Privacy Policy
Iver - Last updated: April 2026
1. Who we are
Iver ("we", "us") operates the running tour marketplace at iver.run. We are the data controller for personal data collected through the platform.
2. What data we collect
Account data: Name, email address, phone number, profile photo.
Booking data: Tour bookings, dates, time stamps, number of runners.
Payment data: Processed by Stripe. We do not store card details - Stripe does. We receive confirmation of payment and payout status.
Location data: City-level location used to surface relevant tours. We do not track your GPS.
Usage data: Pages visited, device type, browser - collected via standard analytics to improve the platform.
3. Why we collect it and our legal basis
| Purpose | Legal basis |
|---|---|
| Creating and managing your account | Contract |
| Processing bookings and payments | Contract |
| Sending booking confirmations and updates | Contract |
| Preventing fraud and abuse | Legitimate interest |
| Improving the platform | Legitimate interest |
| Marketing emails (if opted in) | Consent |
4. Who we share data with
- Stripe - payment processing
- Supabase - database and file storage (EU region)
- Vercel - hosting
We do not sell your data. We do not share it with third parties beyond what is needed to operate the service.
5. How long we keep your data
We keep your account data for as long as your account is active. Booking records are kept for 3 years for accounting and legal purposes. You can request deletion of your account at any time (see Section 6).
6. Your rights (GDPR)
As a person in the EEA, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and associated data
- Object to processing based on legitimate interest
- Portability - receive your data in a machine-readable format
- Withdraw consent for marketing at any time
To exercise any of these rights, email hello@iver.run. We will respond within 30 days.
You also have the right to lodge a complaint with your national data protection authority. In Norway, this is Datatilsynet.
7. Cookies
We use essential cookies to keep you logged in. We may use analytics cookies to understand how people use the site. You can disable cookies in your browser settings, though some features may not work as expected.
8. Changes
We may update this policy. We will notify you by email or a notice on the site for material changes.