Privacy Policy

Last updated: 10 August 2026

This policy explains what personal data avatarnorge collects, why we collect it, how long we keep it and how you can have it deleted. It covers our website and the customer-service software we operate on behalf of our clients, including integrations with Facebook Messenger and Instagram.

1. Who we are

avatarnorge is a digital services provider based in Norway. For questions about this policy or about your personal data, contact us at hello@avatarnorge.no.

When we operate a customer-service inbox on behalf of a client business, that client is the data controller for the conversations held with their customers, and avatarnorge acts as a data processor under their instructions. For our own website and our own social media accounts, avatarnorge is the controller.

2. Data we collect

Website

Information you send us voluntarily, such as your name, email address and the content of your message when you contact us.
If you apply to work with us through our application form, the business details you choose to give us, such as your company website, organisation number, how your customer enquiries are handled today and when you need the work done. We use them only to assess whether we are a good fit and to prepare our reply.
Basic technical data recorded by our web server, such as IP address and browser type, used to keep the site secure and available.

Messaging channels (Facebook Messenger and Instagram)

When you send a message to a Facebook Page or Instagram professional account that we operate, our software receives from Meta:

Your message content, including any attachments you choose to send.
Your platform-scoped user identifier. This is an identifier specific to that Page or account, not your Facebook or Instagram account ID.
Your public profile name and profile picture, where the platform makes them available.
Message metadata such as timestamps and delivery or read status.

We do not receive your email address, phone number, friend list, posts or any other part of your Facebook or Instagram profile, and we do not ask Meta for them.

3. Why we use it

To answer you. Replies may be produced by an automated assistant, by a human agent, or by a combination of both. You can ask to speak to a human at any point.
To keep conversation history, so that you do not have to repeat yourself and so the business can follow up.
To operate and improve the service, including diagnosing technical faults.

We do not sell personal data. We do not use the content of your messages to train third-party AI models, and we do not use it for advertising targeting.

4. Automated processing

Messages may be processed by an AI assistant in order to generate a reply. This assistance is limited to customer service. It does not make decisions that produce legal effects or similarly significant effects for you. A human can review and take over any conversation.

5. Legal basis

Under the GDPR, we rely on:

Performance of a contract or steps taken at your request, when you contact a business to ask about a product, an order or a service.
Legitimate interests, for keeping the service secure and functioning.
Consent, where required, which you may withdraw at any time.

6. Who we share it with

We share data only with service providers that are necessary to deliver the service, and only to the extent needed:

Meta Platforms, which delivers the messages themselves.
Our hosting provider, for servers located in the European Economic Area.
AI model providers, which process message content in order to generate a reply. Where transfers outside the EEA occur, they are covered by the European Commission's Standard Contractual Clauses.
The client business whose Page or account you contacted.

7. How long we keep it

Conversation data is retained for as long as needed to provide the service, and by default no longer than 24 months from the last message. Individual clients may configure a shorter period. Website contact enquiries are kept for up to 24 months.

8. Your rights

If you are in the EEA, you have the right to access your data, to correct it, to have it erased, to restrict or object to processing, and to receive it in a portable format. Write to hello@avatarnorge.no and we will respond within 30 days.

You also have the right to complain to a supervisory authority. In Norway this is Datatilsynet.

9. How to delete your data

Data deletion request

To have your conversation data deleted, send an email to hello@avatarnorge.no with the subject line "Data deletion request", and tell us which Facebook Page or Instagram account you messaged and the approximate date.

We will confirm within 30 days and delete the conversation, the associated identifier and any stored attachments, unless we are legally required to retain them.

10. Security

Data is transmitted over HTTPS and stored on access-controlled servers in the European Economic Area. Access tokens and credentials are stored encrypted. Access is limited to the people who need it to operate the service.

11. Children

Our services are intended for businesses and their adult customers. We do not knowingly collect data from children under 13. If you believe we have, contact us and we will delete it.

12. Changes to this policy

If we make material changes we will update the date at the top of this page.