TRUST
Data residency
What we store when you use Datakilde, where it is kept, how long we keep it and what is passed on.
Where
Datakilde is hosted and processed in Oslo, Norway: the API, the website, the account and the database run on servers we rent from UpCloud in Oslo. Database backups are kept on the server and with Cloudflare R2. Deleted information can remain in a backup until that backup is rotated out.
Every service that processes customer information is listed on the sub-processor list.
What lookups are used for
Your lookups are processed to run the service, to invoice and to correct errors. They are not used for analytics or to train models. API lookups are not sent to language models.
How long
Deletion runs automatically every six hours, and every run is recorded.
| Information | Kept |
|---|---|
| The request log (path with the address id, IP address, user agent) | 90 days |
| Usage rows tied to an API key | 90 days |
| The invoicing basis (one lookup per subject and day) | 13 months after the month, once its statement is frozen |
| Monthly statements (counts and amounts, no addresses) | As the Norwegian Bookkeeping Act requires |
What is sent to the sources
Most sections are read from data we have already collected, and your lookup does not leave our servers. Sections with freshness “live” are fetched from the source while you wait, for example a weather forecast from MET Norway. The location is then sent to that source, but not who you are or which key you use.
API terms and the data processing agreement will be published after legal review. If you need them before then, get in touch.
Last updated 13 October 2026.