Privacy Policy

1. Who we are

Priimal Technologies AS ("Priimal", "we", "us") is registered in Norway. We build and operate Vantage, an AI-powered risk intelligence and revenue recovery platform used by organisations across our Pulse, Claim, Ledger, Signal, and Assure product lines.

This policy explains how we collect and use personal data when you visit our website, sign up for a Vantage trial, or use the Vantage platform as an authorised user of one of our tenant organisations. If you're a customer, employee, claimant, or account holder whose data has been uploaded to Vantage by one of our tenants, Priimal is acting as a data processor on that tenant's instructions, not as the controller of your data. In that case, this policy explains our general practices, but the tenant organisation's own privacy notice governs how your data is used, and you should direct data subject requests to them first.

Contact for privacy matters: connect@priimal.com

2. What personal data we collect

Account and contact data: name, email address, job title, company name, and phone number, collected when you sign up for a Vantage trial, create a tenant account, or contact us directly.

Platform usage data: login activity, case actions taken within Vantage, notes and assignments you create, and general usage patterns, collected as part of operating the case management workflow.

Technical data: IP address, browser type, device information, and cookie data, collected automatically when you use our website or platform.

Communications: the content of support requests, sales enquiries, and any correspondence you send us.

3. Why we process this data, and our legal basis

Providing the Vantage platform: to create and manage your account, authenticate logins, and deliver the case management, scoring, and reporting features you're entitled to under your tenant's tier. Legal basis: performance of a contract.

Trial signups and sales conversations: to evaluate and respond to trial applications and enquiries. Legal basis: our legitimate interest in responding to prospective customers, or steps taken at your request prior to entering a contract.

Platform security and audit: to maintain the audit trail features described in our platform documentation, detect misuse, and secure our systems. Legal basis: legitimate interest in platform integrity and security.

Service communications: sending you case assignment notifications, password resets, and operational updates via our email provider. Legal basis: performance of a contract.

Marketing communications: where you've opted in, sending updates about Priimal products. Legal basis: consent, which you can withdraw at any time.

Legal compliance: where we're required to retain or disclose data by law. Legal basis: legal obligation.

4. Who we share data with

We don't sell personal data. We share it with the following categories of recipients, each bound by contractual data protection terms:

• AI processing: records that our statistical screening flags as candidates are sent to Anthropic (our AI provider) via API to generate the risk score, confidence rating, and explanation shown in Vantage. Records the screening does not flag are not sent. Anthropic processes this data as our sub-processor under its own data handling terms.
• Email delivery: transactional and notification emails are sent via our email service provider (Brevo).
• Hosting infrastructure: platform data is stored on our hosting provider's servers in Finland, within the European Economic Area.
• Market Partner network: where you're a tenant onboarded through one of our Market Partners, that partner may have visibility into your account and case-level recovery data as part of their portfolio management role.
• Legal and regulatory bodies: where disclosure is required by law, court order, or to protect Priimal's legal rights.

A full, current list of sub-processors is available on request and is maintained as part of our Data Processing Agreement with tenant organisations.

5. International data transfers

Some of our sub-processors, including our AI provider, operate outside the European Economic Area. Where personal data is transferred internationally, we rely on Standard Contractual Clauses or another recognised transfer mechanism to ensure an equivalent level of protection.

6. How long we keep data

We retain account and case data for as long as your tenant relationship is active, and for a defined period afterwards to meet legal, accounting, and dispute resolution needs. Exact retention periods for tenant case data are set out in the Data Processing Agreement with each tenant. Website enquiry data not converted into a customer relationship is deleted after 12 months.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent where processing relies on it. If Priimal is the controller of your data (for example, as a website visitor or trial applicant), contact connect@priimal.com to exercise these rights. If your data was uploaded to Vantage by a tenant organisation, please contact that organisation directly; we'll support them in responding to your request.

You also have the right to lodge a complaint with your local data protection authority.

8. Security

We maintain technical and organisational measures appropriate to the sensitivity of the data we process, including access controls scoped by tenant, encrypted credential storage, and signed webhook payloads for outbound integrations. Full detail is set out in the security annex to our Data Processing Agreement.

Vantage offers two-factor authentication (2FA) as an optional login security feature and prompts every user to enable it at signup, with periodic reminders thereafter. Enabling 2FA remains voluntary and is ultimately each user's decision, but we actively encourage it.

9. Cookies

Our website and platform use essential cookies required for login and session management, and (where you consent) analytics cookies to understand usage patterns. You can manage cookie preferences through your browser settings or our cookie banner. See our Cookie Policy for full details.

10. Children

Vantage is a business platform. We don't knowingly collect personal data from anyone under 16, and the platform isn't directed at children.

11. Changes to this policy

We'll update this policy as our practices evolve and post the revised version with an updated date. Material changes affecting tenant data processing will also be communicated under the terms of the Data Processing Agreement.

12. Contact us

Priimal Technologies AS
Email: connect@priimal.com
Attention: Chief Executive Officer