Privacy policy

Who is responsible

Solberg Invest Media Group AS is responsible for the personal data described here. Our organisation number is 933 219 224 and our registered address is Markens gate 29, 4611 Kristiansand S, Norway. You can reach us at oskar@solberginvest.com or through Contact.

This policy describes how we use personal data in our current website, newsletter, Terminal, financial profiles, courses and educational consulting. Which information we use depends on the features you choose. External services, including your exchange and your own ChatGPT account, have their own privacy policies.

What we use and why

We use information you provide, information created when you use a service, and information from connections you authorise. We need contact details to provide an account or answer a message, and payment details for a purchase. Financial profiles, profile descriptions, member contributions and marketing subscriptions are optional. Terminal accounts and financial profiles are intended for adults aged 18 or over.

The legal bases below are those in Article 6(1) of the GDPR: performing our contract or taking steps you request before one (b), meeting legal obligations (c), legitimate interests (f), and consent (a).

Accounts and membership

We use your email, account and session identifiers, membership status, preferences and any profile details to provide and secure your account. This is based on our contract with you. Security, troubleshooting and internal usage records, such as feature access and setup activity, support our legitimate interest in operating a reliable service. These records are separate from optional website analytics.

Payments

Stripe handles membership payments. We receive purchase and billing information, including your email, customer and subscription identifiers, plan, payment status and billing dates. We do not receive your full card number or security code. We use these records to administer your purchase and meet accounting obligations. Stripe also has its own payment, fraud-prevention and legal responsibilities.

Newsletters, resources and launch updates

We use your email, any name you provide, signup source and preferences to deliver what you signed up for. Marketing emails are based on consent. You can unsubscribe in any message or contact us. Resource signup pages explain whether they include the newsletter; the Terminal waitlist is for launch updates. Creating an account, making a purchase or sending a message does not subscribe you to the free newsletter.

Kit handles newsletters and relevant membership labels; Resend handles service emails and waitlist communications. We receive delivery and subscription records. Where enabled with the required consent, email engagement records can include opens and link clicks, though these measurements are not always accurate. Unsubscribing from marketing does not stop necessary account, security or billing messages.

Courses and educational consulting

We use booking and contact details, payment status, attendance, recorded progress and materials you share to arrange and deliver your booking, based on our contract with you. The instructor and booking or video-call provider identified at booking receive the information needed for the session.

In group sessions, other participants may see your name, image, voice and contributions. The recording notice explains what is included in a replay and who can access it. You can choose whether to use your camera or microphone; your display name may still be visible. We ask permission before recording a private session or using identifiable contributions in public marketing.

Contact and support

The contact form sends your name, email and message through Resend to our team inbox. We use them to answer your request and keep relevant correspondence. Please leave out passwords, private keys and sensitive financial details.

Contract and pre-contract enquiries are handled on that basis. General correspondence and spam prevention serve our legitimate interests; statutory data requests are handled under our legal obligations. Spam protection uses identifiers derived from your email and network address. Sending a message does not subscribe you to marketing.

Terminal discussions, calls and AI features

Your Terminal profile and contributions are visible to members with access to that space, including the Public Square. Members may copy what they can read, so keep private account details in your private profile. We process contributions to provide the service. Moderation and preserving discussion context serve our legitimate interests; automated checks may flag material for review. Removing a contribution from view can leave an internal record.

A recorded call may include your name, voice, image or question in the member replay and transcript. The call notice explains the recording and participation options. We use this information to provide the agreed call and replay; public marketing use requires separate permission.

AI features use the question and relevant context to prepare an answer:

• Intern can send questions and member discussion, including names, posts and comments, to OpenAI. Other enabled features may use Vercel AI Gateway and providers such as Anthropic. Voyage AI supports search, and Deepgram may transcribe recordings.

• Members who connect their own ChatGPT account can retrieve Terminal material they are entitled to read, including member discussions. Your contributions may therefore appear in another member's AI conversation, governed by their account and settings, including any model-improvement setting.

• Provider retention and use depend on the service and its settings. AI answers can contain mistakes.

Providing an AI feature you request is based on contract. Using relevant surrounding discussion to answer member questions serves our legitimate interest in providing contextual answers; you can contact us to object.

