1. Who is responsible
Herman Halvorsrud Hansen is the controller for personal data processed through Paidward. Contact us at support@paidward.com for privacy questions or to exercise your rights.
2. Data we process
- Account data: email address, authentication identifiers and session information.
- Founder and business data: skills, interests, goals, business ideas, validation notes, offers, missions, customer or prospect records, pipeline activity and revenue information you choose to enter.
- AI interaction data: prompts, coach conversations, source business context and generated responses.
- Billing data: subscription status, Stripe customer and subscription identifiers, plan, billing interval and payment status. Paidward does not store your full card number.
- Technical and usage data: page views, device and browser information, approximate location derived from network data, performance metrics, security events and service logs.
- Support data: messages and information you send when asking for help or exercising a legal right.
Please avoid entering special-category personal data, confidential third-party information or more customer detail than Paidward needs to help you validate and sell your offer.
3. Why we process data
- Provide the service and your account — necessary to perform our contract with you.
- Generate opportunities, validation analysis, offers, coaching and reviews — necessary to provide features you request.
- Process subscriptions and maintain billing records — necessary for our contract and legal obligations.
- Secure, troubleshoot and improve Paidward — based on our legitimate interest in operating a reliable and safe service.
- Answer support and rights requests — necessary for our contract, legal obligations and legitimate interests.
- Comply with law and enforce our terms — necessary for legal obligations and legitimate interests.
Where consent is required for a specific optional activity, we will request it separately and you may withdraw it without affecting earlier lawful processing.
4. AI processing
When you use an AI feature, Paidward sends the relevant prompt and business context to OpenAI to generate the requested result. AI output may be incomplete or incorrect and should be reviewed before you act on it. Paidward does not use AI to make decisions that produce legal or similarly significant effects about you.
5. Service providers and recipients
- Supabase provides authentication and database infrastructure.
- Vercel hosts Paidward and provides privacy-oriented web analytics, performance insights and runtime logs.
- OpenAI processes content submitted to AI features to generate responses.
- Stripe processes subscription payments, invoices and the billing portal.
We may also disclose data when required by law, to protect users and the service, or in connection with a corporate transaction subject to appropriate safeguards. We do not sell personal data or use it for third-party behavioral advertising.
6. International transfers
Some providers may process data outside Norway or the European Economic Area. Where required, transfers rely on an adequacy decision, standard contractual clauses or another legally recognized safeguard. You may contact us for more information about applicable safeguards.
7. Retention
Account and workspace data is generally retained while your account is active. When you delete your account or request deletion, we remove or anonymize data unless retention is needed for billing, tax, fraud prevention, dispute resolution or another legal obligation. Residual copies may remain temporarily in protected backups and security logs until their normal rotation completes.
Billing records are retained for the period required by applicable accounting and tax law. Support records are retained only as long as needed to resolve the matter and document compliance.
8. Cookies and similar technology
Paidward uses essential authentication cookies to keep you signed in and secure your session. Vercel Web Analytics and Speed Insights measure aggregate usage and performance without third-party advertising profiles. Stripe may set its own essential cookies when you open checkout or the billing portal.
9. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing. You may also withdraw consent where consent is the legal basis. We may need to verify your identity before completing a request.
You may complain to your local supervisory authority. In Norway, this is Datatilsynet.
10. Security and children
We use access controls, encrypted transport, restricted service credentials, request limits and monitoring designed to protect the service. No system is completely secure, so contact us promptly if you suspect unauthorized account access.
Paidward is intended for people aged 18 or older and is not directed to children.
11. Changes
We may update this policy as Paidward or the law changes. Material changes will be communicated in the service or by another appropriate channel before they take effect where required.