Privacy policy.

At Plaii AS (org. no. 929705920, Halkjelsgate 5, 6100 Volda, Norway) we care about protecting privacy and personal data in accordance with the General Data Protection Regulation (GDPR). This privacy statement explains how we collect, use and protect information when you use our video platform.

Plaii AS is the data controller for the handling and processing of data related to customers, users and other business contacts. We also process personal data as data processor on behalf of customers who have an agreement with us to use Plaii — for example when a customer uses the platform for digital events or WebTV. If the agreement goes through an agency, the agency may be the data processor and Plaii a sub-processor. In practice, the customer (the organizer) is the data controller for the information participants provide or that is collected during events.

What we collect and how we use it

Customers: If you use the service as a customer, we store basic information such as name, email address, company name, billing and delivery address, phone number and payment details. Payment-related details are collected and stored by our payment provider on our behalf.

Participants: If you use the service as a participant, we store the information you provide at sign-in or registration — for example name, email address or phone number. The information is stored securely on our servers and deleted when the event is deleted.

Access list (whitelist): Some events require sign-in with identifiers (email/phone/domain) that the organizer has added to an access list. Your information is used only for access control.

Checkin.no: If the organizer has connected their event to checkin.no, we retrieve names, email addresses and ticket details (including ticket type) from the organizer's checkin.no account and add them to the access list. The ticket type determines how access control works for the attendee (for example, how many devices can be signed in simultaneously, whether the entire email domain gets access, or whether a reusable access code lasting up to 72 hours is issued). This is done on behalf of the organizer, who is the data controller. Attendees who are no longer signed up at checkin.no are removed from the access list at the next sync.

Questions (Q&A) and chat: If you submit a question, the name and question are sent to the organizer's moderators, and questions are deleted after the event. Chat messages are stored in connection with the event and can be read by the organizer or moderators.

Devices and sign-ins: We register a random unique device ID (cookie) and the time of the last activity to show how many devices are signed in, and to sign out extra devices when the organizer has set a limit on simultaneous devices. We also count how many times you have signed in to the service. The organizer can see the number of devices linked to each participant, when the participant was last active, and the number of sign-ins.

Third-party sign-in (SSO): If you sign in with a third-party identity provider (such as Google or Microsoft), we receive your name and email address from the provider and use them to identify your account.

Automatic subtitles: Audio from videos and live recordings may be sent to our video provider for automatic speech recognition to create subtitles.

Statistics: We collect anonymized statistics such as device type, operating system, browser, location and traffic source. We do not track your activity on the platform or collect information that can identify you as a user, unless you provide it yourself in a form.

Plaii processes customer data related to agreements and services, including names, addresses, email addresses, phone numbers and billing information. We also process traffic data such as IP addresses, traffic logs, sign-ins and similar events for the service to function and for security reasons. The processing is necessary to deliver the service, cf. GDPR art. 6 (1) b.

Storage and deletion

Participant information is deleted when the event is deleted. Whitelist entries retrieved from checkin.no are removed automatically when the sync shows that the attendee is no longer signed up. Questions (Q&A) are deleted after the event. Chat content can be read by the organizer afterwards and is deleted together with the event.

Sub-processors

Our sub-processors for operating the service are based in the EU/EEA:

Our technical infrastructure — servers, S3 file storage and chat infrastructure — is located with Hetzner, a German cloud provider. We deliver video streams through Gcore, based in Luxembourg, with our account locked to EU-based servers for live stream delivery. Gcore is also used for automatic speech recognition (subtitles). Speech recognition runs in Gcore's own data centers and may therefore be processed in the EU, the US or Asia; such transfers take place on the basis of the EU Standard Contractual Clauses. We send email through Brevo, based in the EU — email addresses may be shared with the platform when we send information to active customers.

In addition, Plausible is used for anonymous visitor statistics on our websites (self-hosted in our EU infrastructure), and Mux Data (US) is used for video analytics with anonymized data collection enabled; transfers take place on the basis of the EU Standard Contractual Clauses.

Cookies

We only use cookies that are strictly necessary for the service to function, and no advertising or third-party tracking cookies:

Sign-in — a cookie that keeps you signed in on your device for up to 7 days, containing only a random unique ID.

Device ID — a cookie with a random unique ID that identifies your device for up to 400 days. It is used to count how many devices you are signed in on and to enforce limits on simultaneous devices.

Our visitor statistics from Plausible are cookieless and set no cookies. Because we do not use cookies that require consent, we do not display a consent banner.

You can disable or delete cookies in your browser, but this may affect functionality. If you have questions about cookies, contact us at plaii@plaii.no.

Liability

The service may at times be fully or partially unavailable due to maintenance or other circumstances. If the customer suffers financial loss as a result of errors or defects in the service, the provider's liability is limited to direct and documented losses, capped at the customer's total cost of the service over the last 12 months.

The provider is not liable for the customer's use of the service or further use of content created with or linked to the service. The customer shall hold the provider harmless against claims from users or third parties related to the customer's use of the service and the customer's agreement with the provider.

Sharing of information

We do not share personal data with third parties without consent, unless required by law. Information collected from checkin.no is retrieved on behalf of the organizer and is not shared further beyond what is necessary to deliver the service.

Your rights

You have the right to access, rectification and deletion of personal data. You may also withdraw consent or object to processing. Contact us at plaii@plaii.no. If you are a participant in an event or a user of a WebTV service, we will refer you to the organizer, who is the data controller for your information.

If you are not satisfied with how we process personal data, you may complain to the Norwegian Data Protection Authority (Datatilsynet).

Incidents, disputes and changes

Incidents involving personal data must be reported to the Data Protection Authority within 72 hours. Disputes related to this privacy statement shall be resolved by Oslo District Court. We may update the statement, and changes are published on this page.

Contact us

If you have questions about privacy or our processing of personal data, contact us at plaii@plaii.no.

Last updated 21.10.2026