Privacy notice

NOT Roster is a private talent roster run by NOT Management AS, organisation number 931 067 915, Løypetona 31, 5918 Frekhaug, Norway. NOT Management AS is the data controller for the personal data described here.

For anything about your data (a copy of it, a correction, deletion, or a question about this notice), email tonje@notgroup.no. We answer as quickly as we can, and within one month at the latest.

We keep details about the creators and influencers on our roster so we can pitch them to brands and agencies for paid collaborations. Nothing on the roster is published.

Account details (email address, password held only as an encrypted value): to create and secure your account. Legal basis: performance of our agreement with you when you join the roster.

Profile details (name, country of residence, languages, content categories and style, photo, whether an agency represents you and your manager's name and email): to build the roster and judge which talent fits a brand campaign. Legal basis: our agreement with you, and your consent for the photo.

Channel details (the links, handles, follower and view figures, engagement figures, audience countries, audience age and gender splits you enter, and the collaborations you say you will not do): to present you accurately to brands. Legal basis: our agreement with you.

Date of birth: to confirm the 16 and over age limit for the roster. The team only sees your age as a number, never the date itself, and it is never shared with brands. Legal basis: our legal obligation to apply the age limit.

Pitch permissions and consent records (what you ticked, and when): to prove we had permission before sharing your details. Legal basis: legal obligation and your consent.

Newsletter sign-up (your email address and opt-in): to send marketing, event and newsletter emails. Legal basis: your consent, which you can withdraw at any time.

Brand and agency enquiries (name, company, work email and message left on the pitch form): to answer the enquiry. Legal basis: our legitimate interest in responding to business contacts.

Team activity records (which team member changed or exported what, and when): to keep the roster secure and traceable. Legal basis: our legitimate interest in the security of the service.

When you press "Fill from YouTube" on a channel, we look up that channel using YouTube's public Data API and read only public information: the channel name, handle, profile picture, subscriber count, total view count and number of videos.

We never access your private YouTube analytics, your Google account, Gmail, Drive or any Google Workspace data, and we never ask you to sign in with Google for this. No credentials of yours are involved, the lookup uses our own application key and reads only what any visitor can see on your channel page.

The figures are stored on your profile and marked with the date they were pulled. Your own numbers always take priority, and you can overwrite or clear them at any time, or delete your profile to remove them entirely.

If we later add the same feature for other platforms, it will work the same way and this notice will be updated before it goes live.

Your details are never published and the site is not a public directory. Inside NOT, only team members with the right access level can see full profiles, and sensitive parts of a profile are restricted further.

When we pitch you for a deal, we share the relevant parts of your profile with that brand or agency, for example your channels, figures and audience. Brands never receive the whole roster or details that are not relevant to the deal. Any deal is agreed with you separately, every time.

If an agency represents you exclusively, we deal with your agency rather than with you directly.

We use service providers to run the site: cloud hosting and database services, and an email delivery provider. They process data only on our instructions, under data processing agreements. Where a provider processes data outside the EU/EEA, the transfer is covered by the European Commission's standard contractual clauses.

We do not sell your personal data, and we do not share it for advertising purposes.

We keep your profile while you are on the roster. You can edit or remove details at any time in your profile, delete your account yourself, or email us and we will remove you.

When an account is deleted, the profile, channels, audience data and photo are deleted with it. Consent records and security logs are kept for up to three years so we can show that we had permission and to protect the service. Records we must keep for accounting or other legal reasons are kept only as long as those rules require.

Pitch enquiries from brands are kept for up to two years after the last contact.

Newsletter sign-ups are kept until you unsubscribe, plus a short record of the unsubscribe so we do not email you again by mistake.

You have the right to be told what we hold about you and to receive a copy, to have inaccurate details corrected, to have your data deleted, to restrict or object to how we use it, to receive your data in a portable machine-readable format, and to withdraw any consent you have given. Withdrawing consent does not affect anything done before you withdrew it.

Email tonje@notgroup.no to use any of these rights. We may ask you to confirm your identity first so that nobody else can act on your behalf.

If you are unhappy with how we handle your data you can complain to Datatilsynet (the Norwegian Data Protection Authority): Postboks 458 Sentrum, 0105 Oslo, Norway (datatilsynet.no).

Access to the roster requires a personal account, and roles decide what each team member can see. Data is encrypted in transit, and access to sensitive parts of a profile is restricted at the database level rather than only in the interface.

If a data breach happens that puts your rights at risk, we will notify Datatilsynet within 72 hours and tell you directly where the law requires it.

The roster is for people aged 16 and over. If we learn that we hold details about someone younger without the required parental consent, we delete them.

The site uses only the cookies and local storage needed to keep you signed in and to remember that you have seen the cookie notice. There is no advertising tracking and no third-party analytics, so no cookie consent is required.

We only send marketing, event and newsletter emails to people who have ticked the box asking for them. Every newsletter has an unsubscribe link, and you can also ask us to remove you at any time.

Operational emails, such as your sign-up confirmation or a password reset, are part of running your account and are not marketing.

We update this notice as the service develops. The date at the top of the page shows the current version. If a change affects how we use your data in a meaningful way, we will tell you on the site or by email before it takes effect.