Privacy

For your account, for visitors to pledge.no and for people who ask for beta access, Ur Solutions AS is the controller.

For the data a workspace puts into Pledge, such as clients, contracts, signers, people, leads and hours, the company that runs the workspace is the controller. We process that data on its behalf under our data processing agreement. If you are a client or signer of a Pledge customer, ask that company first about your data.

The AI chat sends your message, and the workspace data it needs to answer, to OpenAI. We ask OpenAI not to store the conversation, and OpenAI does not use API data to train its models. Your chat history is kept in Pledge so you can return to it, and you can delete a chat at any time.

When a workspace uses Leads, incoming leads are sent to Anthropic to be sorted and summarised. Anthropic does not use this data to train its models.

AI replies can be wrong. They are suggestions, and a person decides what to send or sign.

You can connect your own AI assistant, such as Claude, ChatGPT or Codex, to Pledge. When you do, the assistant’s provider handles what you share with it under your own agreement with them. They are not our sub-processors. Pledge only gives the assistant the access you approve when you sign in, and you can revoke it at any time in Settings, AI.

Pledge uses the cookies it needs to keep you signed in and secure, and remembers your cookie choice. These are always on.

With your consent, we also use PostHog, in the EU, to count visits and see which parts of Pledge are used. It records pages and clicks, without the text on screen, and never records your screen. If you are signed in, it knows your account by an id, not your name or email. Nothing is stored or sent until you choose “Accept all” or turn analytics on. There are no advertising cookies.

You can change your choice at any time: Cookie settings.

We use a few providers to host, email and run AI for Pledge. They are listed, with what they do and where, on our sub-processors page. The app and the database run in Frankfurt, Germany. Some providers are based in the United States. Where data leaves the EEA, we rely on the EU–US Data Privacy Framework or the EU’s standard contractual clauses.

We do not sell personal data.

• Account and workspace data: as long as the workspace uses Pledge. When a workspace closes, we delete its data as the data processing agreement describes.
• Signed contracts and audit trails: as long as the workspace keeps them, since they are records of an agreement.
• AI chats: until you or the workspace delete them, or the workspace closes.
• Technical logs: a short time, normally no more than 30 days.
• Beta requests: until the beta ends.

You can ask to see, correct, export or delete your personal data, to limit how we use it, or to object. Where we rely on consent, you can withdraw it at any time. If your data is in a workspace, we pass your request to the company that runs it. You can also complain to Datatilsynet, the Norwegian Data Protection Authority.

Data is encrypted in transit and at rest. Signed contracts are sealed so changes can be detected. Access to production data within Ur Solutions is limited to the people who need it to run Pledge.

When we change how we handle personal data, we update this page and the date at the top. For important changes we also tell workspace owners by email.

Write to contact@ursolutions.no with any question about privacy.