Privacy Policy

Last updated: 2024-12-20

Who we are

Cardboard AS is a company headquartered in Norway that provides online services and virtual payment cards to business customers.

Personal data we collect

We may collect and process the following types of personal data about you:

Contact information, such as your name, email address, and phone number.
Business information, such as your job title, company name, and business address.
Billing information, such as your billing address and payment details.
Usage information, such as your IP address, device information, and website usage data.

How we use your personal data

We may use your personal data for the following purposes:

To provide our services to you, including billing and support.
To communicate with you about our services, including marketing and promotional materials.
To comply with legal and regulatory requirements.
To improve our services and to analyze usage data.

Legal basis for processing

Our legal basis for collecting and processing your personal data is based on:

Processing necessary for performing our services as agreed in our terms.
Your consent where specifically provided.
Compliance with legal obligations.

Data sharing and international transfers

We may share your personal data with third-party service providers, such as payment processors or IT support providers, in order to provide our services to you. Any transfer of your personal data outside the European Economic Area (EEA) will only occur under appropriate safeguards as required by data protection law, such as standard contractual clauses, to ensure your data remains protected according to EEA standards.

Data retention and security

We will retain your personal data for as long as necessary to provide our services to you, and in accordance with legal and regulatory requirements. We will take appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, or destruction.

Third-party services

We use the following third-party services to help us provide our services to you:

Adyen: We use Adyen to process payments, hold customer's funds, and issue virtual payment cards.
Google Ads and Google Analytics: We use Google Ads to place advertisements about our services on external platforms. Google Analytics assists us in measuring the effectiveness of these ads and in understanding user interactions with our website.
Google Cloud Platform: We use Google Cloud Platform to host our services and store your data.
HubSpot: We use HubSpot to manage our customer relationships and marketing efforts.
Intercom: We use Intercom to provide customer support via email and chat on our web sites, as well as our help center.
LinkedIn: We use LinkedIn's analytics and insight script to monitor the effectiveness of our marketing campaigns on LinkedIn. It enables us to track users who visit our website after engaging with our paid content on LinkedIn and understand if they sign up for Cardboard.
Mindee: We use Mindee to extract data from receipts.
Plausible: We use Plausible for website analytics.
PostHog: We use PostHog for website analytics and product insights.
SendGrid: We use SendGrid to send and receive emails. This includes receiving and forwarding receipt emails on behalf of you.
Sentry: We use Sentry for error tracking, which helps us identify and fix technical issues with our services.

Your rights

You have the right to access, rectify, or erase your personal data, as well as the right to object to or restrict processing of your personal data. You also have the right to data portability and the right to lodge a complaint with a supervisory authority.

Changes to this privacy policy

We may update this privacy policy from time to time. Any changes will be posted on our website, and we encourage you to review this privacy policy periodically.

If you have any questions or concerns about this privacy policy or our data processing practices, please contact us at hello@cardboard.inc.