Privacy Policy

Last updated: 22. July 2025

This Privacy Policy describes how supersolve AS (“we”, “us”, “our”), through our “Watchdog” service, processes personal data on behalf of our customers.

We act in two distinct roles:

  • As a Data Controller when you visit our website.
  • As a Data Processor when we provide the Watchdog service to our business customers, who act as Data Controllers under applicable data protection laws.

1. Who we are

supersolve AS (Org. no. 933 860 175) is the provider of Watchdog, an AI-powered tool that analyzes invoice and contract data to help businesses detect billing errors and cost-saving opportunities.

2. Website Visitors – Controller Role

When you visit our website, we may collect limited personal data, such as your:

  • Browser and device information.
  • Information submitted through contact forms.

This data is processed to operate the site securely, respond to inquiries, and improve site performance. We do not use your data for profiling, advertising, or resale.

Website logs are retained for up to 2 months unless required for security investigations. Contact form submissions are stored for up to 12 months.

3. Watchdog Customers – Processor Role

When delivering the Watchdog service, we process personal data on behalf of our customers and only in accordance with their documented instructions. The data is solely used to:

  • Detect pricing discrepancies, missing discounts, duplicate charges, and other irregularities.
  • Present insights to authorized users for validation and action.
  • Improve financial accuracy and reduce costs.

We do not use data for profiling, marketing, or unrelated purposes.

4. Data processing

We process business-related personal data appearing in invoices and contracts, such as:

  • Contact Details: Name, company email, phone number, and job title of our customers’ or their suppliers’ employees.
  • User Information: Usernames or User ID of our customer’s employees who access Watchdog.
  • Invoice & Contract Data: Personal data that may be found in invoices, contracts, or their attachments, such as the names of consultants.

We do not process special categories of data (sensitive personal data) beyond what may incidentally appear in documents.

5. Data retention

We retain personal data processed on behalf of customers only for the duration of the customer relationship. Upon termination of the service agreement, we delete all customer data without undue delay, unless legal obligations require a longer retention period.

6. Legal basis

We process data on behalf of our customers, based on a data processing agreement under Article 28 of the GDPR. Each customer remains the data controller.

7. Sub-processors and transfers

We use trusted sub-processors to support delivery of the Watchdog service. Primary processing and storage occur in secure EU/EEA data centers.

Some sub-processors (e.g., Google Cloud) may process data outside the EU/EEA. In such cases, we rely on EU Standard Contractual Clauses (SCCs) and implement appropriate safeguards to ensure lawful transfers. A list of sub-processors is available upon request.

8. Security measures

Data security is a high priority. We have implemented appropriate technical and organizational measures to protect personal data, including:

  • TLS 1.3 encryption in transit
  • AES-256 encryption at rest
  • Strict access control with multi-factor authentication
  • Hosting in secure EU-based data centers

9. Your rights

If you are a data subject, please contact the organization using Watchdog (our customer) to exercise your rights under the GDPR (e.g. access, rectification, deletion).

10. Contact

supersolve AS

Email: privacy@supersolve.ai

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. If we make material changes, we will notify customers and update the “Last updated” date above.