Privacy.
Last updated: February 2026
This is the privacy policy for the digital twin of Nickolass on this site. It follows the same strict confidentiality and GDPR guidelines as Nettpilot.no, with extra detail specific to AI conversations.
Data controller
Nettpilot AS, Tosobakken 11, 3520 Jevnaker, Norway. Phone: +47 400 43 101 — email via the contact form on the homepage or nettpilot.no/kontakt.
What we collect
When you chat with the digital twin we store: your message, the model's reply, the chosen language (NO/EN), a randomly-generated session ID (UUID), and a timestamp.
Your IP address is held only in memory for rate-limiting and is never persisted to the database.
If you submit the contact form, we forward name, email and message to Nickolass via Postmark. If you chatted with the twin, you can choose to attach the conversation (checkbox, on by default).
Voice input: when you use the microphone, the recording is sent to OpenAI Whisper for transcription. We do not store the audio — only the transcribed text becomes part of the chat.
Contact-form submissions are automatically summarised in one sentence by an AI model (Claude) so Nickolass can see the need at a glance. The summary is stored with the submission.
Why we process this
Legitimate interest (GDPR art. 6(1)(f)): operating and improving a free self-service tool and preventing abuse.
Consent (GDPR art. 6(1)(a)) when you submit the contact form so we can reply.
How long we keep it
Chat messages are auto-deleted after 90 days via a MongoDB TTL index.
Contact-form submissions are kept as long as needed to answer and honour any agreement — typically up to 3 years.
You can request export or deletion sooner — see «Your rights» below.
AI services and processors
The model itself is Anthropic's Claude Sonnet 5.5, served via Emergent as a proxy. Voice synthesis (when enabled) is provided by ElevenLabs. Email delivery is by Postmark.
This means message text is transmitted to the US. The processors operate under EU-EEA Standard Contractual Clauses (SCCs).
Only key Nettpilot personnel and our processors can access the conversations, and the content is not used to train general-purpose models.
Your rights (GDPR)
You have the right of access, rectification, erasure, portability and objection.
Access / export: use the «Export» button in the chat, or GET /api/chat/export/{session_id}.
Erasure: use the «Delete chat» button in the chat, or DELETE /api/chat/session/{session_id}.
For data from the contact form, or to lodge a complaint with the Norwegian DPA (Datatilsynet) — contact us at +47 400 43 101 or via nettpilot.no/kontakt.
Cookies
No tracking cookies. We store your language choice (NO/EN) locally in your browser (localStorage). That's it.
Security
All traffic is over HTTPS. The database runs inside a private Kubernetes cluster. API keys live in environment variables, never in source code.
Cheers, Nickolass Jensen — Nettpilot AS