Legal · Prelaunch

Privacy Policy

Last updated: 11 October 2026

Who we are

SupportGate AS, organisation number 938 033 994, Ulven, Oslo, Norway, is the controller for the website, account and contact information described here. Contact us at hello@supportgate.no.

What is available now

This website presents Dataset Quality Filter before launch. Account access is being prepared. Where sign-in is available, the workspace is a holding page. Chat, file uploads, dataset checks, downloads and payments are not available. The animations use fictional examples; they do not process your files.

This policy covers website visits, enquiries and accounts. Dataset processing will require separate service terms, a data processing agreement and updated information before uploads are enabled.

Website visits and errors

Our hosting provider, Vercel, receives your IP address, requested address, request time and browser information to deliver and protect the website. Its operational and security logs can contain those details. Fonts and site icons are served with the website.

We use Sentry to diagnose software errors. Our code limits reports to an error category, time, application version and known code locations. It removes error messages, page query strings, form contents, user identity and attachments. Session recording, tracing and advertising analytics are not enabled. The receiving service necessarily receives your network address; IP storage is disabled in our Sentry project, but approximate city and country information can still appear. Error storage is configured in Sentry’s EU region. This does not mean every provider processes all data only in the EU.

The legal basis is our legitimate interest in providing, securing and repairing the website (GDPR Article 6(1)(f)). Technical records are kept for operational diagnosis and security, according to the retention settings of the relevant provider. They are not used to build advertising profiles. Provider retention and deletion details are available in the links below; contact us for the settings applicable to a particular record.

Clerk provides authentication. It processes your email address, account identifier, authentication and security information, including IP address, device/browser information and session records. You can sign in with an email verification link or with your Google account. If you choose Google, Google confirms your identity and shares your name, email address and profile image with Clerk. We do not receive your Google password or access to other Google services. Google handles that sign-in under its own terms; see Google’s privacy policy. Microsoft sign-in is not offered. Clerk also processes any name or profile image you add or that Google provides, your organisation membership, and the time you accept the account terms and acknowledge this privacy notice.

Account information comes from you or your organisation’s administrator. The fields marked required in the sign-up flow are needed to create and protect the account. You can browse the public website without an account. Clerk uses necessary browser storage; see our Cookie Policy. We disable Clerk’s optional SDK telemetry.

We use this information to provide and secure your account. Our legal basis is our legitimate interest in providing business access and preventing misuse (Article 6(1)(f)); Article 6(1)(b) applies where the account agreement is directly with you. Account records are kept while the account is maintained. You can request closure and deletion by email. Deletion requests include records held by our account provider; security records or information needed for a legal obligation or dispute may need to be retained separately. Provider backup copies may remain until they are removed under the provider’s deletion process.

Contacting us

If you use our contact form or email us, we receive your email address, message and any optional details you provide, such as your name, company, dataset interests and estimated volume. The form requires an email address and message; the other fields are optional. We use this information to answer and follow up on your enquiry, based on our legitimate interest in handling business correspondence (Article 6(1)(f)), or to take steps you request before entering a contract (Article 6(1)(b)). The form is sent through our hosting service and Resend to our email inbox. We also temporarily keep an IP-based request counter in server memory to limit repeated submissions, based on our legitimate interest in preventing abuse.

Correspondence is kept while the enquiry or resulting business relationship remains relevant, and where needed to meet legal obligations or establish, exercise or defend claims. You can ask us to delete correspondence that is no longer needed. Please do not include datasets, credentials or sensitive personal information in an enquiry. Resend stores message content and delivery records in the United States. Its standard email and log retention is 30 days, with backups retained for 7 days; these periods do not delete the copy in our inbox. Contact us about deletion of records relating to your enquiry. Contacting us or creating an account does not subscribe you to marketing.

Providers and international transfers

We use Vercel for hosting, Clerk for accounts and Sentry for error reporting. If you choose Google sign-in, Google provides that sign-in as a separate service. Resend delivers contact-form messages, and Google Workspace processes correspondence in our inbox. Stripe payments and Slack notifications are not connected to this website’s customer flow.

These providers may process information outside Norway and the EEA, including in the United States. Their published data processing terms describe safeguards, including applicable adequacy decisions and standard contractual clauses. An EU error-storage region is not a promise of exclusively European processing. Contact us for information about the agreements and safeguards that apply to your data.

Your rights

Depending on the applicable conditions, you may request access, correction, deletion, restriction and data portability. You may object to processing based on legitimate interests, including for reasons relating to your situation. If processing is based on consent, you may withdraw that consent without affecting the lawfulness of earlier processing.

Contact hello@supportgate.no. We may need proportionate information to verify your identity. Requests are normally answered within one month; the GDPR allows an extension for complex or numerous requests, with an explanation within that first month. You may complain to the Norwegian Data Protection Authority or your local supervisory authority.

We do not make automated decisions about you with legal or similarly significant effects through this prelaunch website.

Changes

We update this notice when the service or processing changes. The date above identifies this version. New processing, such as dataset uploads or payments, will be described before it is enabled.