OpenHub AS (org. no. 937 550 162) is the data controller. Contact: post@openhub.no, or the support form.
In the application
The application does its work on your machine. Recordings, audio, projects and everything the AI features produce are processed locally and are never sent to us - there is nothing of yours on our servers to leak, subpoena or lose.
The application talks to the network for three things:
- Licence activation: your licence key and an anonymous machine identifier go to our licence server - our own, on our own hardware - so the activation limit can work and you can free a slot from your account.
- Catalogue checks: it fetches the current list of downloadable models and voices from openhub.no.
- Downloads you ask for: model and voice files come from our server or from Hugging Face's CDN. Those hosts see your IP address the way any download does.
On the site and in the store
- When you buy: the name, email address and country you enter at checkout, together with the order and the licence key it produced. We need these to deliver the licence, to let you retrieve it later, and to meet Norwegian bookkeeping law.
- When you pay: nothing - payment details are handled entirely by Paddle, our merchant of record, and card numbers never reach us. Paddle describes its processing in its own privacy notice.
- When you sign in: sign-in codes, the address they were sent to and the requesting IP, kept for 30 days to stop abuse of the sign-in form.
- When you contact support: the messages you send us.
- When you browse: ordinary server logs record IP addresses and requested pages for a short period, for security and troubleshooting.
We run no advertising and no third-party analytics, and we do not sell or share personal data.
Cookies
Every cookie here is our own and functional - none of them track you, which is why there is no cookie banner:
- ohsession - keeps you signed in to your account. Lives 8 hours.
- ohcsrf - protects forms against forgery. Gone when you close the browser.
- country - the region you picked. One year.
- lang - your language on the tools pages. One year.
Your light/dark theme choice is kept in your browser's local storage and never sent anywhere.
Where the data lives
Our site, database and email run at Webhuset, a Norwegian hosting company. The licence server is our own, on our own hardware. Paddle processes payments in the UK and US under its own GDPR safeguards - that is the one transfer outside the EEA we rely on.
Why we may process it (legal basis)
Delivering what you bought and running your account: performance of a contract (GDPR art. 6(1)(b)). Keeping order records: legal obligation (art. 6(1)(c)). Security logging and abuse prevention: our legitimate interest in a shop that works (art. 6(1)(f)). We process nothing on the basis of consent, because we collect nothing that would need it.
How long we keep it
Orders for as long as bookkeeping law requires. Licence and account data for as long as the licence can be used. Security logs for the short periods described above.
Your rights
You may ask to see the personal data we hold about you, to have it corrected, deleted, or handed over in a portable form, and you may object to processing based on our legitimate interest - write to post@openhub.no and you will have an answer within a month. Deletion is honoured except where the law requires us to keep something, bookkeeping records for example. We make no automated decisions about you and build no profiles. If you are unhappy with how we handle your data, you may complain to Datatilsynet, the Norwegian Data Protection Authority.
For companies
We process no personal data on your behalf, so there is no data processing agreement to sign: what your people record never reaches us, and the little we hold - a buyer's email, an order, a licence - we hold as an independent controller, as this notice describes. If your compliance process needs that stated formally, write to post@openhub.no.
Last revised August 2026.