Privacy Policy

For personal data processed via aival.no, AIVAL AS is the data controller.

• AIVAL AS, org. no. 836 909 232
• Korsveien 14, 1368 Stabekk, Norway
• Email: jesper@aival.no
• Phone: +47 908 20 330

When you submit the contact form on aival.no, we process:

• Name (required)
• Phone number (required)
• Email (optional)
• Company (optional)
• Message (optional)
• Submission timestamp

If you start a conversation with the voice-agent demo (ElevenLabs widget) on the site, audio and a transcript are transmitted to ElevenLabs and our AI providers in order to generate real-time responses. The demo is only activated when you actively click to start the conversation.

We use Vercel Analytics for visitor statistics. Vercel Analytics does not use cookies and does not collect personally identifiable information.

We process personal data on the following legal bases:

• Responding to enquiries and preparing offers: legitimate interest and pre-contractual steps (GDPR art. 6(1)(b) and (f)).
• Providing the voice-agent demo: your consent when you initiate the conversation (GDPR art. 6(1)(a)).
• Operating, securing and improving the website: legitimate interest (GDPR art. 6(1)(f)).

We do not use your data for marketing without your explicit consent, and we never sell personal data.

We use the following sub-processors to run aival.no and deliver our services:

• Vercel Inc. (USA) – website hosting and analytics
• Make.com (Celonis SE, EU) – contact-form processing and routing
• ElevenLabs Inc. (USA) – voice-agent demo on the site
• Language model providers (Anthropic, OpenAI) – AI-driven dialogue
• Google Workspace (USA) – email and calendar

We do not disclose personal data to other third parties unless required by law.

Some sub-processors are established in the United States. Transfers take place under the European Commission’s Standard Contractual Clauses (SCCs) and, where applicable, under the EU–US Data Privacy Framework.

• Contact-form enquiries: up to 24 months from last contact, after which the data is deleted.
• Voice-agent conversations: up to 90 days with ElevenLabs.
• Vercel Analytics: aggregated and anonymised, no long-term retention of individual visits.

You have the right to:

• access the data we hold about you
• rectify inaccurate data
• have your data erased
• restrict processing
• data portability
• object to the processing
• withdraw consent at any time

Send requests to jesper@aival.no. We respond within 30 days. You may also lodge a complaint with the Norwegian Data Protection Authority (datatilsynet.no).

We use TLS encryption for all data in transit, role-based access control following the principle of least privilege, and logging of access to personal data. Personal-data breaches are reported to the Norwegian Data Protection Authority within 72 hours.

When AIVAL delivers SMS and voice-agent services to clients (such as real-estate agencies and financial-services providers), we process personal data on behalf of the client under a separate data processing agreement.

In those cases the client is the data controller and determines the purpose of the processing. AIVAL:

• processes only data for which the client has obtained consent
• never uses the data for our own purposes, marketing or product development
• never uses the data to train or fine-tune AI models
• deletes the data within 30 days of contract end, and conversation logs within 90 days at the latest

Requests about how a specific client processes your data must be directed to that client as the data controller.

aival.no does not use any tracking or marketing cookies. Technical cookies may be used for basic functionality, such as remembering your language preference.

We may update this policy when services or regulations change. Material changes will be announced on the site at least 30 days before they take effect. The date of the most recent update is shown at the top of the page.