We collect almost nothing

The data controller is HJC AS (org. no. 930 183 229), which runs HJ Consult and hjconsult.no. If you have a privacy question, write to hj@hjconsult.no.

We use Vercel Web Analytics to see how many people visit and which pages get read. It sets no cookies and builds no profile of you; visits are counted with an anonymous hash that is discarded daily. That is why we do not ask for consent: there is nothing to consent to.

A few choices are stored locally in your browser, not with us: which skin and which motion setting you picked, and (if you saved a brief) the link to your own brief, so we can offer it back next time. These are not cookies, nothing is sent to us, and the link forgets itself after 60 days. Clear your browser data and it is all gone.

The Living Brief is the AI assistant that helps you write a project brief. When you use it, we process:

• The text you type, and any attachments you upload.
• The brief that takes shape along the way: goals, architecture, phases and estimate.
• Your email address, if you choose to give it so we can send you the brief or get in touch.

Where it is processed

Your text is sent to Mistral AI through their EU endpoint (api.eu.mistral.ai) to generate replies. The brief is stored in our database with Supabase in Stockholm (eu-north-1). Server functions run in Vercel’s arn1 region in Stockholm. All of that happens inside the EU/EEA.

If you use your voice

Voice is the only thing on this site that can leave the EU/EEA, and all of it stays off until you turn it on. Dictation: your browser turns speech into text. Some browsers can do it on the device itself (then the audio never leaves it), while others send it to their own vendor, Google in Chrome or Apple in Safari. The panel you get before the microphone is switched on says which one applies to your browser. Read-aloud: when you turn it on, the text of the finished brief may be sent to ElevenLabs in the US, but never what you wrote yourself, your name or your email. The same panel says who generates the audio for you: if it is the browser’s own voice, nothing is sent anywhere. Both happen only on your explicit consent (GDPR art. 49(1)(a)), and you can switch them off again at any time. The text is shown either way.

For how long

We keep the brief until you ask us to delete it. Send an email and it is gone.

Legal basis

Your consent (you choose to use the Living Brief), and our legitimate interest in following up enquiries about projects.

If you write to us, we keep the email for as long as the conversation lasts and as long as we need it to follow up, usually until the project is finished. We do not share it with anyone.

Today the site loads no third-party scripts. If we ever want to measure ads from Meta or Google, they load only after you have said yes in the site’s consent sheet. Never before, and never by default. If you say no, nothing happens.

Under the GDPR and the Norwegian Personal Data Act you can:

• ask to see what we have stored about you
• have incorrect data corrected
• have your data deleted
• ask us to limit or stop processing
• receive your data in a common format
• withdraw your consent at any time

Send an email to hj@hjconsult.no and we will sort it out with no forms and no waiting.

If you disagree with how we handle your data, we would like to hear it first. You can also complain to Datatilsynet, opens in a new tab, the Norwegian Data Protection Authority.

If we change anything substantial, we update the date at the top of this page. We will not start collecting more without saying so.

HJC AS, org. no. 930 183 229, hj@hjconsult.no