Last updated 23 September 2026.
Who we are
OysterQ AS (org. nr 936 794 750) is the data controller for the personal data described here. You can reach us at hello@oysterq.com.
What OysterQ does
OysterQ is a market-intelligence tool for business leaders, investors, advisers and anyone else who needs to understand a market, with dedicated modules for the legal, accounting and audit markets. It reads public registers and filed company accounts in Norway and Sweden, and presents them as market analysis. Most of what it holds is information about companies, which is not personal data.
The personal data we hold
| What | Where it comes from | Why we hold it |
|---|---|---|
| Names of registered auditors and accountants, and the firm each is registered with | Finanstilsynet’s public registers | To show which professionals work at which firms, which is the basis of the market analysis our customers use |
| Names of lawyers, trainee lawyers and other licence holders, the type of licence, and the firm each is registered with | The lawyer register (Advokatregisteret), which Advokattilsynet makes available through data.altinn.no | To show which professionals work at which firms, which is the basis of the market analysis our customers use |
| Changes in those registrations over time — that a named person moved from one firm to another, and roughly when | Built by us, from daily snapshots of those registers taken since 14 August 2026 (the lawyer register since 18 September 2026) | To show how firms gain and lose professionals, which the registers themselves do not record |
| Names of a company’s registered role holders — general manager, chair, board members, deputies and observers — with the role and the dates it ran from and to, and the names of the company’s shareholders and beneficial owners | The Brønnøysund Register Centre and the shareholder register, supplied through Enin AS. Fetched from Enin when a user opens a company’s page, held in memory for up to an hour, and not stored in our files | To show who leads, governs and owns the companies our customers analyse, and how that has changed |
| Names and contact details of our own customers’ users | Given to us when an account is created | To provide the service and to contact account holders about it |
| Name, email address, telephone number and, optionally, firm of anyone who requests a free trial on the website | Given in the form on the pricing page | To open the trial account, send the login details and follow up the trial |
We do not hold any special category data as defined in Article 9 of the GDPR — nothing about health, beliefs, ethnicity, political views, union membership or sexual orientation. We do not use personal data for profiling or automated decision-making.
Our legal basis
Register information about professionals
We rely on legitimate interests (GDPR Article 6(1)(f)). Our interest is in providing market intelligence about a regulated profession; our customers’ interest is in understanding the market they compete in. The information concerns people acting in a professional capacity, is already published by a public authority, and is not sensitive.
We recognise that combining daily snapshots creates something the source registers do not publish: an individual’s registration history over time. If you would prefer not to appear, see objecting below.
Role holders and owners
Here too we rely on legitimate interests (Article 6(1)(f)). Who manages, sits on the board of or owns a company is information the law requires to be registered, and the Brønnøysund registers publish it precisely so that others can see it. We do not copy it: it is fetched from Enin when a page opens and shown as the register holds it. Only the name, the role and the dates are fetched — not the date of birth, national identity number or address, although the source holds them.
Our customers’ users and trial accounts
We rely on the contract with the customer (Article 6(1)(b)) — we cannot provide accounts without holding them. A free trial rests on the same basis: the details are needed to open the account you asked for and to follow up the trial.
How you were told
We did not collect the register information from you, so Article 14 applies. Contacting every registered professional individually would involve disproportionate effort, so we publish this notice instead, as Article 14(5)(b) permits.
How long we keep it
- Register information and its history: for as long as we operate the service. The historical record is the point of it — a market that only shows today tells you nothing about how it got here.
- Role holders and owners: not stored by us. Enin’s answer is held in the server’s memory for up to an hour after a page is opened, and fetched afresh the next time.
- Customer account data: for the life of the account, and up to twelve months afterwards so an account can be restored if it is closed by mistake.
- Details from a trial that does not become a customer relationship: up to twelve months after the trial ends.
- Server logs: rotated automatically and retained for a matter of weeks.
AI insights
The application has a function that lets you ask questions about the figures on the page you are looking at. The question and a selection of the page's figures — page type, years, amounts, company names and organisation numbers — are sent to Anthropic, PBC (USA), which processes them on our behalf to answer. No personal data is sent: pages that show named people (registered auditors, accountants and lawyers, client lists) are never read by the function, information about owners, boards and management is removed before anything is sent, and sole proprietorships and personal registrations are replaced by a serial number.
Your rights
Under the GDPR and the Norwegian Personal Data Act you may ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything that is wrong;
- delete it, or restrict what we do with it;
- provide it in a portable format, where that right applies;
- stop processing it — see below.
Objecting
Because we rely on legitimate interests, you have the right to object under Article 21. Write to hello@oysterq.com and tell us who you are. We will stop unless we can show compelling legitimate grounds that override your interests, and we will explain our reasoning either way.
One thing worth being straight about: the underlying registers are published by Finanstilsynet and Advokattilsynet, and removing you from OysterQ does not remove you from them.
Complaining
If you are not satisfied with how we handle a request, you can complain to Datatilsynet, the Norwegian Data Protection Authority (datatilsynet.no). We would rather you came to us first.
Cookies
This website sets no cookies and uses no analytics or tracking. We use Google Search Console to see how the site appears in Google search; that happens on Google's side and collects nothing from your visit here.
The application at app.oysterq.com sets three cookies:
| Name | What it does | Lifetime |
|---|---|---|
| oq_session | Keeps you signed in. | Twelve hours |
| oq_lang | Remembers the language you chose. | One year |
| oq_country | Remembers the country you chose. | One year |
All three are necessary for the service to work, are not used for tracking or advertising, and so do not require consent. The application uses no analytics.
Accuracy of the data
OysterQ is built on what companies and public registers have filed. We do not audit or verify those figures, and we do not take responsibility for the accuracy of what companies report. We do not guarantee that the figures are complete or correct: they may be restated, filed late, or contain errors made by whoever filed them.
Some adjustments are our own, made so that figures can be compared: a filing that is plainly in the wrong unit (a thousand times too high in a single year, for example) may be corrected, accounts filed in a foreign currency are converted to Norwegian kroner, and where a company has filed more than one set of accounts for the same year we choose one of them. Such adjustments are ours and are no guarantee that the figures are right. Nothing in OysterQ is advice, and it should not be the only basis for a decision.
If you believe information about you is wrong, tell us and we will look into it — though where the error is in the public register, it usually has to be corrected there before we can reflect the change.
Changes to this notice
If we change what we do with personal data, we will update this page and change the date at the top.