Privacy notice
This notice explains how Aprex AS processes personal data when you visit Hej CRM, create an account or use the service.
Who is responsible?
Aprex AS (Norwegian organisation number 937 881 444), Åslyveien 19, 3170 Sem, Norway, is the controller for accounts, website visits, support and subscription administration. When a customer records information about its own customers and contacts in Hej CRM, that customer decides the purpose and is the controller. Aprex then processes the information on the customer’s documented instructions as processor.
Information and purposes
We process names, email addresses, login and security information to create accounts, provide the service and protect it. Customer, contact, deal, follow-up and quote information is processed for CRM features on the customer’s instructions. Subscription and payment status is used for billing and access control. Operational logs and technical events are used for troubleshooting and security. The legal bases are the contract, customer instructions, legal obligations and our legitimate interest in operating the service securely.
Providers and transfers
We use Vercel for hosting, Neon for the database, Postmark for email, Sentry for troubleshooting, Stripe for payments and OpenAI for selected AI features. Their purposes, locations and transfer grounds are listed on the Sub-processors page. Some providers are established in or may process data outside the EEA. Such transfers must rely on a valid transfer mechanism, such as standard contractual clauses or an applicable adequacy decision.
Retention, export and deletion
Account and CRM data is retained while the account is active. Data is not automatically deleted just because a trial or payment ends. Customers can export their data and request deletion in settings. Deletion follows the customer’s action, subject to legally required retention and the necessary expiry of backups. Security and billing records may be retained for as long as the law requires.
Your rights
You may request access, correction, deletion, restriction or portability, and object where the law gives you that right. Contact Aprex AS at the address above or through the support address shown on the help page if one is configured. If you use Hej CRM through your employer, you should normally direct the request to your employer. You may complain to the Norwegian Data Protection Authority or your local authority.