← Back to home

Privacy Policy

Last updated: 16 September 2026

1. Who we are

ScandicSales provides a personal commission tracking service for salespeople. We are the data controller for the account and sales information you record in the service. You can reach us at hello@scandicsales.com.

2. Data we collect

  • Account data: name, email address, profile picture and password (stored only as a secure hash).
  • Usage data you enter: sales, sale types, commission rates, hours worked and lists.
  • Technical data: log records, device and browser information needed to operate and secure the service.

3. Why we process it and on what legal basis

We process your data to deliver the service and fulfil our agreement with you (GDPR Article 6(1)(b)), to keep the service secure and comply with accounting and tax obligations (Article 6(1)(c) and 6(1)(f)), and, where required, on the basis of your consent (Article 6(1)(a)). We do not sell personal data and we do not use it for advertising or automated decision-making.

4. Processors and transfers

We use a limited number of processors to run the service: cloud hosting and database services, and an email delivery provider for account emails. Data is stored within the EU/EEA where the provider offers it. Where a transfer outside the EEA is necessary, it is covered by the European Commission's Standard Contractual Clauses. Each processor is bound by a data processing agreement.

5. Retention

Account and sales data is kept for as long as your account is active. When you delete your account, your personal data and sales records are deleted from our production systems without undue delay, and from backups within 30 days. Invoice records are retained for five years as required by Norwegian bookkeeping law.

6. Your rights

You have the right to access, correct, delete and receive a copy of your personal data, to restrict or object to processing, and to withdraw consent at any time. You can delete your account and all associated data from the settings page in the app. To exercise any other right, email hello@scandicsales.com; we respond within 30 days. You may also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or your local supervisory authority.

7. Security

Data is encrypted in transit with TLS and at rest by our hosting provider. Access is restricted by row-level database rules so users only reach their own account data, and administrative access is limited to personnel who need it. If a personal data breach occurs, we notify the relevant supervisory authority within 72 hours and affected users without undue delay.

8. Cookies

We use only strictly necessary cookies and local storage to keep you signed in and remember your language and display preferences. We do not use advertising or third-party tracking cookies.

9. Changes

If we make material changes to this policy we will notify you by email or in the app before they take effect. Questions? Write to hello@scandicsales.com.