How we handle your data.
Who we are
Tromsø.AI is operated by FPV Experience AS (org. no. 935 999 375), Tromsø, Norway, which is responsible for the personal data processed through this website. Contact: hello@fpvexperience.no.
Visiting the website
You can browse without an account. When you visit, our hosting provider processes technical information such as your IP address, browser type and the pages you request, so that the site works and stays secure. We do not use advertising or cross-site tracking, and analytics are switched off.
Your day plan stays on your device
Places you add to a day plan are stored in your browser only. We do not receive them. Clearing your browser data removes them.
Storage on your device
We store your cookie choice and your day plan in your browser. If you are a business editor and sign in, a session cookie keeps you signed in. We do not set advertising cookies.
QR codes
When you scan a business's QR code, we count that the code was opened, as one number per code per day. We do not store your IP address, device information or any identifier for this, and no cookie is set.
Maps and directions
Maps are provided by Mapbox. Loading a map sends your IP address and browser information to Mapbox. If you tap “Take me there”, your browser asks for permission to share your location; if you allow it, your position is sent to Mapbox to calculate the walking route. We do not store your location.
Business editors
Businesses that publish a profile sign in with their email address. We process the email address, sign-in records and the business information they submit, to provide the service under our agreement with the business. Sign-in emails are sent through Amazon Web Services (EU, Ireland). Data is stored with Supabase in the EU (Ireland). During the pilot, only our editors edit business profiles; businesses send changes to hello@fpvexperience.no. In the first pilot, business texts are translated into English and Chinese manually by editors before publication. Saving a draft does not automatically translate it. No AI translation service is used in this workflow.
Service providers
Vercel (hosting), Supabase (database and sign-in, EU), Amazon Web Services (email, EU) and Mapbox (maps, USA). Where data is transferred outside the EEA, the transfer is covered by the providers' data processing terms (EU–US Data Privacy Framework and/or the European Commission's standard contractual clauses).
How long we keep data
Sign-in sessions have no configured fixed lifetime or inactivity timeout; signing out ends your session. Our retention policy is to anonymise or delete business profile data one year after the agreement ends and change records after two years. These deadlines require manual review and deletion by FPV Experience AS (General Manager); automatic cleanup is not implemented. At our 4 November 2026 check, eight daily database backups were available, dated 28 October–4 November. This observed restore window is not a guaranteed deletion deadline. Database backups do not include Storage files. Messages to hello@fpvexperience.no are kept as long as needed to handle the request.
Your rights
You can ask for access to, correction or deletion of your personal data, ask us to restrict processing, object to processing based on our legitimate interests, and receive data you gave us in a portable format. Email hello@fpvexperience.no. We answer within one month. You can also complain to the Norwegian Data Protection Authority (Datatilsynet).
Links to other services
Links to maps, businesses' own websites and aurora.tromso.ai lead to services with their own privacy notices.
Last updated: 2026-11-04