PRIVACY

Privacy Statement of AppWell Studio

Effective Date: Feb. 01 2024 · Updated: Sep. 17 2026

Welcome to AppWell Studio

At appwellstudio.com, we respect your privacy and are committed to protecting your personal data. This privacy statement explains how we handle data collected through our website, particularly through our contact form. The data controller is AppWell Studio (Norwegian org. no. 931 437 739).

1. Data Collection and Use

We collect a minimal amount of data from our visitors. The types of personal data we process are:

  • Name: The name you provide in the contact form.
  • Email Address: Your email address, used for replying to your inquiries.
  • Message Content: The content of your message, which may include any information you choose to provide.
  • Technical Data: When you visit the website or submit the contact form, your IP address, browser type and the pages requested are processed by our hosting provider in order to deliver the site, protect it against abuse and keep short-lived server logs. When you submit the contact form, your IP address is also checked against a rate limit and included in the notification email we receive, so that we can identify and block spam.

Contact form data is processed on the basis of our legitimate interest in responding to your inquiry (GDPR Article 6(1)(f)), or to take steps prior to entering into a contract with you (Article 6(1)(b)). Technical data is processed on the basis of our legitimate interest in operating a secure website (Article 6(1)(f)). We do not use this information for marketing purposes unless explicitly requested or consented to by you.

We do not use analytics or advertising cookies. The website stores a single value in your browser's local storage to remember that you have already seen the opening animation; it contains no personal data and is never sent to us.

2. Data Processors and Hosting

We use the following service providers, who process data on our behalf under data processing agreements:

  • Cloudflare, Inc. (USA) hosts the website on its global network and provides the Turnstile bot protection used on the contact form. Content is normally served from the data center closest to you, which for visitors in Norway and the EU means a European location. Turnstile processes technical data such as your IP address and browser characteristics to distinguish people from bots; it does not use cookies for tracking.
  • Resend, Inc. delivers contact form submissions to our email inbox. Our sending domain is configured for Resend's EU region, so messages are processed and stored in Ireland. They are retained by Resend only as long as needed for delivery and troubleshooting.
  • Zoho Corporation (email hosted in the EU, zoho.eu) provides the mailbox where your message is stored.

3. International Transfers

Contact form messages are processed and stored within the EU (Resend in Ireland, Zoho in the EU). Cloudflare and Resend are nevertheless companies based in the United States, and technical data handled by Cloudflare's network, as well as any support access by these providers, may involve a transfer to the United States. Such transfers take place under the EU–US Data Privacy Framework, under which both companies are certified, and are additionally covered by the European Commission's Standard Contractual Clauses included in their data processing agreements. This means your data enjoys a level of protection recognised by the EU and the EEA (including Norway) as adequate.

4. Data Retention and Security

Contact form messages are kept in our mailbox for as long as needed to handle your inquiry and any follow-up, and are deleted no later than two years after our last contact, unless we are required to keep them longer by law (for example, accounting records). Server logs held by our hosting provider are retained for a short period only. We implement appropriate technical and organisational measures to prevent unauthorized access, disclosure, alteration, or destruction of your personal data.

5. Data Sharing

We do not share, sell, rent, or trade personal information with third parties for their commercial purposes. Apart from the processors listed above, we will only disclose your personal data where required by law or where necessary to protect our rights.

6. Your Rights

You have certain rights regarding the personal data we hold about you. These include the right to access, correct, delete, or restrict the use of your personal data, the right to object to processing based on legitimate interest, and the right to data portability. If you wish to exercise any of these rights, please contact us at support@appwellstudio.com. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no) or the supervisory authority in your country.

7. Changes to This Privacy Statement

We may update this privacy statement from time to time in response to changing legal, technical, or business developments. When we update our privacy statement, we will take appropriate measures to inform you, consistent with the significance of the changes we make.

8. Contact Us

If you have any questions about this privacy statement or our data practices, please contact us at support@appwellstudio.com.