a new date.

9. Contact

Questions about privacy? Use the contact form and we will respond.