Effective Date: September 11, 2026
This Privacy Policy explains how we collect, use, share and protect personal data when you use Sagatone Music. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR) as implemented in Norway by the Personal Data Act (personopplysningsloven).
Sagatone Music is operated by Soothing Relaxation AS, which is the data controller for the personal data described in this policy.
We have not appointed a data protection officer, as we are not required to. Privacy questions go to the address above and are handled by us directly.
Sagatone Music licenses to registered businesses and organisations, not to consumers. Most of the data we hold is therefore business information rather than private information. It is still personal data when it identifies an individual, such as a named contact person at a company, and this policy applies to it in full.
We never receive or store your full card number. Card details are entered directly with Stripe.
When you contact us through the contact form or by email, we keep your name, email address and the content of your message so we can answer it and keep a record of what was agreed.
We do not run automatic deletion schedules, and in practice we retain the records described above for as long as we operate. There are two reasons for this.
The first is legal. Invoices, receipts and the billing details printed on them are accounting records, and the Norwegian Bookkeeping Act (bokføringsloven) requires us to keep them for at least five years after the end of the financial year.
The second is the nature of what we sell. Our licenses are granted in perpetuity, so a license never stops being in force. The license itself, the business identity recorded on it and the version of the Terms accepted are the evidence that the licensee holds the rights it claims to hold, which matters to you as much as to us. We keep that evidence for as long as the license could be relied on, which is indefinitely.
Data that is not part of either category, such as an application we did not approve or a support conversation, is deleted on request. See your rights below.
We do not sell personal data. We use the following providers, each of which processes data on our instructions under a data processing agreement:
We also share data with our accountant and advisers where needed, and with public authorities, courts or law enforcement where we are legally required to.
Some of the providers above are established in the United States or process data there. Where personal data leaves the EEA, the transfer is covered by the European Commission's Standard Contractual Clauses, by the provider's certification under the EU-US Data Privacy Framework, or by another safeguard permitted under Chapter V of the GDPR. You can ask us for details of the safeguard applying to a particular provider.
We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls that restrict customer records to the account owner and our administrators, and server-side rules that prevent one customer from reading another's data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Under the GDPR you have the right to access your personal data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. Withdrawing consent does not affect processing that already took place.
You can update most of your details yourself from your dashboard. For anything else, email mail@sagatone.com and we will respond within one month.
The right to erasure is not absolute. We will not delete accounting records we are required by law to keep, or the records evidencing a license that remains in force, because we need them to establish and defend legal claims. Anything outside those categories we will delete on request. We will always tell you which of your data we are keeping and why.
If you believe we have handled your personal data incorrectly, you may complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no), or to the supervisory authority in your own country.
Our default website statistics are cookieless. Cookies that are not strictly necessary are set only after you consent, and you can change your choice at any time. See our Cookie Policy for the detail.
Sagatone Music is a business service and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
We may update this Privacy Policy. Changes are posted on this page with a new effective date, and we will tell you directly if a change materially affects how we use your data.
