Privacy policy

What we process

We only collect what we need to reply to you and keep the website running:

• Contact details you give us in the form, in the chat or by email: name, email address, organization, and what you write.
• Questions and messages you write in the chats.
• Anonymous visitor statistics: which pages are visited, where visitors come from (e.g. a search engine), country, device type, and browser. It is collected without cookies and without identifying you.
• Your IP address, used briefly to limit the number of requests and protect the service from abuse.
• Technical data in server logs, such as the time and which page was requested.

Why, and on what legal basis

We process your contact details to answer your enquiry and, if you wish, to prepare a proposal or agreement. The legal basis is our legitimate interest in responding to enquiries, or taking steps at your request before entering into a contract.

IP addresses and logs are processed based on our legitimate interest in keeping the website secure and available. Visitor statistics and questions to the chats are processed based on our legitimate interest in understanding how the website is used and improving it.

The chat assistant and AI

The chat assistant uses a language model from OpenAI. What you write is sent to OpenAI so a reply can be generated. Under OpenAI’s API terms, the data is not used to train their models and may be retained for up to 30 days to detect abuse.

To improve the assistant, we keep the questions and messages you write — but before they are stored, email addresses, phone numbers, and personal identity numbers are removed automatically. They are kept without IP address for up to 90 days in Microsoft Azure within the EU. The assistant’s replies and full conversations are not stored. If you send an enquiry through the chat, it is handled like any other enquiry below. Please avoid sharing sensitive personal data in the chat.

Who has access to the data

We never sell personal data. We use providers that process data on our behalf (processors):

• Microsoft (Azure) – hosts the website and stores technical monitoring and redacted chat questions within the EU.
• Umami – cookie-free visitor statistics, stored within the EU.
• OpenAI – generates the chat assistant’s replies.
• Our email provider – delivers enquiries from the form and the chat to us.

Transfers outside the EU/EEA

Some providers are based in the United States. When data is transferred there, it is protected by the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

How long we keep data

We keep enquiries and email conversations for as long as needed to handle and follow up on them, and no longer than 24 months after the last contact unless we start working together. IP addresses used for rate limiting are kept only in server memory and deleted automatically within 24 hours. Redacted chat questions and technical monitoring are deleted after 90 days, and visitor statistics after 6 months.

Cookies and browser storage

We do not use cookies for tracking, analytics or marketing — visitor statistics are collected entirely without cookies. One cookie (devtodo.locale) remembers your chosen language, and your light or dark theme choice is stored locally in your browser. Both exist only to make the site work the way you chose.

Your rights

You have the right to request access to, correction or erasure of your personal data, to restrict processing, to object to processing based on legitimate interest, and to receive your data (data portability). Contact us at the email address above.

If you believe we process your data incorrectly, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.