Privacy, cookies & security

ChangeAIQ is owned and operated by StrandaData (strandadata.no), Norway. StrandaData is the data controller for the information processed in this service and is responsible for handling it in line with the General Data Protection Regulation (GDPR) and Norwegian data protection law.

Questions about privacy can be sent to lars@strandadata.no.

We keep cookies to an absolute minimum and ask for your consent before anything optional is stored, in line with the EU ePrivacy rules and GDPR:

• Strictly necessary — sign-in sessions, security tokens and your consent choice. The service cannot work without these, so they are always on.
• Analytics (optional) — anonymous usage statistics that help us improve the service.
• Marketing (optional) — campaign measurement. We never sell your data.

Your consent is stored on your own device and you can change it at any time:

ChangeAIQ is built on the same class of security architecture used by leading modern application platforms. Your photos, scans and account data are protected by multiple independent layers:

• Encryption everywhere — all traffic is encrypted in transit with TLS, and all stored data (including your images) is encrypted at rest.
• Database-level isolation — row-level security is enforced inside the database itself, so one customer can never read another customer's data — even if the application code had a bug.
• Certified infrastructure — the service runs on enterprise cloud infrastructure with SOC 2 Type II and ISO 27001 certified providers.
• Secure authentication — passwords are hashed and never stored in readable form; sign-in links and recovery links are single-use and expire automatically.
• Audit trail — sensitive changes (team access, roles, plan settings) are recorded so they can be reviewed.
• Least privilege — team members only get the access their role requires, and private homes can be shared with view-only access.

We store your account details (name, email), the images and videos you choose to upload, and the analysis results the service produces for you. Your content is yours: it is never used to train models for other customers and never shared with third parties except the infrastructure providers needed to run the service, each bound by data processing agreements.

Data is processed within certified cloud regions, and transfers are protected by encryption and standard contractual safeguards. You can export or delete your data at any time by contacting us.

AI visual observations support human judgement; they do not replace legally required inspections or certified safety systems.

StrandaData — Norway · lars@strandadata.no

← Back to ChangeAIQ