Privacy and data handling in our services

Who operates the services

All three products are provided to clients by Datera ehf. (kennitala 541118-2330), which is the data controller for the personal data processed in them.

The products run on a shared platform operated by Versoria ehf. (gov. id. 591125-1680), a separate legal entity that acts as Datera's processor for hosting, database and authentication. Versoria in turn uses the infrastructure providers below as sub-processors. Versoria publishes its own terms, data-processing agreement and sub-processor list; where this page and that list differ, the Versoria list is the more detailed and more current source for infrastructure.

Infrastructure processors

Providers specific to one product (advertising platforms, AI model providers, web search) are listed in that product's section.

All personal data processed by the platform is stored within the European Economic Area. Where a product sends data to a provider outside the EEA, that is stated in the product's section together with the safeguard relied on.

Kvasir Dashboards

What it is. A reporting dashboard. Datera's clients sign in to see how their marketing is performing across Meta, Google Ads, Google Analytics and other channels. It is read-only: it displays performance data and cannot create, change, pause or delete anything in any connected advertising account.

Data read from Meta. With the account owner's authorisation, and only for accounts shared with Datera's business portfolio, Kvasir reads:

• Advertising performance: impressions, reach, clicks, spend, click-through and cost metrics, and conversion counts, at account and campaign level.

• Facebook Page performance: reach, impressions, post engagement, follows and unfollows, page views, video views, and recent posts with their engagement figures.

• Instagram performance: reach, views, accounts engaged, profile link taps, interactions and shares; recent posts with their engagement; and aggregated audience demographics (age bands, gender, city and country groupings). Meta provides these only in aggregate and only above a minimum audience size; no individual is identifiable.

What we do not read. No customer lists, no audiences, no messages or comments, no contact details, and no individual-level data about anyone who saw or interacted with an ad or post. No Meta user profiles.

Data read from other channels. Google Ads and Google Analytics performance data is read on the same basis: aggregated account, campaign and property-level metrics, with the client's authorisation, read-only.

What we store. Only configuration:

• which advertising account, Facebook Page, Instagram account or Google property a dashboard reports on: the account identifier and its display name

• dashboards, their layout, and notes written by Datera staff

• user accounts for the people who sign in: name, email address, role, and which clients or dashboards they may see

What we do not store. The performance figures themselves are not retained long-term. They are requested from Meta or Google each time a dashboard loads and held only briefly in memory to avoid repeat calls within a short window.

Credentials. The access credential the server uses to reach Meta is held in the hosting environment's secret store. It is never written to the database and never sent to a browser.

Who can see it. Access is by invitation only; there is no public registration. An administrator must add a person before they can sign in, and each person sees only the dashboards assigned to them. Datera staff see the dashboards of the clients they work for.

Retention. When a client relationship ends, we delete the user accounts for that client's people and remove the connections to their advertising, socials, analytics and other account and services, including the stored account identifiers and the credentials used to reach them and any notes written against those connections. Internal notes made by Datera staff are retained as our own business records for up to 24 months.. Performance data was never retained, as described above.

What we keep is the dashboard's structure and appearance: which cards are shown, which metrics are selected, saved filters, layout and branding. This is a template. It holds no performance data, no account identifiers and no personal data, and exists so that a returning client's setup can be restored rather than rebuilt.

Infrastructure processors. Kvasir Dashboards data is processed by Versoria ehf., Supabase, Railway and Sentry. Central authentication for all our services runs on Vercel and uses Resend to send sign-in and password-reset emails; these handle your account email address only, and never performance data or platform/channel credentials.

Data deletion

Kvasir Dashboards does not store personal data obtained from Meta. It reads advertising and content performance figures from Meta when a dashboard is opened and does not retain them. What it stores is configuration: which accounts a dashboard reports on, and the accounts of the people permitted to view it.

To request deletion of data held about you, or of a connection between your Meta assets and a Datera dashboard:

1. Email tryggvi@datera.is with the subject line "Data deletion request".

2. State the advertising account, Page, Instagram account or dashboard concerned, and the email address of your Kvasir user account if you have one.

3. We will confirm receipt within five working days and confirm in writing once deletion is complete, normally within 30 days of the request.

