Privacy Policy

This policy explains how Reliable AI AS processes personal data when you use the Reliable service, visit our website or contact us.

1. Who is responsible

Reliable AI AS (reg. no. 934 343 786, Akersbakken 30, 0172 Oslo, Norway) is the controller for the processing described in this policy.

If you use Reliable through your employer, your employer is the controller for data we process on its behalf to deliver the service, such as the content of your projects. In that case we are the processor, and the processing is governed by a data processing agreement with your employer. You can direct questions about that processing to your employer or to us.

2. What we process, and why

This is the processing we carry out for our own purposes, as controller.

Your user account

We process your name, e-mail address and employer to administer your account and the customer relationship with your employer. We use your e-mail address only to send you information about the service.

Legal basis: Legitimate interest (Article 6(1)(f) GDPR) in administering the service and the customer relationship.

Sign-in and security

Sign-in is handled by Microsoft Entra ID, which logs the time, sign-in method and technical details of each sign-in. We use the logs to control access and to detect and investigate misuse, errors and security incidents. The logs are not used to monitor your work.

Legal basis: Legitimate interest in securing the service.

Use of the service

We record how the service is used, for example which features are used and how often. We use this for invoicing and improving the service.

Legal basis: Legitimate interest in invoicing and improving the service.

Search text

The text you search for may be stored so that we can improve the search. It is stored without your name, e-mail address or user ID, is deleted or anonymised automatically after at most 90 days, and is not used to train generative AI models.

You decide whether your searches are stored, unless your employer has switched storage off for all users. Storage can be switched off in the service, and from then on none of your searches are stored.

Legal basis: Legitimate interest in improving the search. You can object at any time by switching storage off.

The customer relationship

We process the names and contact details of contact persons at customers and prospective customers to enter into and follow up agreements and to invoice.

Legal basis: Legitimate interest in managing the customer relationship, and legal obligation (bookkeeping rules).

Our website and enquiries

• Visitor statistics. We use Vercel Analytics, which does not use cookies, to see how the website is used (pages visited, approximate location and device type). Legal basis: Legitimate interest in improving the website.
• Demo bookings. If you book a demo, Calendly processes the name, e-mail address and meeting details you provide. Legal basis: Legitimate interest in arranging and holding the demo.
• Enquiries. If you write to us, we process your message and contact details to reply. Legal basis: Legitimate interest.

3. How long we keep the data

• User account: For as long as the account is in use. It is deleted when your employer ends your access, when the customer relationship ends, or after 24 months of inactivity.
• Search text and usage data: Up to 90 days, after which they are deleted or anonymised automatically.
• Sign-in and security logs: Up to 24 months, for security reasons.
• Application logs: Up to 30 days.
• Customer relationship and enquiries: For as long as necessary for the purpose.
• Accounting records: For as long as bookkeeping rules require.

4. Who we share data with

We never sell personal data. We use providers that process data on our behalf, for example for running the service, sign-in, our website, e-mail, customer follow-up and demo bookings. The service runs on Microsoft (Azure and Entra ID) within the EU/EEA. Some other providers may process data outside the EU/EEA, in which case the transfer relies on a valid transfer basis, such as the EU standard contractual clauses.

We disclose data to authorities only when required by law. The full list of providers that process customer data in the service is on the Sub-processors page.

5. Cookies

The service uses only the cookies needed for sign-in. The website does not use cookies for statistics or marketing.

6. Your rights

You have the right to access the data we hold about you and to have incorrect data corrected. You can also request erasure, request restriction of processing, object to processing based on legitimate interest, and receive your data in a machine-readable format.

Contact us at hei@reliableai.no. We reply without undue delay and within one month at the latest. If we are unsure of your identity, we will ask you to confirm it before handling your request.

If you believe we process personal data in breach of the rules, you can complain to the Norwegian Data Protection Authority (Datatilsynet) or the supervisory authority where you live. We would appreciate it if you contacted us first.

7. Contact

Reliable AI AS, Akersbakken 30, 0172 Oslo, Norway. E-mail: hei@reliableai.no

8. Changes

We update this policy when needed. The current version is always on our website, where previous versions are also available.