Privacy policy

Last updated October 27, 2026

This is a translation of the Norwegian original. If the two differ, the Norwegian version applies.

Controller: Margareto Software AS, Naustanvegen 10, 7560 Vikhammer, org. no. 931 338 811.

The website

The website is hosted on Firebase Hosting (Google), which processes your IP address to deliver the site and keep it secure. The number of events is fetched from EventFeed, without cookies. If you scan the QR code on a screen, you are taken to a page that fetches the events and images from EventFeed and does not use cookies either. We count how many times the page is opened for each screen per day, without storing who opened it.

Cookies and analytics

If you say yes in the box at the bottom of the page, we use Google Analytics on tavleo.no and app.tavleo.no to see which pages are read, where visitors come from and how many try Tavleo. The cookies _ga and _ga_K2D8ZPDJM2 are then set, and they last for 13 months. Google Analytics does not store your IP address, and the advertising features are turned off. The data about each visit is deleted after 14 months.

If you say no, Google Analytics is not used. Your answer is stored in the cookie tavleo_samtykke for 12 months, and it also applies to app.tavleo.no. You can change your mind at any time under “Cookies” at the bottom of the page.

What we store

When you make a screen on app.tavleo.no, we store the name of the business, the address where the screen is, what you write to Tavleo, the files you upload, the calendar links you paste in and the email address you sign in with.

If the business pays, we also store the organization number, the invoice address and the invoices. We never see the card number. Without an email address you cannot save the screen, and without billing details we cannot take payment.

If you write to us in “Help” in the app, we store the messages and the email address we should reply to. The AI assistant replies first and in doing so sees the status of your account: the screens, the plan and the payments. If you ask to talk to Pablo, who makes Tavleo, he receives the latest messages by email.

From the TV, we store when it was last in contact with us, what type of TV it is and how large the screen is, so that you can see in the app if it stops responding.

For each account, we count how many messages, images and uploads are used per day, without the content, so that use stays within reasonable limits. The count is deleted with the account.

From calendars, the screen shows only the title and time, and the room if you turn it on. The calendar link is never shown on the TV.

Legal basis

When you yourself are a party to the agreement, the processing is necessary to perform it (Article 6(1)(b) of the General Data Protection Regulation (GDPR)). Otherwise, the processing is based on our legitimate interests in delivering the service to your business and keeping the website secure (Article 6(1)(f)). We keep invoices because the Norwegian Bookkeeping Act requires it (Article 6(1)(c)). Analytics is based on your consent (Article 6(1)(a)), and you can withdraw it at any time.

When we improve Tavleo

If you tap “Could the assistant have done this better?” under a reply and send it, we receive your question, the reply and what you write about what you meant. Pablo receives it by email, with the business name and your email address if the screen has been saved. We use it to fix the error, and when we make test cases from it, we rewrite them without names and contact details.

Every day and every week, we have AI write a summary of what users have asked Tavleo for but not received, and of requests Tavleo has misunderstood. It is based on the messages to the AI assistant and in “Help.” Email addresses, phone numbers, web addresses and business names are removed first, and the content of calendars and files is not used. The summaries come to us by email.

What you send this way, and the emails with the summaries, are deleted after 12 months. The legal basis is our legitimate interests in improving the service (Article 6(1)(f)). You can opt out of the summaries in the app, under “Privacy and deletion.”

Who processes data for us

We use Google (Firebase: website, sign-in, database, files and server functions; Google Workspace: our email; Google Analytics: analytics, only with consent), Anthropic (the AI assistant, which reads your messages and files, and the titles in the calendars when you write to it, and which also replies in “Help” and writes the daily and weekly summaries), Stripe (card payments and receipts), Fiken (accounting and invoices) and Sweego (email from Tavleo). Anthropic does not use the data to train AI models.

The database, the files and the server functions are located in the EU/EEA, and email from Tavleo is sent from France. Anthropic, Stripe and parts of Google process data in the USA. The transfers are based on the EU’s Standard Contractual Clauses or the EU–US Data Privacy Framework. You can ask for a copy of the Standard Contractual Clauses.

How long

A preview you do not save with your email address is deleted after 30 days. Otherwise, we keep the data for as long as you have an account, and the invoices for as long as the Norwegian Bookkeeping Act requires. The messages in “Help” are deleted together with the account, and no later than 12 months after the last message. What you send with “Could the assistant have done this better?” is deleted together with the account, and after 12 months at the latest. The emails Pablo receives with the messages and the summaries are deleted after 12 months. With “Delete everything” in the app, you delete your account, screens and files.

For businesses

We process personal data in calendars, files and messages you add, for example names of customers or employees, on behalf of the business under our data processing agreement. The exceptions are the messages in “Help,” what you send with “Could the assistant have done this better?”, and the summaries, for which we ourselves are the controller (sections 2.5 and 2.6 of the agreement). Purchase and cancellation are covered in the terms.

Your rights

You can request access, rectification, erasure, restriction of processing and data portability, and you can object to processing based on legitimate interests. Write to pablo@margaretosoftware.no, and we will reply within one month. You can also complain to the Norwegian Data Protection Authority (Datatilsynet).