Privacy Policy

1. Introduction

Nufors ApS ("we", "us", "our") operates the Service Catalog application. This Privacy Policy explains how we collect, use, and protect your personal data when you use our service.

2. Data We Collect

We collect the following information:

Account Information

• Email address
• Name
• Organization name

Service Data

• Service catalog content you create (services, categories, features, descriptions)
• User assignments and roles within your organization

Technical Data

• Authentication tokens (via Microsoft Entra ID)
• Usage metrics for billing purposes
• IP addresses and browser information for security

Azure Marketplace Data

• Subscription information
• Billing and plan details
• Purchase history

3. How We Use Your Data

We use your data to:

• Provide and maintain the Service Catalog application
• Authenticate your identity via Microsoft Entra ID
• Process payments through Azure Marketplace
• Send important service notifications
• Improve our service and fix issues

4. Legal Basis for Processing (GDPR)

We process your data based on:

• Contract performance: To provide the service you subscribed to
• Legitimate interests: To improve our service and ensure security
• Legal obligations: To comply with billing and tax requirements

5. Data Storage and Security

Your data is stored securely on Microsoft Azure infrastructure within the European Union. We implement industry-standard security measures including:

• Encryption in transit and at rest
• Role-based access controls
• Regular security audits

6. Data Retention

We retain your data for as long as your subscription is active. Upon cancellation:

• Account data is deleted within 30 days
• Service catalog content is deleted within 30 days
• Billing records are retained as required by law (typically 5-7 years)

7. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Export your data (data portability)
• Object to or restrict processing
• Withdraw consent

To exercise these rights, contact us at support@nufors.com.

8. Third-Party Services

We use the following third-party services:

• Microsoft Azure (hosting and infrastructure)
• Microsoft Entra ID (authentication)
• Azure Marketplace (billing and subscriptions)

9. Cookies

Service Catalog uses essential cookies for authentication and session management. We do not use tracking or advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through the application.

11. Contact Us

For privacy-related questions or concerns: