Back to home

Privacy Policy

Last updated: 2026-05-28

1. Data controller

Doory is the data controller for personal data processed through this website.

Contact:

2. What data we collect

Form submissions: name, email, phone, business name and website URL.

Cookies and local storage: necessary cookies always; analytics and marketing cookies only with your consent.

Server logs: IP address, user agent and timestamp, kept for a short period for security and abuse prevention.

3. Legal basis (GDPR Art. 6)

Consent (Art. 6(1)(a)) — analytics and marketing cookies, marketing emails.

Legitimate interest (Art. 6(1)(f)) — fulfilling demo and waitlist requests, securing the service.

Legal obligation (Art. 6(1)(c)) — where required by law.

4. How we use data

To respond to inquiries, send product updates (with consent) and improve the service.

5. Sharing and sub-processors

We share data with the following sub-processors under data processing agreements: hosting and database (Lovable Cloud, including edge functions), email provider (e.g. Resend) and analytics (e.g. Google Analytics).

6. International transfers

Where data is transferred outside the EEA, we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards.

7. Retention

Form submissions: up to 24 months, unless there is an active relationship.

Cookie preferences: stored in your browser's local storage until you clear it.

Analytics: aggregated or anonymised after 14 months.

8. Your rights (GDPR)

You have the right to access, rectification, erasure, restriction, portability and objection, and to withdraw consent at any time.

You may lodge a complaint with Datatilsynet (the Norwegian Data Protection Authority) at datatilsynet.no.

9. Cookies

We use a small number of cookies and similar technologies. Necessary cookies are required for the site to function; analytics and marketing cookies are only set after explicit consent.

NameCategoryPurposeDuration
sb-*-auth-tokenNecessaryAuth sessionSession
doory_cookie_consentNecessaryStores cookie preferencesPersistent
_ga, _gidAnalyticsGoogle Analytics (consent only)Up to 2 years
_fbpMarketingFacebook pixel (consent only)90 days

10. Children

This service is not intended for children under the age of 16.

11. Security

Data is encrypted in transit. The database uses row-level security and strict access controls.

12. Changes to this policy

We will notify you of material changes via the site or by email.

13. Contact

For privacy questions, contact: