Privacy notice

Mahiout Solutions (OrgMem), Oslo, Norway, is responsible for your information. Contact privacy@orgmem.com about your data or this notice.

We use your name, work email, organization, and any other details you submit to evaluate your application and contact you about early access. We also process technical information such as IP address, browser information, and request timestamps to operate the site and prevent abuse. Please avoid including sensitive information in your application.

With your permission, PostHog measures visits, referral and campaign information, and application steps using a random browser identifier. If you apply, this visit information is linked to your application. Names, email addresses, and application answers are not sent in browser analytics events. Rejecting analytics does not prevent you from applying.

We rely on our legitimate interests to handle enquiries and protect the site, and on your consent for optional analytics. Hosting, email, and analytics providers help us process this information. Where processing involves transfers outside the EEA, we use applicable transfer safeguards; contact us for details.

To detect probing and unusual request patterns, we also collect limited server-side security records: IP address, approximate country and network, time, page category, request method, response status, and response size when declared. These records let us count repeat requests from the same address over seven days. They do not identify a person or establish malicious intent. This collection operates regardless of your analytics choice, uses no browser tracking identifier, and is not linked to applications or marketing analytics.

Cloudflare transfers these records through a queue with a maximum 24-hour retention period to a separate AWS security log configured to expire records seven days after the request. AWS normally completes deletion within 72 hours after expiry, occasionally later. Access is limited to staff responsible for security. We do not include full URLs, query strings, browser headers, or page or form contents in this record. Our hosting providers also maintain their own connection logs under their separate controls.

We keep applications while relevant to evaluating and following up on early access, unless you request deletion sooner or limited legal or operational needs require retention. Your browser’s analytics choice lasts 180 days. You can withdraw consent through Analytics preferences; this stops collection and requests deletion of the linked analytics and application attribution.

You can request access, correction, deletion, restriction, or portability of your data, and object to processing based on legitimate interests. Withdrawal does not affect processing before withdrawal. You may complain to Norway’s data protection authority, Datatilsynet. Contact us to exercise your rights or ask about retention and service providers.