Privacy Policy

Who we are

Actual Taste (actualtaste.com) is operated by mSales Norway AS (Kristiansand, Norway, org. no. on request). Questions about this policy or your data: [email protected].

What we store

• What you type. The message you write, and the poster details we derive from it (headline, items, prices, dates, contact details), are stored so we can render, re-render and show you your posters.
• Account data (only if you sign in): your email address, your language choice, your credit balance and a ledger of how credits were bought and spent.
• Business profile (only if you save one): the business name, city, phone, address, website, payment details and logo you choose to keep for reuse.
• Posters and previews: the images and PDFs we generate for you, stored in our file storage under a random identifier. Previews are watermarked; unlocked posters are yours to download.
• Billing: payments are processed by Stripe (cards) or Dintero (Vipps and cards). We store the purchase amount, currency and the provider's reference, never card numbers.
• Technical: IP addresses are used to rate-limit free previews. We keep an event log (poster made, purchase, error) for running the service. We run no advertising trackers.

Third parties that process your data

To make a poster we send the text you typed to AI providers: Anthropic (to turn your message into poster fields) and OpenAI (to generate the single hero image). Only the description of the object is sent for image generation, never your contact details. These providers process the text to return a result and, per their business terms, do not train on it. We do not send anything to them that you have not typed into the poster yourself.

Files are stored on Cloudflare R2, the database and sign-in run on Supabase (AWS eu-north-1, Stockholm), the site runs on DigitalOcean (Amsterdam) behind Cloudflare, and sign-in emails are sent through Resend.

What we do not do

We do not sell your data, show ads, or use your posters to promote Actual Taste without asking you first. If we would like to show a poster you made as an example, we will ask.

Your rights

Under the GDPR you can access, export, correct and delete your data. Email [email protected] for a data export or account deletion and we will sort it out promptly. Deleting your account removes your profile, businesses and posters; purchase records are kept as long as bookkeeping law requires. You can also complain to Datatilsynet, the Norwegian Data Protection Authority.

Cookies and local storage

We use a random cookie so a preview you make before signing in can be attached to your account afterwards, browser storage for your sign-in session and language, and session storage so your work survives a reload. No third-party advertising or cross-site tracking cookies. We measure traffic with Cloudflare Web Analytics, which is cookieless and does not fingerprint or identify visitors, and we count page views on our own server against the same random cookie to see how many visitors go on to make a poster.

Changes

If this policy changes in a way that matters, we will say so on the site. The effective date above always reflects the current version.