Privacy Policy
Version v2.4 · effective October 13, 2026
On this page
This policy explains what personal data Periscopify AS processes, in which role, why, where it is stored, and what rights you have under the GDPR.
1. Our two roles
- Controller for user accounts, contact persons, payments, security logs, support, website analytics and marketing. This policy covers that processing.
- Processor for data the customer enters or generates in its workspace on behalf of its business. That processing is governed by the Data Processing Agreement (/dpa), and the customer is the controller.
2. Data and sources
- Account data: email, username and organisation membership (from you or your employer).
- Technical session logs: IP address, login timestamps, browser and session tokens (collected automatically).
- API keys for CMS integrations: stored encrypted and never returned to the browser.
- Enquiries: information you submit through forms or to support.
- Payments: billing details are processed by Stripe; we never store card numbers.
- Website usage: page views and visit journeys, only with consent.
3. Purposes and legal basis
- Providing and operating the service (contract, GDPR Art. 6(1)(b)).
- Security, troubleshooting and abuse prevention (legitimate interest, Art. 6(1)(f)).
- Responding to enquiries and sending service notices (contract / legitimate interest).
- Bookkeeping and invoicing (legal obligation, Art. 6(1)(c)).
- Analytics and marketing only with consent (Art. 6(1)(a)).
4. Cookies
Necessary cookies are always active and are used for sign-in, language preference and storing your consent. Analytics (Google Analytics 4) and marketing load only after you consent, and consent can be withdrawn at any time via the icon in the bottom-left corner.
5. AI processing and human oversight
Peri Monitor uses AI services to analyse how businesses are presented in AI search. Results are decision support and are reviewed by people. No solely automated decisions with legal or similarly significant effects are made about you (GDPR Art. 22).
Periscopify does not use customer data for model training. Data sent to AI providers is processed through commercial API services in accordance with the applicable agreement, DPA and configuration at the provider. Periscopify does not opt in to sharing data for model training. Any exceptions or changes to provider terms are documented in the sub-processor overview.
6. Recipients and transfers outside the EEA
The primary production database and permanent customer data are stored in EU West (Ireland). Data is shared only with documented sub-processors. Transfers outside the EU/EEA use the European Commission's Standard Contractual Clauses (SCC, 2021) and a transfer risk assessment. See the Data Processing Agreement (/dpa) for the full list.
7. Retention
- Account data: for the duration of the customer relationship, then deleted within 30 days.
- Backups: deleted through ordinary rotation within 90 days.
- Enquiries and leads: up to 24 months after the last contact.
- Accounting records: 5 years under the Norwegian Bookkeeping Act.
8. Security
Row Level Security (RLS) for tenant isolation, TLS encryption in transit, encryption at rest, and encrypted storage of API secrets and passwords.
9. Your rights and complaints
You have the right to access, rectification, erasure, restriction, data portability, to object to processing and to withdraw consent. Contact hello@periscopify.com. You may lodge a complaint with the Norwegian Data Protection Authority (datatilsynet.no). Periscopify has not appointed a Data Protection Officer.
11. Language and versions
This document exists in Norwegian and English with identical content. In case of conflict, the Norwegian version prevails for customers with a Norwegian agreement or registered address in Norway, and the English version prevails for international customers.
- v2.4 (October 13, 2026): notification without undue delay, clarified processing chain, deletion deadlines, measurable SLA.
- v2.3 (October 13, 2026): first harmonised bilingual version.
Previous versions are available on request at hello@periscopify.com. Material changes are notified by email at least 30 days before they take effect.