Privacy Policy

Illeris Web AS is the data controller for personal data processed in connection with the Kustmr website, customer accounts, billing and support.

When you store customer, contact, deal, project or other business records in Kustmr, you are typically the data controller for that workspace data. We process that data on your behalf as a data processor. See our Data Processing Agreement.

Depending on how you use Kustmr, we may process:

• Account and profile information such as name, email address and workspace role
• Authentication and security information related to login, password reset and two-factor verification
• Workspace business data that you or your team enter into the product
• Billing and subscription information processed through our payment provider
• Support communications you send to us
• Basic technical and usage information needed to operate, secure and improve the service
• Limited first-party product-usage events (described below) used to understand onboarding, activation and retention

First-party product-usage events may include internal workspace and user identifiers, event type, controlled status or source fields, related internal record identifiers, timestamps and workspace-local calendar-day keys. They are not intended to include customer names, contact details, email addresses in event metadata, CRM descriptions, task or time-entry notes, passwords, authentication tokens, session cookies or full customer-record payloads.

We process personal data to:

• Provide, operate and maintain the Kustmr service
• Authenticate users and protect account access
• Manage trials, subscriptions and customer support
• Improve reliability, security and product quality
• Understand whether onboarding works, improve product usability, diagnose adoption problems and measure aggregate activation and retention
• Comply with applicable legal obligations

Our legal bases may include contract performance, legitimate interests and, where required, consent — depending on the processing activity and applicable law.

We retain personal data for as long as needed to provide the service, fulfil contractual and legal obligations, resolve disputes and enforce our agreements.

Workspace data is retained while your workspace remains active unless you delete supported records or request deletion in line with our product functionality and applicable law.

First-party product-usage events associated with a workspace may be deleted when that workspace is permanently deleted.

We use established service providers to host, operate, deliver email, process payments and support analytics on public marketing pages. These providers process data on our instructions and only as needed to deliver the service.

A current list is published on our Subprocessors page.

Some subprocessors may process data outside Norway or the EEA. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms provided by the relevant supplier.

If you are located in the EEA, UK or another jurisdiction with similar data-protection laws, you may have rights to access, rectify, erase, restrict or object to certain processing, and to data portability where applicable.

You may also have the right to lodge a complaint with your local supervisory authority. In Norway, this is Datatilsynet.

To exercise your rights, contact support@kustmr.com. If we process workspace data on your behalf, end-user requests relating to that data should generally be directed to your organisation as controller.

We apply technical and organisational measures designed to protect personal data. An overview of account security, workspace access and data controls is available on our Security page.

We use cookies and similar technologies on public marketing pages and for authenticated sessions. Details are described in our Cookie Policy.

Product activation and retention measurement is performed as first-party server-side processing inside Kustmr. It does not add a separate analytics cookie. Third-party tools such as Google Analytics and Contentsquare remain limited to the existing public marketing and account-setup surfaces described in the Cookie Policy. We do not sell customer data to advertisers.

We may update this Privacy Policy from time to time. Material changes will be reflected on this page with an updated date.

Questions about this policy can be sent to support@kustmr.com.