Privacy Policy
Version 2026-08-14 · Effective August 14, 2026
Who we are
OhoSync is operated by Monine AS, a company registered in Norway (org. no. 926 029 215) ("Monine", "we", "us"). We are the controller for your account data and act as a processor for the store and product data you sync through the Service, which you control. This policy explains what personal data we process and why.
Data we process
- Account data: your name, email address and a hashed password.
- Organisation data: your organisation name and VAT or company registration number, collected because the Service is offered to businesses only (Terms §2).
- Store connection data: your store URL and API credentials, stored encrypted at rest.
- Operational data: supplier feed configuration, product records, sync history, billing records and audit logs.
- Technical data: IP address and basic request metadata, used for security, rate-limiting and abuse prevention.
How and why we use it
We process this data to provide the Service — authenticating you, connecting to your store, running syncs, billing your subscription, and notifying you of failures — and to keep the Service secure. We do not sell your data or use it for advertising.
Legal basis (GDPR)
We rely on: performance of a contract (to provide the Service you sign up for); legitimate interests (securing the Service and preventing abuse); consent where required (for example, optional analytics cookies); and legal obligation (for example, retaining invoicing records).
Your rights (GDPR)
You have the right to access, rectify, export (portability) and erase your personal data, to restrict or object to processing, and to lodge a complaint with your supervisory authority (in Norway, Datatilsynet). You can exercise the core rights yourself in the app:
- Export your data — Account → Export your data downloads a machine-readable copy of your account and tenant data.
- Delete your account — Account → Delete account permanently removes Your Data, except records we must keep by law.
You can also contact us at hello@ovanap.no to exercise any of these rights.
Retention
We keep your data for as long as your account is active. Operational logs (such as sync run history) are trimmed on a rolling schedule. Financial records (billing and subscription history) and security audit logs are retained for as long as required to run the business and to meet legal obligations. When you delete your account, Your Data is removed except where retention is legally required.
Sub-processors and transfers
These are every third party that can touch data we hold on your behalf, what they do, and where they process it — the current list, published here rather than "available on request".
| Sub-processor | What it does | Where it processes |
|---|---|---|
| Hetzner Online GmbH | Hosting: the application, its database and its backups | Helsinki, Finland (EU) |
| Stripe, Inc. | Payment processing for paid plans | EU and United States |
| Resend (Plus Five Five, Inc.) | Transactional email — verification, password reset, sync notices | EU region (Ireland); delivery via Amazon SES in the same region |
| Cloudflare, Inc. | Authoritative DNS for ohosync.com | United States (company), global network |
| Google Ireland Limited | Google Analytics 4 — website statistics, only after you accept cookies | EU and United States |
| AI provider (reserved) | Not yet active on our own account. AI-assisted features (see the AI Terms) run through this row only once a platform-side provider is switched on — the provider and country will be named here, and in the DPA, before it processes anything of yours. A tenant that instead supplies its own AI provider key contracts with that provider directly; it is not our sub-processor in that case. | Not yet active |
Where data is transferred outside the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
Cookies
We use strictly necessary cookies to keep you signed in. Any optional analytics cookies are only set with your consent, which you can change at any time.
Contact
Monine AS, Norway — org. no. 926 029 215 — hello@ovanap.no.