Privacy
Who is responsible
The controller is Tesseract. Contact: ivan@tesseract.no.
What we store
What you type in the form, or give ARC Assistant to send for you: company name, reg. no. (optional), country, contact person, e-mail, phone, suppliers, size, sales and free text, and the time you sent it. We do not store your IP address. To stop abuse the server keeps a one-way hash of your IP address in memory for at most one day; it is never written to disk.
Why
Only to answer your request for access to ARC and, if it comes to that, to enter into an agreement with you (GDPR art. 6(1)(b): steps at your request before a contract).
Bot protection
The form uses Cloudflare Turnstile to tell people from bots. When the form loads, your browser talks to Cloudflare (challenges.cloudflare.com), which sees your IP address and technical browser signals for this check. We get back only a pass or fail, which we check once and then delete. Our basis is our legitimate interest in keeping the form free of spam (GDPR art. 6(1)(f)). Cloudflare, Inc. (USA) processes this under the EU-US Data Privacy Framework; Cloudflare's own terms: Turnstile privacy addendum.
Chat assistant
If chat is offered and you click «Chat with us», the page loads ARC Assistant. It is an AI, not a person. The chat is run for us by Botpress (Botpress Technologies Inc., Canada/US) as our processor, and Botpress uses AI model providers to write the answers. Nothing loads from Botpress until you click.
- What you write in the chat is processed by Botpress. Please don't share sensitive data (health, passwords, ID or card numbers) or details about other people.
- If you ask the assistant to send a request for access, it sends us only the same details as the form, and only after you agree to the terms. We don't receive the chat transcript.
- Chat transcripts: the assistant deletes each conversation at Botpress within 24 hours of its last message, and 10 minutes after it sends us your request. Botpress keeps its technical logs for up to 30 days.
- To write the answers, Botpress sends what you type to OpenAI (USA), its AI model sub-processor. How long OpenAI may keep those inputs follows Botpress's sub-processor terms: trust.botpress.com.
- Data region: Botpress processes the data in the United States. Transfers outside the EU/EEA rely on the EU Standard Contractual Clauses (Commission Decision (EU) 2021/914) in Botpress's Data Processing Agreement, as amended there for Swiss and UK transfers. Botpress lists its sub-processors at trust.botpress.com.
- Our basis is steps at your request before a contract (GDPR art. 6(1)(b)), the same as the form.
Who sees it
Only us. The details are stored on our own server at Hetzner in the EU, and a copy is e-mailed to us through our mail provider, Migadu (Switzerland; Switzerland has an EU Commission adequacy decision, so the transfer needs no extra safeguards). We do not share them and do not use them for marketing.
How long
If no agreement follows, we delete the request 12 months after our last contact. If one does, the details move into your customer record with us and the request is deleted here. A request that fails the bot check is deleted after 30 days.
No tracking
This site sets no cookies and uses no analytics. See cookies.
Your rights
You can ask to see, correct or delete your details at any time by writing to ivan@tesseract.no. You can also complain to your data protection authority (in Norway: Datatilsynet).