Privacy Policy
Last updated: 2026-05-28
1. Data controller
Doory is the data controller for personal data processed through this website.
Contact:
2. What data we collect
Form submissions: name, email, phone, business name and website URL.
Cookies and local storage: necessary cookies always; analytics and marketing cookies only with your consent.
Server logs: IP address, user agent and timestamp, kept for a short period for security and abuse prevention.
3. Legal basis (GDPR Art. 6)
Consent (Art. 6(1)(a)) — analytics and marketing cookies, marketing emails.
Legitimate interest (Art. 6(1)(f)) — fulfilling demo and waitlist requests, securing the service.
Legal obligation (Art. 6(1)(c)) — where required by law.
4. How we use data
To respond to inquiries, send product updates (with consent) and improve the service.
5. Sharing and sub-processors
We share data with the following sub-processors under data processing agreements: hosting and database (Lovable Cloud, including edge functions), email provider (e.g. Resend) and analytics (e.g. Google Analytics).
6. International transfers
Where data is transferred outside the EEA, we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards.
7. Retention
Form submissions: up to 24 months, unless there is an active relationship.
Cookie preferences: stored in your browser's local storage until you clear it.
Analytics: aggregated or anonymised after 14 months.
8. Your rights (GDPR)
You have the right to access, rectification, erasure, restriction, portability and objection, and to withdraw consent at any time.
You may lodge a complaint with Datatilsynet (the Norwegian Data Protection Authority) at datatilsynet.no.
9. Cookies
We use a small number of cookies and similar technologies. Necessary cookies are required for the site to function; analytics and marketing cookies are only set after explicit consent.
| Name | Category | Purpose | Duration |
|---|---|---|---|
| sb-*-auth-token | Necessary | Auth session | Session |
| doory_cookie_consent | Necessary | Stores cookie preferences | Persistent |
| _ga, _gid | Analytics | Google Analytics (consent only) | Up to 2 years |
| _fbp | Marketing | Facebook pixel (consent only) | 90 days |
10. Children
This service is not intended for children under the age of 16.
11. Security
Data is encrypted in transit. The database uses row-level security and strict access controls.
12. Changes to this policy
We will notify you of material changes via the site or by email.
13. Contact
For privacy questions, contact: