Workspace owners can request a Data Processing Addendum for business use by contacting legal@primeportal.no. This page summarises the operational position until a signed DPA is in place.

For workspace content added by a customer, the customer typically acts as controller and Primeportal acts as processor. Primeportal processes the content to provide the product, secure the workspace and support requested AI-assisted tasks.

• Workspace, membership and role data.
• Brand profiles, project context, assets, drafts, instructions and feedback.
• AI task inputs, generated outputs, job metadata and usage events.
• Operational logs, audit events and security signals.

• Tenant-aware data model and role-based access controls.
• Supabase Row Level Security for tenant isolation where applicable.
• Transport encryption, hosted database encryption and managed infrastructure controls.
• Audit and usage events for important workspace and AI operations.
• Data minimisation for AI jobs: send the context needed for the task.

Primeportal may use subprocessors for hosting, database, authentication, storage, billing, email, analytics and AI processing. Current product infrastructure may include Vercel, Supabase, OpenAI, Stripe and Resend depending on the enabled feature set.

See the Privacy Policy and Terms of Service for the public baseline that applies to Primeportal use.