Privacy Policy

OmniScout ("we", "us", "our") is operated by Kaada Nordic MarTech, org. no. 936 289 835, Ytre Eiganesveien 13, 4022 Stavanger, Norway ("Kaada Nordic MarTech"). This policy explains what data we collect, why we collect it, and what rights you have over it. The data controller is Kaada Nordic MarTech, reachable at contact@nordicmartech.com.

1. Data We Collect

• Order and billing data: Email address, plan selection, payment status, and billing details processed by our payment provider when you start a trial or subscription.
• Account data: Name, email address, and password (hashed) when you create an account.
• Usage data: Searches you run, reports you generate, and pipeline activity — stored to provide the service to you.
• Lead data: Publicly available business information from websites, Google Business Profiles and public advertising. Audits do not identify individual website visitors.
• Branding data: Logo, brand colors, and custom domain settings you upload for branded reports.
• Cookies: Essential session cookies for authentication. See our Cookie Policy for details.

2. How We Use Your Data

• To provide and maintain the OmniScout service.
• To process your trial, subscription, and payments.
• To authenticate you and manage your account.
• To generate audit reports and outreach emails from data you search for.
• To share audit reports with opted-in business contacts and your agency users.
• To provide customer support and improve the platform.

3. Legal Basis (GDPR)

• Contract: Processing necessary to provide the service you signed up for, including payment processing.
• Legal obligation: Retention of billing records as required by Norwegian accounting legislation.
• Legitimate interest: Platform improvement and security.
• Consent: Non-essential cookies and marketing communications.

4. Data Retention

We retain your account data for as long as your account is active. Billing records are retained for the period required by Norwegian accounting law. Lead data and audit results are retained until you delete them or close your account. Upon account closure, all other data is deleted within 30 days.

5. Data Sharing

We do not sell your data. We share data only with sub-processors required to operate the platform — payment processing (Stripe), hosting, email delivery, and AI processing. A full list of sub-processors is available in our Data Processing Agreement.

6. Your Rights

• Access: Request a copy of your data.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing based on legitimate interest.
• Withdrawal: Withdraw consent for non-essential processing at any time.

To exercise any of these rights, contact us at contact@nordicmartech.com. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

7. Security

We use industry-standard encryption (TLS in transit, AES-256 at rest). Passwords are hashed. Card details are handled exclusively by Stripe and never touch our servers. Access to production data is restricted to authorized personnel under confidentiality agreements.

8. Changes to This Policy

We may update this policy as the platform evolves. Material changes will be communicated by email at least 30 days before taking effect.

9. Contact

For privacy questions or requests, contact us at contact@nordicmartech.com or see our imprint for our full postal address.