Back to sign in

Privacy Policy

Version 1.4 — Last updated: April 15, 2026

1. Data Controller

Declaro AS, Org.nr: 937 221 584, Homans Vei 21, 1365 Blommenholm, Norway. Email: privacy@declaro.no

2. Data We Collect

Account data (name, email from Google/Microsoft sign-in, organization membership), customs declaration data (party information, goods descriptions, values), email ingestion data (sender/recipient addresses, attachments), and AI processing metadata (token usage, costs).

3. How We Use Your Data

To extract and classify customs declarations, assemble SAD forms, perform quality control, and communicate about your account. Legal bases: contract performance (Art. 6(1)(b)), legal obligation (Art. 6(1)(c)) for customs data, and legitimate interest (Art. 6(1)(f)) for email ingestion and AI monitoring.

4. Third Parties

We share data with: OpenAI (document extraction, US with SCCs and zero retention), Google/Microsoft (sign-in and email), Brevo (transactional email, EU), and Hetzner (hosting, Finland). All stored data remains within the EEA. We have set store: false on all OpenAI calls — your data is not used for model training.

5. Retention

Customs declarations: minimum 5 years (Customs Act § 7-5). Email logs: 1 year. User accounts: duration of active account. After expiry, data is automatically deleted including files on disk.

6. Your Rights

Under GDPR you have the right to access, rectification, erasure (limited by customs retention requirements), restriction, data portability, and objection. Administrators can export organization data directly from the platform. Contact privacy@declaro.no — we respond within 30 days.

7. Security

TLS/HTTPS encryption in transit, AES-256-GCM encryption for sensitive database fields, encrypted daily backups, VPN-protected admin access, firewall with intrusion detection, and role-based access control.

8. Cookies

Declaro uses only strictly necessary cookies: session authentication and language preference. No analytics, advertising, or tracking cookies. Consent is not required per ePrivacy Directive Art. 5(3).

9. Questions & Complaints

Contact privacy@declaro.no. You may also file a complaint with Datatilsynet (Norway) at datatilsynet.no or your local EU/EEA data protection authority.

Declaro AS — Org.nr: 937 221 584. Full privacy policy available on request.

Declaro