Privacy Policy
Last updated: 24 July 2026
This policy covers both ryddat.com, the marketing website you're reading now, and the Ryddat application at app.ryddat.com, including Ryddat Documents.
Who we are
Ryddat ("we", "us") operates ryddat.com. If you have any question about this policy or your data, contact us at [email protected].
Cookies & analytics
We use PostHog, a privacy-conscious analytics provider, to understand how visitors use ryddat.com — which pages get visited and how the site is used, so we can improve it. PostHog only runs if you accept the cookie banner shown on your first visit; if you decline, no analytics script loads and no cookie is set. You can change your choice at any time using "Cookie settings" in the footer. We don't use advertising cookies or trackers, and PostHog data is never sold or used for marketing.
Your account
When you sign up for Ryddat Documents, we store your name, work email, a securely hashed version of your password (we never store the password itself), and — if you choose to provide it — your country. This data is stored in our database (Cloudflare D1) and used to operate your account, your organization, and the products you or your organization has paid for.
Documents you or your team upload through the product are stored in our file storage (Cloudflare R2) and are only accessible to members of your organization with the appropriate role.
Custom build inquiries
The "Describe what you need" form submits the details you enter directly to a server we control, which forwards them to our team by email through our email-delivery provider, Resend. We don't use the information for anything else.
Only your company name, your name, work email, and the brief itself are required. Your phone number is optional and only sent if you choose to fill it in. It isn't added to any marketing list.
How we use it
- To create and operate your account, your organization, and any products you've added.
- To process payment for paid products through our payment provider, Stripe, and to send you billing-related communications.
- We do not sell, rent, or share your data with third parties beyond the service providers listed on this page.
- We do not add you to a marketing or newsletter list without your separate consent.
Legal basis
For visitors in the EEA/Norway, our legal basis for processing your account and billing data is performance of our contract with you (GDPR Art. 6(1)(b)) — we need it to provide the product and process payment. Processing your details from the "Describe what you need" form relies on your consent (Art. 6(1)(a)), and our use of analytics relies on our legitimate interest in understanding and improving the site (Art. 6(1)(f)).
Retention
We keep your account and organization data for as long as your account remains active, and for a reasonable period afterward to comply with legal, tax, and accounting obligations (including records of payments processed through Stripe). You can ask us to delete your account and associated data at any time, subject to those obligations.
Your rights
Under the GDPR and the Norwegian Personal Data Act, you can ask us to access, correct, delete, or export the personal data we hold about you, or object to how we use it. Email [email protected] and we'll act on it. You can also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or your local supervisory authority.
Hosting & subprocessors
This website is hosted on Cloudflare Pages. As part of standard web hosting and content delivery, Cloudflare processes technical connection data (such as IP address) to serve you this page — see Cloudflare's privacy policy.
If you submit the "Describe what you need" form, those details are also processed by Resend, the service we use to deliver your submission to our team by email — see their privacy policy for how they handle it.
If you or your organization pays for a product, your billing details (such as card information) are processed directly by Stripe, our payment processor. We never see or store your full card details ourselves — see Stripe's privacy policy for how they handle it.
Your account, organization, and product data is stored in Cloudflare's database and file storage services, which operate under the same Cloudflare privacy policy linked above.
If you accept the cookie banner, this site also uses PostHog, our analytics provider, to understand how visitors use ryddat.com — see their privacy policy for how they handle it.
International transfers
Cloudflare operates a global network, and Resend, Stripe, and PostHog are all US-based companies, so your account, billing, request, or analytics data may be handled outside Norway or the EEA under their respective standard contractual safeguards.
Children
This site is intended for business use and is not directed at children.
Changes to this policy
If we change how this website handles data, we'll update the date at the top of this page. Material changes will be noted here.