Privacy Policy

1. Introduction

GetIntent ("we", "our", or "us") is operated by Getia AS, a company registered in Norway (Organization Number: 926 610 198). We are committed to protecting your privacy and processing your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable Norwegian data protection laws.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered landing page personalization service. It applies to our customers (who use GetIntent on their websites) and the visitors of those websites.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address (required for account creation and communication)
• Name (optional, for personalization)
• Authentication data via Google or GitHub OAuth (we do not store passwords for OAuth users)
• Payment information (processed securely through Stripe — we do not store full card details)
• Organization and website information

2.2 Visitor Data

To provide AI-powered personalization, we process information about your website visitors:

• UTM parameters (source, medium, campaign, term, content)
• Page URLs visited
• Browser user agent (for device and browser detection)
• Anonymized visitor identifiers (hashed, not personally identifiable)
• Conversion events and interaction data

We do not collect names, email addresses, or other directly identifying information from your website visitors. Visitor data is used solely to deliver personalization and analytics.

2.3 Content Data

To generate personalized content, we process:

• Brand voice guidelines and tone configuration
• Original website text and element selectors
• AI-generated content variations

2.4 Usage Data

We automatically collect:

• API request logs (endpoints accessed, timestamps)
• Dashboard usage and feature interaction
• IP addresses (for security and fraud prevention)

3. Legal Basis for Processing

We process personal data under the following lawful bases (GDPR Article 6):

• Contract Performance (Article 6(1)(b)): Processing necessary to provide our personalization service, manage your account, process payments, and fulfill our contractual obligations.
• Legitimate Interests (Article 6(1)(f)): Processing for service improvement, security, fraud prevention, and analytics. We balance our interests against your rights and freedoms.
• Legal Obligation (Article 6(1)(c)): Processing required to comply with tax obligations and legal requests from authorities.
• Consent (Article 6(1)(a)): For marketing communications and optional analytics cookies. You may withdraw consent at any time without affecting prior processing.

4. How We Use Your Information

• Personalization: To generate and deliver AI-powered content variations for your visitors
• Analytics: To provide conversion tracking, A/B test results, and performance insights
• Account Management: To create, maintain, and secure your account
• Billing: To process payments and manage subscriptions
• Support: To respond to inquiries and provide technical assistance
• Security: To detect and prevent fraud, abuse, and security threats
• Improvement: To analyze usage patterns and improve our service

We do not sell your data or visitor data to third parties. We do not use your content or brand guidelines to train AI models.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service providers: Third parties that help us operate our business (hosting, payment processing, analytics)
• AI providers: We use third-party AI APIs to generate personalized content. Content is processed for delivery only, not used for model training.
• Legal requirements: When required by law or to protect our rights
• Business transfers: In connection with a merger, acquisition, or sale of assets

For a full list of our sub-processors, see our Subprocessors page.

6. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access (Article 15): Request a copy of all personal data we hold about you.
• Right to Rectification (Article 16): Request correction of inaccurate or incomplete data.
• Right to Erasure (Article 17): Request deletion of your personal data ("right to be forgotten").
• Right to Restriction (Article 18): Request limitation of processing in certain circumstances.
• Right to Data Portability (Article 20): Receive your data in a structured, machine-readable format.
• Right to Object (Article 21): Object to processing based on legitimate interests or for direct marketing.

To exercise your rights, email [email protected]. We will respond within 30 days as required by GDPR. If your request is complex, we may extend this by an additional 60 days with notice.

7. Data Hosting and Transfers

All data is hosted on infrastructure located in the European Union. Where data is transferred outside the EEA (for example, to sub-processors), we ensure appropriate safeguards are in place:

• Adequacy Decisions: Transfers to countries recognized by the European Commission as providing adequate protection
• Standard Contractual Clauses: EU-approved contractual terms with our processors
• Supplementary Measures: Additional technical and organizational measures where required

8. Data Retention

9. Data Security

We implement comprehensive security measures including:

• TLS encryption for all data in transit
• Encrypted database storage at rest
• Role-based access controls
• Regular security audits and monitoring
• API key authentication with rate limiting

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, as required by GDPR Articles 33–34.

10. Cookies

We use cookies and similar technologies on our dashboard and website. For full details on the cookies we use and how to manage them, please see our Cookie Policy.

11. For Website Visitors

If you visited a website that uses GetIntent and have questions about your data:

• The website owner (our customer) is typically the data controller for your visit data
• Contact the website owner directly for questions about why content was personalized for you
• GetIntent processes only anonymized visitor signals — we do not collect your name, email, or other identifying information
• Contact us at [email protected] for questions about GetIntent's processing

12. Children's Privacy

GetIntent is a business service not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and/or a prominent notice on our service at least 30 days before changes take effect. Continued use of the service after changes constitutes acceptance of the updated policy.

14. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. For Norway, this is:

15. Contact

GetIntent is part of the GetPlatform group of services, operated by Getia AS, a company registered in Norway.