How Rett fra Bonden handles data — honestly, without filler.
Rett fra Bonden is an open catalogue of local matprodusenter in Norway, available at rettfrabonden.com. The data controller for Rett fra Bonden is AGENTPLATFORM.NO AS (org. no. 938 635 676), Haakon Tveters vei 66, 0686 Oslo, Norway. Email: kontakt@rettfrabonden.com.
We collect different types of data depending on how you use the service. Here is the full overview:
When you visit rettfrabonden.com we register:
We use only a small number of essential cookies: a sign-in session cookie for sellers who verify a magic link or a farm-shop ownership claim (httpOnly, expires after 7 days), and one or two cookies that remember your language choice — a cookie set when you use the language switcher (expires after 1 year), and a session-only cookie the server may set when you follow a language-specific link (cleared when you close your browser). We set no third-party analytics, advertising or tracking cookies such as Google Analytics — all analysis happens in our own database.
When you search for producers — via the website, ChatGPT, Claude MCP or the API — we store:
We store this to understand which searches give good results and to improve the service.
When an AI tool (e.g. ChatGPT or Claude) calls one of our MCP or A2A tools, we log — separately from the search log above, per call — which tool was used, which protocol (MCP/A2A), response time, and the caller's full browser/client string (User-Agent) — this is stored as-is, NOT hashed, unlike the page-visit hash above, so we can tell which AI clients actually use the service. We also store a salted IP hash (see “Security” below). This log is deleted automatically after 60 days (see “How long we keep data”).
When you use Rett fra Bonden via ChatGPT or Claude, your request passes through that provider's own infrastructure (run by OpenAI or Anthropic respectively) before it ever reaches our server — we have no control over or visibility into how they handle your data before the call reaches us.
The lokal_geocode tool (place name → coordinates) forwards your search text to the Norwegian Mapping Authority's public geocoding API (Kartverket, ws.geonorge.no) to look it up.
Most profiles in the catalogue were created by us, without the producer signing up. They are built from information that is already public, including from the Brønnøysund Register Centre, Debio, Google Places, directories of local food and farm shops, web searches and the producer's own website or official Facebook page (see how we verify our data). For each profile we store, among other things:
If the producer is a sole proprietorship, some of this can also be personal data about the owner, for example when the business carries the owner's name or address. The profile is public and can be fetched by AI assistants and other services (see “Who receives the data”).
We may email the public email address on the profile to say that the profile exists and how it can be confirmed or corrected. If you reply “fjern” (remove) to that email, we delete the profile. The emails we have sent you and your replies (email address, name and content) are kept in our customer-service system and in a send log. They are not deleted automatically when the profile is removed, but you can ask us to delete them too. Translated versions of the profile text (English and Swedish) are unpublished but stay in the database until we delete them; tell us if you want them deleted. When a profile is removed on request, we keep some identifiers on a do-not-re-add list — for example website domain, email address and name — so the profile is not created again, and a log entry that the profile was deleted.
When you register as a produsent to manage your profile, we collect:
After verification you can yourself add and edit: address, opening hours, products, certifications, description, images and contact info. Everything you add is visible on your public profile page.
We do not use passwords. Sign-in happens via a magic link sent to your email. The link is valid for 15 minutes and can only be used once. We do not store passwords because we do not have any.
Sellers can upload profile pictures and product photos. These are stored on the server. If image scanning is enabled, the image may be sent to an external AI service (Anthropic Claude or OpenAI) for automatic product recognition.
We use AI services from Anthropic (Claude) to find and check public information about producers — for example whether a website or a register match belongs to the right business — to write short producer descriptions from the producer's own web pages, and to translate profile text into English and Swedish. Claude also helps us read and answer emails sent to us. Profile data, text from public web pages and the content of emails can then be processed by Anthropic in the USA. An AI assessment on its own never counts as confirmation of a field.
Rett fra Bonden supports the A2A protocol (agent-to-agent). When an AI agent contacts a producer agent, the conversation text, status and any transaction info are stored in the database.
