Your operational data stays tied to your account.

1. Controller and contact

Nord Skan AS is the controller for personal data processed through WorkWindow. Privacy requests can be sent to post@nord-skan.com.

2. Data we process

• Account identity: email address, account identifiers and sign-in timestamps.
• Optional profile data: company, work role and verified mobile number.
• Operational data: saved coordinates, worksite names, operation types and limits.
• Monitoring data: status changes, alert preferences and delivery results.
• Billing data: plan, subscription status, invoice references and payment events. Full card details are handled by Stripe and are not stored by WorkWindow.
• Technical data: device/browser information, security logs and push-notification registration metadata.

3. Purposes and legal bases

Account, worksite, forecast and billing data are processed to provide the requested service and manage the customer contract. Optional email, push and SMS settings are processed at your request and can be disabled. Limited logs are processed for security, reliability and abuse prevention. Accounting records are retained where required by law.

4. Service providers and forecast sources

WorkWindow uses Supabase for account and database services, Vercel for hosting and operational logs, Stripe for billing, Resend for email delivery and Twilio for SMS verification and alerts. Coordinates are used with MET Norway forecast services, and the map loads tiles from OpenStreetMap or the configured tile provider. Providers may process limited technical data under their own security and transfer safeguards.

5. Retention

Account, saved worksite and monitoring data are kept while the account is active and removed when the account is deleted, except where retention is required for accounting, fraud prevention or legal claims. Operational logs are retained according to the configured provider retention periods and are reviewed for minimisation.

6. Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction, objection or portability. A signed-in user can download a machine-readable data copy and request account deletion directly in WorkWindow. You may also complain to the Norwegian Data Protection Authority (Datatilsynet).

7. Security and changes

WorkWindow uses passwordless authentication, private row-level access and restricted server credentials. No online service is risk-free. Material changes to this notice will be communicated in the application before they take effect.