Legal

Privacy Policy

Last Updated
March 2026
Applies To
www.bravoit.ai
Legal Basis
GDPR · Norwegian Personal Data Act

Bravo Intelligence and Technology (BIT) respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect information about you when you visit www.bravoit.ai or contact us.

01Data Controller

CompanyBravo Intelligence and Technology (BIT)
Registered inNorway
Email[email protected]
Websitewww.bravoit.ai

02What Personal Data Do We Collect?

We only collect information you actively provide to us, or technical data automatically generated when you visit the website.

SourceData Collected
Contact FormName, email address, company name, message
Investor FormName, organisation, email, phone, country, investor type, investment size
Career ApplicationName, email, phone, address, occupation, CV file, cover letter
NewsletterEmail address
Technical Data (automatic)IP address, browser type, pages visited, time of visit — collected via cookies

03Purpose and Legal Basis

Processing ActivityPurposeLegal Basis (GDPR)
Contact RequestsResponding to enquiries from customers and partnersArt. 6(1)(f) Legitimate interest / Art. 6(1)(a) Consent
Investor InquiriesEvaluating and following up on investment interestArt. 6(1)(f) Legitimate interest
Career ApplicationsRecruitment purposesArt. 6(1)(a) Consent
NewsletterSending news and updatesArt. 6(1)(a) Consent — may be withdrawn at any time
Technical DataSecurity and improvement of the websiteArt. 6(1)(f) Legitimate interest

04How Long Do We Retain Data?

Data CategoryRetention Period
Contact and enquiry dataUp to 2 years after last contact
Investor dataUp to 5 years, or until the investor requests deletion
Career applicationsUp to 12 months after the recruitment process ends
NewsletterUntil subscription is cancelled
Technical data (log files)90 days

05Sharing of Personal Data

BIT does not sell personal data to third parties. Data may be shared with technical service providers (email, hosting, CRM) under data processing agreements. Data may be transferred within the EEA. Transfers outside the EEA only occur with adequate safeguards (SCCs — Standard Contractual Clauses). Regulatory orders may require disclosure in accordance with applicable law.

06Your Rights (GDPR Articles 15–22)

As a data subject, you have the following rights:

Right of access (Art. 15)You may request a copy of the personal data we process about you
Right to rectification (Art. 16)You may request correction of inaccurate data
Right to erasure (Art. 17)You may request deletion of your data ("right to be forgotten")
Right to restriction (Art. 18)You may request restricted processing in certain circumstances
Right to data portability (Art. 20)You may request your data in a machine-readable format
Right to object (Art. 21)You may object to processing based on legitimate interest

To exercise your rights, send an email to [email protected]. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (datatilsynet.no).

07Cookies

We use cookies to ensure technical functionality and improve the user experience. You can change settings via the cookie banner on the website.

TypePurposeConsent Required?
Necessary cookiesTechnical functionality — session management, securityNo
Analytical cookiesTraffic measurement and website improvement (Umami Analytics — privacy-friendly, no cross-site tracking)Yes
Marketing cookiesTargeted advertisingYes — not currently in use

08Security

BIT applies technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or deletion. All communication between your browser and bravoit.ai is encrypted via HTTPS/TLS. Access to personal data is restricted to authorised personnel with a legitimate business need.

09Contact and Complaints

Email[email protected]
Contact pagewww.bravoit.ai/contact
Supervisory authorityNorwegian Data Protection Authority — datatilsynet.no
Important Note

This privacy policy is a starting point based on BIT's known data processing activities. Before publication, it should be reviewed by a lawyer with expertise in GDPR and Norwegian personal data law to ensure full compliance with actual data flows and service providers.