Legal
Privacy policy
This policy explains which personal data Cuatro Group AS processes when you use 4cuatro.ai, why, and which rights you have. In short: we collect what you type into our forms, our visit statistics use no cookies, and we neither sell data nor show advertising.
Who is responsible for your personal data?
Cuatro Group AS is the controller for the personal data described in this policy. CUATRO is the company's brand, and HOMAI is its product.
- Cuatro Group AS, organisation number 931 852 221
- Registered business address: Holalien 11, 5163 Laksevåg, Bergen, Norway
- Phone: +47 995 02 103
- Email: behnood@4cuatro.no
For questions about privacy or to use your rights, email behnood@4cuatro.no, write to us through the contact form and mention "privacy" in your message, or call us.
This policy follows the EU General Data Protection Regulation (GDPR), which applies in Norway through the Personal Data Act (personopplysningsloven).
What does this policy cover?
It covers the website 4cuatro.ai in English and Norwegian: the pages, the 3D story, the contact and demo forms and the visit statistics. It does not cover the HOMAI application at app.4cuatro.ai. Personal data in the application is processed under the agreement between Cuatro Group AS and each customer.
Which personal data do we collect, and why?
| When | What we collect | Why | Legal basis |
|---|---|---|---|
| You send the contact form | Name, email address, company (optional) and your message, plus the page language, the page you sent it from and the time | To answer your question and follow up on the conversation | Our legitimate interest in answering enquiries (GDPR Art. 6(1)(f)) |
| You request a demo | Name, position, company, work email and your message (optional), plus the page language, the page you sent it from and the time | To arrange and hold the demo and follow up afterwards | Our legitimate interest in presenting HOMAI to organisations that ask for it (Art. 6(1)(f)) |
| You send either form | Your IP address, turned into a one-way code (hash) with a key that is replaced every day, and the time of sending | To limit how many messages one network can send per hour and keep spam out | Our legitimate interest in protecting the forms from abuse (Art. 6(1)(f)) |
| You visit a page | The page address and the date; the name of the website that linked to us, if any (for example google.com); and a one-way code made from your IP address and your browser type and device class, with a key that is replaced every day | To count page views and daily visitors, so we know which pages are useful | Our legitimate interest in understanding how the site is used (Art. 6(1)(f)) |
| You click play on the video | Vimeo receives your IP address and browser information | To show the video you asked for | Our legitimate interest in showing the video when you ask for it (Art. 6(1)(f)). What Vimeo does with the data afterwards is Vimeo's responsibility under its own privacy policy |
Please do not include sensitive personal data, such as health information, in a message. We do not need it to answer you.
Statistics without cookies
Our visit statistics store nothing in your browser. The key used to make the daily visitor code is replaced every day and the old key is deleted, so after that day the code can no longer be connected to an IP address, not even by us, and visits on different days cannot be linked. Visits from automated browsers are not counted. We do not use Google Analytics or any other third-party analytics, advertising or social media tracking.
Technical logs
Like any web server, the servers that host this site record technical information about requests, such as IP address, time, the requested address and browser type. This is needed to run the site and protect it against attacks.
Who receives your personal data?
- The CUATRO team. Form submissions are stored in our database and sent by email to the people at CUATRO who handle enquiries.
- Our service providers. Our hosting provider stores the website, the database and the technical logs, and our email provider delivers the form notifications. They process the data on our behalf and only on our instructions.
- Vimeo, only if you click play on the video. Until then, nothing is loaded from Vimeo.
- Public authorities, only when the law requires us to hand over data.
We do not sell or rent personal data, and we do not share it with others for their marketing. We do not add you to a newsletter or mailing list.
Is your data transferred outside the EU/EEA?
We aim to keep the personal data from this website within the EU/EEA. If a service provider needs to process it outside the EU/EEA, we will only allow that with a lawful transfer mechanism under the GDPR, such as the EU standard contractual clauses.
When you play the video, the player is loaded from Vimeo, which may process data outside the EU/EEA under its own terms. We load the player with Vimeo's "do not track" setting, which asks Vimeo not to track the session.
How long do we keep your data?
- Form submissions and the related emails: as long as we need them to answer you and follow up on the conversation. After that we delete them, unless the conversation has led to an agreement that requires us to keep them, for example under accounting rules.
- Hashed IP addresses used for the form limit: kept for 24 hours and deleted the next time a form is sent after that. Because the key behind them is replaced every day, they can no longer be linked to an IP address once the day is over.
- Visit statistics: daily counters and daily visitor codes are kept for about 400 days and then deleted automatically.
What are your rights?
Under the GDPR you have the right to:
- get access to the personal data we hold about you and a copy of it;
- have incorrect data corrected;
- have your data deleted;
- have the processing restricted;
- object to processing based on our legitimate interest, which is the basis for the forms, the spam protection and the statistics;
- receive data you gave us in a machine-readable format, where the right to data portability applies.
To use your rights, contact us through the contact form or by phone. We answer without undue delay and at the latest within one month. We may ask you to confirm your identity first, so that we never hand your data to someone else.
Once a day is over, the visitor codes in our statistics can no longer be linked to anyone, so we cannot find, show or delete them for a particular person.
If you think we process your personal data unlawfully, you can complain to Datatilsynet, the Norwegian Data Protection Authority (datatilsynet.no). We would appreciate the chance to sort it out with you first.
How do we protect your data?
- The website is served over an encrypted connection (HTTPS).
- Form submissions are stored in a database that is not publicly accessible.
- For spam protection and statistics we store one-way codes instead of IP addresses, and the key behind them is replaced every day.
- The forms have spam protection and a limit on the number of messages per hour, so they cannot be used to flood our inbox or database.
Changes to this policy
We update this policy when the website or our use of personal data changes. The date below shows when it was last changed. How we use cookies is described in our cookie policy, linked at the bottom of every page, and the rules for using the website are in the terms of use.
Last updated: 27 October 2026.