Removing a connection deletes the stored account identifier and its display name and removes the dashboard's access to that account. Deleting a user account removes the person's name, email address and access assignments. Because no performance data is retained, there is no historical Meta data to erase.

You can also remove Datera's access at source at any time by revoking the Datera business partner or app in your Meta Business settings; Kvasir then loses access immediately.

Mímir

What it is. An AI workspace for marketing and communications work. Clients and Datera staff use it to chat with AI models, to work with specialist assistants configured with the client's brand voice and strategy, and to run guided workflows. It is provided to each client as a separate workspace on the Versoria platform.

Data we process.

• Account data: name, email address, role, and which workspaces and assistants a person may use.

• Content you submit: messages, uploaded files and images, prompt-library entries, and anything you ask an assistant to write or analyse.

• Configuration written by Datera or the client: brand voice profile, strategy brief, sector playbooks and assistant instructions. This is business content, but it can contain names of people at the client.

• Memory notes: an assistant may keep short notes about your preferences and working context within one workspace so that later conversations do not start from zero. You can view and delete these at any time in your settings, and you can ask the assistant to forget something during a conversation.

• Usage records: which model was used, when, and how many tokens, kept for billing and capacity planning. Usage records do not contain message content.

• Audit log: sign-ins, administrative actions and access changes, with time and IP address, kept for security.

• Technical logs: errors are reported to Sentry with message content, prompt-library text and brand voice content removed before sending.

AI model providers. Your messages, attached files and the workspace configuration relevant to the request are sent to an AI model provider to generate a response. Which provider depends on the model chosen for the conversation; clients can use models from:

Transfers to these providers rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on Standard Contractual Clauses.

Datera staff may additionally evaluate models from other providers for quality and cost. Those models are not available to client accounts and client content is not sent to them.

Web search. When you ask an assistant to search the web, the search query it forms (not your conversation) is sent to Brave Search. Brave does not receive your identity. Location: United States.

Image generation. Where image generation is enabled in a workspace, the image prompt and any reference images you attach are sent to OpenAI/Gemini under the same terms as above.

What is stored, and where. Conversations, messages, memory notes, uploaded files and configuration are stored in the platform database and file storage in Ireland. Files sent to a model provider as part of a request are uploaded to that provider's temporary file store, referenced for the duration of the conversation and removed automatically afterwards; the provider does not retain them.

Who can see it. Access is by invitation only. Within a client workspace, each person sees only the assistants and conversations they are entitled to; conversations are private to the person who had them unless they are explicitly shared. Datera staff assigned to a client can see that client's workspace configuration and, where the client has enabled it, conversations, in order to maintain the assistants and support the client. Platform administrators at Datera and Versoria have technical access to the database for operation and support, under confidentiality obligations.

Training. Nothing you write in Mímir is used to train AI models, by us or by any provider.

Retention. Your conversations and files are kept while your account is active so that you can return to them. Workspace content is deleted within 18 months after a client relationship ends. Usage records are kept for seven years with our accounting records. Audit-log entries are kept for 24 months.

Data deletion

You can delete individual conversations yourself at any time, and export a copy of your data from your profile settings.

To delete your account, use Delete account in your profile settings, or email tryggvi@datera.is with the subject line "Data deletion request". When an account is deleted, sign-in access is removed immediately and your personal identifiers are replaced with a pseudonymous marker, so that records the workspace still needs (for example, who wrote a shared brief) no longer identify you. Your conversations and memory notes are deleted. We confirm receipt within five working days and completion within 30 days.

Client workspaces are deleted in full on request by the client's authorised contact, or at the end of the retention period above.

Birta

What it is. Datera's media-planning tool. Client organisations and Datera staff use it to build and manage media plans and campaign schedules.

Data we process. Account data (name, email address, role, organisation) and media-plan and campaign content, which is business data but may name people at the client or at media partners. Birta shares the Versoria platform database and authentication described above and uses the same infrastructure processors.

Retention and deletion. As for the other services: content is kept while the client relationship lasts and deleted within 18 months after it ends; account deletion and data requests go to tryggvi@datera.is with the subject line "Data deletion request".

Contact

Questions about any of the above: Tryggvi Freyr Elínarson, tryggvi@datera.is. Your rights, response times and how to complain to Persónuvernd are set out in our Privacy Policy.

Last updated: 8 September 2026