Privacy Policy
Last updated: 26 July 2026
This Privacy Policy explains how Selena Studio. Samonova (org. no. 934418891, Knutvegen 6, 6270 Brattvåg, Norway) — the data controller for Erebros — processes personal data. We comply with the EU/EEA General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (personopplysningsloven).
Contact for privacy matters: support@erebros.io.
Our privacy-by-design principle
Erebros is local-first. The app runs on your own device; your projects, code, prompts, files and AI outputs stay on your machine and are not sent to us. We only process the limited personal data needed to sell licences, run the website/demo, and support you.
What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Purchase data — email, name, billing country, order and licence details (collected via Lemon Squeezy) | Sell and deliver licences, validate entitlements, invoicing | Contract (Art. 6(1)(b)) |
| Payment data — card/payment details | Take payment | Processed by Lemon Squeezy; we never see or store full card numbers |
| Support data — the emails you send us | Answer your requests | Legitimate interest / contract (Art. 6(1)(b)/(f)) |
| Licence-validation data — licence key + a coarse machine identifier, when the app checks entitlements | Prevent abuse, enforce the licence | Legitimate interest / contract |
| Server logs — IP address, timestamp, request info for erebros.io and the hosted demo | Security, abuse prevention, operating the site | Legitimate interest (Art. 6(1)(f)) |
We do not run advertising trackers or sell personal data. The hosted demo is sandboxed and does not collect your files. (If we later add analytics, we will update this policy and ask for consent where required.)
Processors we use
- Lemon Squeezy, LLC — checkout, payments, tax, invoicing (Merchant of Record).
- Contabo GmbH — hosting of erebros.io and the demo (EU data centre).
- [email provider] — the mailbox behind support@erebros.io. [CONFIRM once chosen]
These processors act under agreements that require appropriate safeguards. Where data is transferred outside the EEA (e.g. Lemon Squeezy in the US), transfers rely on Standard Contractual Clauses or an equivalent safeguard.
Retention
We keep purchase and invoicing records as long as required by Norwegian bookkeeping law (generally 5 years), support emails as long as needed to help you, and server logs for a short period. Licence data is kept while your licence is active.
Your rights
You have the right to access, rectify, erase, restrict, or object to processing, and to data portability. To exercise any right, email support@erebros.io. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no).
Cookies
erebros.io uses only essential cookies/local storage needed for the site and demo to function (e.g. theme and session). No advertising or cross-site tracking cookies.
Children
Erebros is not directed to children under 16. We do not knowingly collect their data.
Changes
We may update this policy; the current version, with its date, is always at https://erebros.io/privacy.
Contact
Data controller: Selena Studio. Samonova · Knutvegen 6, 6270 Brattvåg, Norway · support@erebros.io