Privacy policy
We hold very little. For your own account data we are the controller. For the leads your quizzes collect we are only a processor — you decide what is asked, what is stored and who sees it, and you answer to those people. We do not sell data, we do not build profiles across customers, and we do not use your content or your leads to train models.
1Which data, and whose
| CATEGORY | EXAMPLES | OUR ROLE |
|---|---|---|
| Account data | Name, work email, role, workspace, sign-in events | Controller |
| Billing data | Company, VAT number, invoices. Card details go to our payment provider — we never see them | Controller |
| Lead data | Whatever your quiz asks a respondent, plus their answers and score | Processor |
| Product telemetry | Aggregate counts of features used. No respondent identifiers | Controller |
2Our two roles
Where the table says processor, you are the controller. You choose the questions, the fields, the retention and the recipients; you are responsible for having a lawful basis, for the notice you show respondents and for the accuracy of what you collect. We act only on your documented instructions, as set out in the DPA. We are not responsible for the content of your quizzes, the claims your results make, or how you use a lead afterwards.
3Why we hold it
Account and billing data: to perform the contract with your company and to meet Norwegian bookkeeping law. Telemetry and security logs: legitimate interest in keeping the service working and abuse out. No advertising, no data brokerage, no sale — ever, in any jurisdiction.
4Who else touches it
Only the service providers needed to run Sondr: infrastructure, transactional email, payments, and — where a workspace has AI switched on — a model provider. Each is bound by a written agreement no weaker than this one. The current list is published on the sub-processors page, and we give 30 days' notice before adding to it.
5AI and your own key
AI is on by default for new workspaces, and a workspace admin can switch it off for everyone at any time. While it is on, only the sources you add and the question text you write are sent to the model provider. Lead names, emails and answers are never sent.
Requests go to OpenAI. OpenAI does not train on data submitted through its API, but Sondr holds no zero-retention or regional-routing agreement with them, so a request can sit in their abuse-monitoring retention for a limited period on servers outside the EU. If you need zero retention or a particular region, connect your own OpenAI key on an account that has those terms.
A key you connect is encrypted with AES-256-GCM before it is stored, is used only for your own workspace's requests, and is never shown again beyond its last four characters. That traffic is then governed by your agreement with OpenAI rather than ours. AI output is a suggestion; you decide what to publish, and you own what you publish.
6How long we keep it
Lead data: for as long as your workspace exists, or the retention window you set under Settings → Data and privacy, whichever is shorter. Account data: 90 days after you close the workspace. Invoices: five years, because Norwegian bookkeeping law requires it. Deleted data also disappears from our backups as those age out.
7Rights requests
If you are a respondent, contact the company whose quiz you filled in — they hold the data and they decide. We will forward anything sent to us and help them answer, but we cannot act on their data without instruction, and this page gives you no claim against us: your rights are against the company that collected your data.
If you are a Sondr user, most of it is self-serve and needs no request at all: Settings → Data and privacy downloads everything the workspace holds, in JSON and CSV, and your profile page downloads your own personal record and closes your account. Anything else — a question, a complaint, a rights request we have not automated — reaches us through the help panel, and we respond within 30 days.
8Changes and contact
We may update this page. Material changes are emailed to workspace owners at least 30 days ahead.
Controller: Johnsen Development, org. 936 436 099, Norway — Instant Offer and Sondr are brands of that company, not separate legal entities. Requests reach us through the help panel in your workspace. You may lodge a complaint with Datatilsynet, the Norwegian Data Protection Authority.