Privacy Policy

Fjela provides a website and an API that turn floorplan PDFs into structured data. It is currently a beta, run as a pilot with a small number of early customers. Fjela is responsible for the personal data described here (the “controller”). If you have a question or a request about your data, write to hello@fjela.com.

• Your account. When you sign in — with Google or with an email and password — we receive your name, your email address and an identifier from our login provider.
• API keys. The name you give a key, its limits, and when it was created and last used. We store only a short prefix and a one-way hash of the key itself, never the full key.
• Your files and results. The PDFs you upload or send to the API, their file name, size and page count, and what we produce from them: the extracted data, a result PDF, and the job’s status, timing and any error message. We also record which version of our terms each file was uploaded under and, when we review a result, the corrections we make.
• Technical data. The IP address a request comes from and the network it belongs to (with an approximate location looked up in a local IP database), the browser or client that made it, and a log of requests — time, path, result, size, response time and which API key was used.
• Settings in your browser. A cookie that remembers your language, your light or dark theme choice, and the login tokens that keep you signed in. We don’t use advertising or analytics cookies.

• To run the service: sign you in, process your files and show you the results.
• To keep it secure and fair: protect accounts, prevent abuse, and enforce rate and page limits.
• To improve Fjela: we use the files you upload and their results to develop, train and test our models, and people working for Fjela, including contractors bound by confidentiality, look at them to check and correct results.
• To help you when you contact us, to find and fix problems, and — while Fjela is in beta — to follow up on how the pilot is working for you.

We don’t sell your data, and we don’t share your files or results with other customers or competitors.

We process your data to provide the service you signed up for (performance of a contract), and to keep the service secure and working well and to improve it, including training our models (our legitimate interests). Where the law requires your consent, we ask for it first.

We use a small number of providers who process data on our behalf:

• Microsoft Azure hosts the service and stores your files, in the Norway East region.
• Microsoft Azure AI runs the AI models we use to refine results: we send them pages of your drawings and our reading of them. Microsoft processes these only to answer our requests and doesn’t use them to train its own models. The processing can take place in Microsoft data centres outside the EU/EEA.
• Auth0 by Okta handles sign-in, in its European region.
• Google, if you choose to sign in with your Google account.

Contractors who review results for us see your files and results only for that work, and are bound by confidentiality. We share data with others only if the law requires it. If a provider processes data outside the EU/EEA, it does so under the European Commission’s standard contractual clauses or another lawful safeguard.

We keep your account, API keys, files and results for as long as your account is active, or until you ask us to delete them. Technical data and request logs are kept only as long as we need them for security, limits and troubleshooting. When you close your account, we delete your data unless the law requires us to keep it. Copies of files and results already in our training data, and the models trained with them, may be kept; ask us if you want your files removed from our training data as well.

You can ask for a copy of your data, have it corrected or deleted, restrict or object to how we use it — including its use to improve Fjela — and get it in a portable format. Write to hello@fjela.com and we’ll answer within a month. You can also complain to the Norwegian Data Protection Authority, Datatilsynet.

All traffic is encrypted with HTTPS, API keys are stored only as hashes, and access to our systems and to your files is restricted to the people who run Fjela and review results, all bound by confidentiality.

This policy is written for the pilot and will be reviewed before a general launch. If we change it, we’ll update the date above, and tell you directly if the change is significant.