Privacy policy
Version 1.1, effective 6 November 2026.
This policy explains how Celeri Technologies AS ("Celeri", "we") processes personal data as a controller: when you visit our website, book a meeting or contact us, apply for a job with us, work with us as a customer, or sign in to Celeri.
When a company uses Celeri for its own workers, that company decides how their data is used and is the controller. We process that data on its behalf under a data processing agreement. If you work for one of our customers, ask your employer first about your data. You can also write to us and we will pass your request on.
Controller: Celeri Technologies AS, org. no. 929 036 956, John Strandruds vei 10, 1366 Lysaker, Norway. Contact: legal@celeri.today.
What we process, why, and on what basis
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Website visits: necessary cookies. With your consent, Google Analytics: pages visited, device and browser, approximate location, a cookie id | Running the website. Understanding how it is used, only if you accept | Necessary cookies: legitimate interest (art. 6(1)(f)). Analytics: consent (art. 6(1)(a)) | Necessary cookies: see the cookie notice. Analytics: 2 months |
| Meeting bookings and enquiries: name, work email, phone, company, your message, meeting time | Answering you and following up | Legitimate interest (art. 6(1)(f)) | 12 months after our last contact, unless you become a customer |
| Job applications: name, email, phone, LinkedIn, application text and CV | Assessing your application | Consent (art. 6(1)(a)) | 6 months |
| Customer administrators and contacts: name, work email, phone, role | Running the customer relationship, support and notices | Contract (art. 6(1)(b)), legitimate interest | The customer relationship plus 12 months |
| Sign-in data: email, password (stored hashed), session, device, IP address, login times | Security and preventing misuse | Legitimate interest | 12 months |
| Billing data: company details, invoices, payment references | Invoicing and bookkeeping | Contract, legal obligation (Bookkeeping Act) | 5 years, as the Bookkeeping Act requires |
| Support requests and their content | Answering and fixing issues | Contract, legitimate interest | 24 months after the request is closed |
| Marketing email to business contacts: product news, with an unsubscribe link in every email | Keeping you informed about Celeri | Consent, or legitimate interest for customers and business contacts, with an easy opt-out | Until you unsubscribe |
| Notes from video meetings, taken with an AI note-taker | Keeping an accurate record of what was discussed and agreed | Legitimate interest. We tell you at the start of the meeting, and you can ask us not to take notes | As long as we keep the related customer or enquiry record (see above) |
We do not process special categories of personal data, and we do not sell personal data.
National identity numbers. We do not ask for your national identity number when you sign up. If your employer pays you through an Employer of Record, your profile asks for your national identity number and bank account, and we send them to that provider on your employer's behalf, because payroll and tax reporting require them.
Who we share it with
- Service providers that process data for us: OVHcloud (hosting, France), Vercel (website hosting and form handling), Resend (sends website form submissions to us by email), Google Workspace (email, calendar and documents), SendGrid (email), Twilio (SMS), Firebase (push notifications), Slack (support channels with customers), Granola (meeting notes).
- Google, for the fonts on our website (Google Fonts): your browser fetches the fonts directly from Google, which then receives your IP address.
- Google, for Google Analytics on celeri.today, only if you accept analytics cookies.
- OpenStreetMap: when a customer administrator searches for an address in the Celeri desktop app, the typed text goes to OpenStreetMap to find it.
- EML Money DAC, the issuer of the pre-paid card, when a customer uses Payments. We send the details needed to issue a worker's pre-paid card. EML runs its own identity checks and decides who may hold a pre-paid card.
- PayoutPartner (org. no. 922 810 699), when a customer pays its workers through it as Employer of Record.
- Authorities, when the law requires it.
EML and PayoutPartner are controllers of their own processing, under their own privacy notices.
Children
Celeri is not directed at children under 15.
Transfers outside the EEA
We host in the EU. Some providers above are based in the United States. Where data is transferred outside the EEA, we rely on an adequacy decision (including the EU-US Data Privacy Framework) or on Standard Contractual Clauses.
Your rights
You can ask for access, correction, deletion, restriction and a copy of your data, and object to processing based on legitimate interest. Where we rely on consent, you can withdraw it at any time; for analytics, use "Cookie settings" in the website footer. Write to legal@celeri.today. You can complain to Datatilsynet (the Norwegian Data Protection Authority), datatilsynet.no.
Changes
We publish changes on this page with a new version number and date.