Privacy Policy
- Legal entity: Volum Invest AS
- Organisasjonsnummer: 937 601 883
- Registered address: Beiavegen 21b, 3540 Nesbyen, Norway
- Contact for privacy matters: sheio@voluminvest.com
Last updated: 2026-05-25
1. Who we are
Volum Invest AS (Org.nr 937 601 883), with registered address Beiavegen 21b, 3540 Nesbyen, Norway, is the data controller responsible for processing your personal data when you visit our website or subscribe to our quantitative signal service.
If you have questions about how we process your personal data, you can reach us at sheio@voluminvest.com.
2. What personal data we collect
We collect the following categories of personal data:
| Category | Examples | How we collect it |
|---|---|---|
| Account data | Full name, email address, password (hashed) | You provide it when you sign up |
| Billing data | Billing address, payment method details (card number handled by Stripe — we do not store full card numbers) | You provide it at checkout |
| Usage data | Pages visited, features used, login timestamps, IP address, browser type, device type | Automatically when you use the site |
| Communication data | Emails you send us, support requests, feedback | When you contact us |
| Technical / cookie data | Session identifiers, preferences | Automatically via cookies (see Section 8) |
We do not collect special categories of personal data (such as health, political opinions, or biometric data).
3. Why we process your data and our legal basis
Under the GDPR, we must have a legal basis for each type of processing. The table below sets out our purposes and corresponding legal bases:
| Purpose | Data used | Legal basis |
|---|---|---|
| Providing the signal service and managing your subscription | Account data, billing data | Performance of contract (Art. 6(1)(b)) |
| Sending service-related communications (e.g. signal delivery, account notifications, subscription confirmations) | Account data | Performance of contract (Art. 6(1)(b)) |
| Sending marketing communications (e.g. newsletters, product updates) | Account data | Consent (Art. 6(1)(a)) — you can withdraw at any time |
| Improving and securing the website | Usage data | Legitimate interest (Art. 6(1)(f)) — our interest in maintaining a functional, secure service |
| Analysing usage patterns to improve the service | Aggregated, anonymous usage statistics | Legitimate interest (Art. 6(1)(f)) |
| Handling support requests | Communication data, account data | Performance of contract / legitimate interest |
| Complying with legal obligations (e.g. bookkeeping, tax) | Billing data | Legal obligation (Art. 6(1)(c)) — Norwegian bookkeeping law (bokføringsloven) |
4. Third parties we share data with
We share your personal data with the following third parties, who process it on our behalf or as independent controllers:
| Recipient | Purpose | Data shared |
|---|---|---|
| Outseta | Membership management, authentication, email communications, CRM | Name, email, subscription status, login activity |
| Stripe | Payment processing | Name, email, billing address, payment method details |
| Webflow | Website hosting (landing pages and content) | IP address, usage data |
| Render | Backend application hosting | IP address, account identifiers, usage data |
| Plausible Analytics | Privacy-friendly, cookieless website analytics | Aggregated, anonymous usage statistics (no cookies; IP addresses are not stored) |
We do not sell your personal data to anyone.
5. International data transfers
Some of our service providers (Outseta, Stripe, Webflow, Render) are based in the United States. When your data is transferred outside the European Economic Area (EEA), we ensure it is protected by appropriate safeguards:
- Transfers to the United States are covered by the EU–U.S. Data Privacy Framework where the recipient is certified, or by Standard Contractual Clauses (SCCs) approved by the European Commission.
- We verify that each provider maintains adequate data protection measures before sharing data.
You can request a copy of the relevant transfer safeguards by contacting us at sheio@voluminvest.com.
6. How long we keep your data
We retain your personal data only as long as necessary for the purpose for which it was collected:
- Account and subscription data: retained for the duration of your subscription plus 30 days after cancellation, to allow for reactivation and handle any disputes.
- Payment and invoicing data: retained for 5 years after the transaction, as required by Norwegian bookkeeping law (bokføringsloven § 13).
- Usage and analytics data: retained for up to 24 months, then anonymised or deleted.
- Communication data (support emails): retained for up to 24 months after the issue is resolved.
- Marketing consent records: retained for as long as you remain subscribed to marketing, plus 12 months after withdrawal for documentation purposes.
When data is no longer needed, it is securely deleted or anonymised so it can no longer be linked to you.
7. Your rights
As a data subject, you have the following rights. To exercise any of them, contact us at sheio@voluminvest.com.
- Right of access (Art. 15): Request a copy of the personal data we hold about you.
- Right to rectification (Art. 16): Ask us to correct inaccurate data or complete incomplete data.
- Right to erasure (Art. 17): Ask us to delete your personal data, subject to legal retention obligations.
- Right to restriction (Art. 18): Ask us to temporarily stop processing your data in certain circumstances.
- Right to data portability (Art. 20): Request your data in a structured, machine-readable format.
- Right to object (Art. 21): Object to processing based on legitimate interest. If you object to direct marketing, we will stop immediately.
- Right to withdraw consent: Where processing is based on consent (e.g. marketing emails), you can withdraw at any time by clicking unsubscribe in any email or contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal.
We will respond to your request within 30 days. If we need more time, we will inform you within that period.
If you are unsatisfied with how we handle your request, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet):
- Address: Datatilsynet, Postboks 458 Sentrum, 0105 Oslo
- Email: postkasse@datatilsynet.no
- Web: www.datatilsynet.no
8. Cookies
Cookies are small text files stored on your device. We keep our use of cookies to a minimum:
| Type | Purpose | Examples |
|---|---|---|
| Strictly necessary | Login session, security | Set by Outseta and the application itself |
| Functional | Remembering preferences (e.g. language) | Set by the site |
For website analytics we use Plausible Analytics, a privacy-friendly service that uses no cookies and collects no personal data. Because we do not set any non-essential, advertising, or tracking cookies, no cookie-consent banner is required to use the application. We do not serve targeted ads.
If we introduce a service in future that sets non-essential cookies, we will add a consent mechanism that blocks those cookies until you accept, and update this policy accordingly.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- All data transmitted between your browser and our website is encrypted using TLS/SSL.
- Passwords are stored in hashed form and are never stored in plain text (handled by Outseta).
- Payment card details are processed and stored by Stripe, which is PCI DSS Level 1 certified. We do not have access to your full card number.
- Access to personal data within the company is restricted to authorised personnel only.
No system is completely secure. If you become aware of any security issue, please contact us immediately at sheio@voluminvest.com.
10. Children
Our service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will delete it promptly.
11. Changes to this policy
We may update this privacy policy from time to time to reflect changes in our practices, service providers, or legal requirements. When we make material changes, we will notify you by email or by posting a notice on our website. The date of the most recent revision is shown at the top of this document.
We encourage you to review this policy periodically.
12. Contact
If you have any questions about this privacy policy or our data practices, please contact us:
- Volum Invest AS (Org.nr 937 601 883)
- Beiavegen 21b, 3540 Nesbyen, Norway
- Email: sheio@voluminvest.com