What we keep, and why
Nothing yet — this is the first version. Future revisions name the sections that changed here, in one sentence, with the previous version linked beside it.
This notice covers the referral programme only. Patient data in the Noteless clinical product is governed by its own agreements and never enters this system.
Who is responsible
Noteless AS, organisation number 926 114 302, Nordnesgaten 12, 5005 Bergen, Norway, is the data controller for the referral programme. The programme is a separate system from the Noteless clinical product and never touches patient data.
What we collect, and why
For referrers: name, work email, country, specialty and city — to run your account and, only if you ask, to list you publicly. For referees: name, email and country, given on the landing page with consent — to attribute the referral and deliver the promised months. IP addresses are stored only as salted hashes, for fraud prevention.
What we never do
We do not sell or share personal data, we do not contact the colleagues you track by name, we do not publish anything about you without your explicit choice, and we never use referee details for marketing.
Where it lives
All data is stored and processed inside the EU. Email delivery runs through our EU-region provider; nothing leaves the EU.
Your rights
You may export everything we hold about you and close your account from Settings at any time. Referees may write to privacy@noteless.com to access or erase their data. Erasure requests are honoured immediately, except records we must keep for financial compliance.
What we keep, and for how long
Non-converted referee details are anonymised after 24 months. Financial-record retention follows Norwegian bookkeeping law.