Your private financial profile

An optional financial profile can include accounts, holdings, values, liabilities, goals, wallet addresses, exchange connections and answers about your circumstances. We use it to provide the profile you request, based on contract. It is separate from your member profile and is not visible to other members.

We use exchange credentials to read connected account information. Use read-only credentials. Connected wallet addresses are sent to the blockchain-data providers needed to retrieve balances, including Alchemy and Taostats depending on the network. Other data comes from your entries, broker imports, connected exchanges and market-data sources.

The browser may keep a temporary recovery copy of unsaved profile text and goals. Retention is described below.

Connecting ChatGPT is optional. You choose which accounts and fields to share and can revoke future access. Shared information can include holdings, values, goals and written answers, but excludes exchange credentials, wallet addresses and account numbers. The connection cannot trade or transfer funds. Information already copied to ChatGPT remains subject to your OpenAI account and settings; manage those conversations and memories there. See the financial-profile sharing explanation.

Cookies, browser storage and analytics

Cookies and browser storage support sign-in, security, preferences, draft recovery and your analytics choice. Blocking them can affect those features.

Optional PostHog analytics stay off until you allow them below. They measure public page visits and signup actions with limited technical information. These analytics exclude private account pages and contact messages. Session recording is disabled.

Analytics are based on consent. You can withdraw it below at any time; this stops future collection without affecting earlier lawful processing. This choice is separate from essential account and security records. It is saved in this browser for 180 days; clearing storage or letting it expire turns analytics off.

Who receives information

Our team and service providers receive information relevant to their work. Providers include Vercel for hosting and some AI routing, Supabase for accounts and application data, Stripe for payments, Kit and Resend for email, PostHog for optional analytics, and our business-email service. Connected exchanges, blockchain services and AI providers receive information for the features described above.

Some providers act on our instructions; others have independent responsibilities for parts of their services. We may also disclose information to meet legal obligations or handle legal claims.

International processing

Some providers and subprocessors process information outside the EEA, including in the United States. Transfers we arrange use an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses with supplementary measures where needed. Reliance on the EU–US Data Privacy Framework requires the recipient to have a relevant, valid certification.

Contact us for details of the recipients and transfer safeguards relevant to your data, or a copy of those safeguards with confidential information removed.

How long we keep information

We keep records for their purpose, taking account of legal obligations and any unresolved claims:

• Accounts and financial profiles: while providing the account or profile. After closure or deletion, information still needed for billing, security or legal claims is retained for those purposes.

• Temporary profile data: import previews expire after 24 hours. Recovery drafts are cleared on save, sign-out or profile deletion, and drafts older than 24 hours are discarded when the store is next checked. Superseded snapshots and redacted investor logs are scheduled for cleanup after 30 days.

• Accounting: required primary accounting records are normally kept for five years after the financial year ends.

• Email subscriptions: while subscribed, followed by the consent and suppression records needed to document the signup and respect an unsubscribe.

• Support and bookings: while delivering the service or resolving the request, and afterward where needed for an associated legal obligation or claim. Course progress and recordings follow the access period in the offer, unless a separate lawful purpose requires retention.

• Member discussions and calls: while serving the member archive and discussion context. Erasure requests are assessed alongside other members' contributions and any moderation or legal records that need to remain.

• Operations and backups: some email bodies and job results are compacted after 30 days. Delivery, activity and incident records remain where needed for their purpose. Deleted data can remain in restricted backups until the applicable backup cycle expires.

You can ask us about the retention that applies to a particular record.

Your rights and choices

Depending on the circumstances, you can ask to access, correct, erase or restrict use of your data, and receive a portable copy of data covered by that right. You can object to processing based on legitimate interests because of your situation, and to direct marketing at any time. Where we rely on consent, you can withdraw it as easily as you gave it.

Use the available account controls or email oskar@solberginvest.com. We may need to verify your identity. Requests are normally free, with a response within one month. If a permitted extension is needed, we explain it within that month.

Deleting a financial profile does not delete your sign-in account, cancel membership or remove billing records and member contributions. Contact us for account deletion; see the terms for cancellation. Where information must remain, we explain why.

You can complain to Datatilsynet or the relevant supervisory authority where you live, work or where an alleged breach occurred in the EEA.

Changes to this policy

The date above shows when this policy was updated. We give appropriate notice of material changes and seek fresh consent where required.