Privacy policy

Who we are

Solvrs.AI B.V. ("Solvrs"), Keizersgracht 555, 1017 DB Amsterdam, the Netherlands, Chamber of Commerce no. 99114232. Questions about privacy: info@solvrs.ai.

Website: what we process and why

• Contact form and intake: your name, email address, your message and the answers you provide. We use them to answer your question and prepare a possible collaboration (legal basis: your request and our legitimate interest). The form runs via Formspree; messages arrive in our Google Workspace mailbox.
• Booking a meeting: via a Google Calendar booking page. Google processes what you enter there; we see your name, email address and the time.
• Applying for a job: by email. We use your data only for the application process.
• Analytics: Google Analytics, to see which pages are visited, not for advertising. Your IP address is truncated. We set analytics cookies only if you consent in the cookie banner. If you decline, Google Analytics sends only a cookieless signal (Consent Mode), which does not let us recognise you across visits. To change your choice, clear the site data for solvrs.ai in your browser; the banner will ask again.
• Fonts: the site loads fonts from Google Fonts. Your browser connects to Google for this, which passes on your IP address.
• Hosting: the site runs on Heroku (Salesforce), which processes technical data such as your IP address to serve the site.

Solvrs AI Platform: who is responsible

You use the platform through your employer or client ("your organisation"), which is the controller of the data in the platform; Solvrs processes it on their behalf under a data processing agreement. If you have a question about your data in the platform, please ask your organisation first. We support them in answering it.

Where the data is stored: with the Own environment package, in your organisation's own cloud; with the Standard package, in Microsoft Azure in Sweden (Sweden Central).

Solvrs AI Platform: what we process

• Your account: name, email address and role. You sign in with your organisation's account (Microsoft or Google); we store only a fixed identifier, never a password.
• Your conversations with the assistant, the results of agents, and drafts you approve or reject. Only you see the content of your own conversations; administrators in your organisation see only the status and usage of other people's activity.
• Connections to Microsoft 365 and Google Drive, only if you turn them on and give consent. With Google Drive the platform can read only the files you select yourself, and only read them. Access tokens are stored encrypted. Disconnecting revokes access, also at Google.
• Usage per AI model call (number of tokens, without content), for costs and invoicing.
• An audit log: who did what and when, without the content of conversations.
• Technical data: sessions (with browser type) and, to protect against abuse, your IP address.

Data from Google

The Solvrs AI Platform's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In practice: we use files from Google Drive only to provide the features you use in the platform; we do not use them for advertising, we do not sell them, and we do not use them to train AI models. People at Solvrs do not read them, except with your explicit consent, where necessary for security, or where required by law.

AI processing

What you ask the assistant, and what a tool retrieves for you, is sent to an AI model to produce an answer. In the Standard package this is Microsoft's Azure OpenAI, within the EU (regional or in the EU data zone, never global). Microsoft may retain inputs and outputs for up to 30 days to detect abuse. In the Own environment package the platform uses the AI account your organisation chooses.

Your data is not used to train AI models. The platform takes no decisions about you based solely on automated processing: anything an agent wants to change in another system is approved by a person first.

How long we keep data

• Contact requests: up to 2 years after the last contact. If we start working together, for the duration of the collaboration, and data belonging to our accounts for 7 years (statutory retention).
• Job applications: up to 4 weeks after the process ends, or up to 1 year with your consent.
• Analytics: up to 14 months.
• Platform: as long as your organisation uses the platform, unless you delete something yourself earlier (a conversation) or your organisation has your data erased. Sessions up to 30 days after they end, read notifications 90 days, other notifications 365 days, IP addresses for abuse protection 1 day, technical logs 30 days, backups 7 days. Usage and the audit log are kept as long as needed for invoicing and accountability. After the contract with your organisation ends, Solvrs deletes the data within 30 days, or first returns it if your organisation asks; backups then expire automatically.

Who we share data with

We never sell personal data. We use these service providers: Google (Workspace, Analytics, Calendar and Fonts), Formspree (contact form), Heroku/Salesforce (website hosting) and Microsoft (Azure, for the platform in the Standard package). Some of them process data in the United States, on the basis of the safeguards required by the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. Otherwise we share data only when the law requires it.

Security

Connections are encrypted. In the platform, each organisation's data is separated in the database, access tokens are stored encrypted, every role gets only what it needs, and every change is logged. Solvrs's management tools cannot read the content of conversations.

Your rights

You have the right to access, rectify, erase, restrict processing of, object to and port your data, and you can withdraw consent at any time. Email info@solvrs.ai; we respond within one month. In the platform you can also download your own data via "Download my data".

If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

If the way we process data changes, we update this policy. The date of the last change is shown at the top.