Privacy Policy
Last updated 28 July 2026
Ludyem AS, a company registered in Norway, is the data controller for personal data processed through our web applications. This policy explains what we collect, why, and what you can do about it.
What we collect
Account data
Your email address, and a password stored only as a cryptographic hash. If you sign in with a third-party provider, we receive your email address and name from that provider — never your password.
Content you create
Whatever you put into a product in order to use it. This belongs to you. We do not sell it, we do not share it, and we do not use it to train machine-learning models.
Payment data
Handled by Stripe. We receive confirmation that a payment succeeded, the plan you are on, and the last four digits and brand of the card for your receipts. We never receive your full card number.
Technical data
Basic request logs — IP address, browser type, pages requested, timestamps — kept briefly for security and troubleshooting. We use privacy-preserving analytics that do not set advertising cookies and do not build a profile of you across other websites.
Why we process it
- To provide the service — performance of our contract with you.
- To take payment and meet accounting duties — contract and legal obligation.
- To keep the service secure and working — our legitimate interest in operating it safely.
- To email you about your account — contract. Service emails such as receipts and security notices are not marketing and cannot be opted out of while your account is open.
We do not send marketing email unless you ask us to, and you can unsubscribe from it at any time.
Who we share it with
Only the service providers needed to run the service, each acting on our instructions:
- Stripe — payments, billing, and tax.
- Cloudflare — hosting, content delivery, and database storage.
- Our email provider — for transactional email such as receipts and password resets.
We do not sell personal data, and we do not share it with advertisers. We may disclose data where the law requires it.
Where it is stored
Data is processed on infrastructure that may be located outside Norway and the EEA. Where that happens, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
How long we keep it
- Account and content — while your account is open, then deleted within 30 days of closure.
- Invoices and payment records — retained as long as Norwegian accounting law requires, currently five years.
- Request logs — a short period, typically no more than 30 days.
Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. Email support@ludyemlab.com and we will respond within 30 days.
If you think we have handled your data wrongly, you can complain to the Norwegian Data Protection Authority (Datatilsynet) or to the authority where you live.
Cookies
We set the cookies needed to keep you signed in and to keep the service secure. We do not use advertising or cross-site tracking cookies, which is why you will not see a consent banner.
Children
Our products are not intended for children under 16, and we do not knowingly collect their personal data.
Changes
If we change this policy materially, we will email account holders before the change takes effect.
Contact
Ludyem AS · Organisation number 930 678 899 · Oslo, Norway
support@ludyemlab.com