Privacy Policy

Last updated: 2024-01-18

At Cardboard, we take your privacy seriously, and we are committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your personal information in accordance with the General Data Protection Regulation (GDPR).

Who we are

Cardboard AS is a company headquartered in Norway that provides online services and virtual payment cards to business customers.

Personal data we collect

We may collect and process the following types of personal data about you:

• Contact information, such as your name, email address, and phone number.
• Business information, such as your job title, company name, and business address.
• Billing information, such as your billing address and payment details.
• Usage information, such as your IP address, device information, and website usage data.

How we use your personal data

We may use your personal data for the following purposes:

• To provide our services to you, including billing and support.
• To communicate with you about our services, including marketing and promotional materials.
• To comply with legal and regulatory requirements.
• To improve our services and to analyze usage data.

Legal basis for processing

Our legal basis for collecting and processing your personal data is based on your consent, our legitimate interests in providing our services to you, or to comply with legal obligations.

Data sharing and international transfers

We may share your personal data with third-party service providers, such as payment processors or IT support providers, in order to provide our services to you. We may also transfer your personal data to countries outside of the European Economic Area (EEA) if necessary for the purposes of providing our services to you.

Data retention and security

We will retain your personal data for as long as necessary to provide our services to you, and in accordance with legal and regulatory requirements. We will take appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, or destruction.

Third-party services

We use the following third-party services to help us provide our services to you:

• Adyen: We use Adyen to process payments, hold customer's funds, and issue virtual payment cards.
• Google Ads and Google Analytics: We use Google Ads to place advertisements about our services on external platforms. Google Analytics assists us in measuring the effectiveness of these ads and in understanding user interactions with our website.
• Google Cloud Platform: We use Google Cloud Platform to host our services and store your data. We prefer to use Google Cloud Platform data centers located in the European Union, but may also use services provided by Google Cloud Platform from data centers outside the European Union.
• Intercom: We use Intercom to provide customer support via email and chat on our web sites.
• LinkedIn: We use LinkedIn's analytics and insight script to monitor the effectiveness of our marketing campaigns on LinkedIn. It enables us to track users who visit our website after engaging with our paid content on LinkedIn and understand if they sign up for Cardboard.
• Mindee: We use Mindee to extract data from receipts. Mindee is a French company with servers located in the European Union.
• Plausible: We use Plausible for website analytics, which collects anonymous usage data about your interactions with our website. Plausible is hosted in the European Union and does not use cookies or collect any personally identifiable information.
• SendGrid: We use SendGrid to send and receive emails. This includes receiving and forwarding receipt emails on behalf of you.
• Sentry: We use Sentry for error tracking, which helps us identify and fix technical issues with our services. Sentry may process your personal data on our behalf in accordance with our instructions and the Sentry privacy policy.

Your rights

You have the right to access, rectify, or erase your personal data, as well as the right to object to or restrict processing of your personal data. You also have the right to data portability and the right to lodge a complaint with a supervisory authority.

Changes to this privacy policy

We may update this privacy policy from time to time. Any changes will be posted on our website, and we encourage you to review this privacy policy periodically.

If you have any questions or concerns about this privacy policy or our data processing practices, please contact us at hello@cardboard.inc.