When you create a shopping cart (via the website or the MCP tools lokal_cart_create etc.) we store the cart's contents (chosen products and producers) and a capability token (buyer_ref) needed to manage it further — a cart is valid for 7 days. If you provide contact details when ordering (name, email, phone, delivery note), that is kept until the order is finally resolved (completed/declined/cancelled), then deleted automatically 30 days after that (or 30 days after submission if no real order was created). Your contact details are passed to a producer only if you agree to share them when you submit the order; otherwise no producer sees them. Orders carry no payment — we never charge a card. When a producer confirms, declines or cancels your order, we email you a receipt at the address you gave. An order is sent by email only to producers who have verified their listing and opted in to receiving orders through the platform; for any other producer in the cart you get their public contact details and get in touch yourself.
lokal_geocode tool is used.We process personal data based on:
| Data type | Basis | Explanation |
|---|---|---|
| Analytics (page visits, searches) | Legitimate interest | To improve the service. IP addresses are stored only as a salted hash (pseudonymised). |
| Producer profiles from public sources | Legitimate interest | To give consumers and AI assistants an up-to-date overview of local food producers. The profile is built from information that is already public, and you can object at any time (see “Your rights”). |
| Emails to producers about their profile | Legitimate interest | To say that the profile exists, and to make it possible to confirm, correct or remove it. |
| Emails you send us | Legitimate interest | To read, answer and follow up your enquiry. |
| AI at Anthropic | Legitimate interest | Correct information about the right business, short descriptions from the producer's own web pages, profiles in more than one language, and answers to enquiries. |
| Backups | Legitimate interest | To be able to restore the service after an error or data loss. |
| Do-not-re-add list after removal | Legitimate interest | To respect your wish not to be added again. |
| Seller registration | Consent | You actively provide data when you register. You can withdraw consent. |
| Information you add to your profile yourself | Consent | You choose what to add, and you can remove it. Everything is visible on your profile page. |
| Image upload | Consent | You upload images yourself. Image scanning is optional. |
| Pickup orders | Contract | To pass your order on to the producer you order from. |
The database is on a server hosted by Fly.io in the Stockholm region (ARN). Fly.io is a US company. Data can also be processed outside the EU/EEA in these cases:
The source code is open and available on GitHub.
| Data type | Retention |
|---|---|
| Page-visit analytics | Individual page visits (with the pseudonymised IP hash) are deleted automatically after 60 days. Before deletion they are summed into daily counts per page, which contain no IP hash or other link to a visitor and are kept. |
| Search logs | Individual searches (with the pseudonymised IP hash) are deleted automatically after 60 days. Before deletion they are summed into daily counts per search text, without any link to who searched, and those counts are kept. |
| Verification codes | Unverified claims expire after 7 days. |
| Magic links | Expire after 15 minutes. Used links older than 1 hour are auto-deleted. |
| Claim token (sign-in) | Expires after 30 days. Renewed at next sign-in. |
| Producer profile | For as long as the profile is relevant to the catalogue. Profiles of businesses that have closed down or were registered by mistake are hidden, but stay in the database. If you ask us to remove the profile, we delete it; translated versions of the profile text stay until we delete them on request. |
| Uploaded images | Stored until manually deleted. |
| MCP/A2A tool-call log | Deleted automatically after 60 days, in the same daily pass as page visits and searches. No daily counts are kept from this log. |
| Shopping cart (no contact details yet) | Valid 7 days, then rejected on use. |
| Buyer contact details (name/email/phone/note) | Deleted automatically 30 days after the order is finally resolved (completed/declined/cancelled), or 30 days after submission if no order was created. |
| Database backups | Daily copies at Tigris are kept for 7 days, and one copy per week for 4 more weeks. Before larger changes we also sometimes take a manual copy on the server; the ten newest are kept, and never longer than 30 days. Deleted information can therefore remain in a backup for a while after it is deleted. |
| Email correspondence and send log | No automatic deletion today. We delete it on request. |
| Do-not-re-add list | For as long as the service exists, so a removed profile is not created again. |
Under the Norwegian Personal Data Act and the GDPR you have the right to:
For all enquiries: kontakt@rettfrabonden.com
We use the following measures to protect data:
If we change how we handle data, we update this page. We have no newsletter or popup notifications — check this page if you're wondering.
Last updated: 11 October 2026