Privacy Policy — CLUE Documents 

    Last updated: 23 July 2026 

    This Privacy Policy explains how Copro Live AS («we», «us», «the Company») handles personal data in the CLUE Documents mobile application (Android package / iOS bundle ID: no.copro.clue). 

    CLUE Documents is a business tool provided to organizations. It is used by employees of our customer organizations to access and manage documents. It is not intended for the general public or for children. 

    1. Who we are 

    Copro Live AS is the data controller for personal data processed through the app on our own behalf. When we process documents and content on behalf of your organization, your organization is the controller and we act as its data processor under a separate agreement. 

    Contact for privacy matters: support@copro.no 

    2. What data we process 

    Account and identity data (via Microsoft sign-in). You log in using your organization’s Microsoft account (Microsoft Entra ID / Azure AD single sign-on). Through this we receive your name and email address and a Microsoft user identifier, so we can authenticate you and link you to your organization. 

    Document content. Documents and related content you create, open, comment on or manage are stored in our database and processed so the app can function. 

    Authentication tokens. Sign-in tokens are stored securely on your device (iOS Keychain / encrypted storage) to keep you logged in. If you enable Face ID / biometrics, this happens locally on your device — we never receive your biometric data. 

    Technical data needed to run the app. Basic technical information required to deliver the service (for example, connecting your device to our API). 

    3. What we do NOT do 

    • We do not use advertising or sell your data. 
    • We do not use third-party analytics, tracking or advertising SDKs (no Firebase, Crashlytics, Google Analytics, Meta, etc.). 
    • We do not collect your location. The app does not track you across other apps or websites. 

    4. Who we share data with 

    We share data only with service providers that help us run the app: 

    • Microsoft — for authentication (single sign-on) and reading your basic work profile. 
    • Our hosting provider — servers located in Norway/the EEA, where the app’s data is stored. 

    We do not share your data with anyone else, except where required by law. 

    5. Legal basis (GDPR) 

    We process personal data to perform our contract with your organization and to provide the service you have been given access to (Art. 6(1)(b) and (f) GDPR). Where your organization is the controller, processing is governed by our data processing agreement with them. 

    6. How long we keep data 

    We keep your account and content for as long as your organization uses the service and your account is active. When an account or its data is deleted (see below), it is removed from our active systems. 

    7. Your rights and how to delete your account 

    Under the GDPR you can request access to, correction of, or deletion of your personal data, and you can object to or restrict certain processing. 

    Account deletion: accounts are managed by your organization. Your organization’s administrator can delete a user account from the web application (Administration → Users). If you want your account and associated personal data deleted, contact your organization’s administrator, or email us at support@copro.no and we will action the request together with your organization. 

    8. Children 

    CLUE Documents is a workplace tool and is not directed at children under 16. 

    9. App permissions 

    • Internet — to connect to our service. 
    • Face ID / biometrics (optional) — for convenient local login. Handled entirely on your device. 

    10. Changes to this policy 

    We may update this policy from time to time. Material changes will be reflected by the «Last updated» date above. 

    11. Contact 

    Copro Live AS 

    Strandgata 30 2821 Gjøvik, Norway 

    Email: support@copro.no