Privacy Policy

Who is responsible for your data

The data controller is Harrysson & Company AB (org. no. 559264-2499), at Lärdomsgatan 1, 583 28 Linköping, Sweden. For any privacy question, or to exercise your rights, contact Simon Harrysson using the details below.

What we collect and why

We only collect data you give us or that is needed to run the service you asked for. Specifically:

Newsletter sign-up

If you opt in, we store your email address to send you occasional updates. We send these only after you tick the consent box, and you can unsubscribe from any email at any time.

Purchases

When you buy a product, the payment and your billing details are handled by Stripe. We receive your email address and the details of what you bought so we can deliver it and keep accounting records.

Product access

When you open a purchased online guide, we set a cookie so your access is remembered on that device. This is strictly necessary to deliver what you paid for. See the Cookie Policy for details.

The interactive demo

If you enter a website address into the live demo, that address and the public content fetched from it are sent to our AI provider (Anthropic) to generate the demo output. Do not submit confidential URLs. We do not store the submitted URL beyond what is needed to produce the response.

The AI chat assistant

If you use the chat widget, your messages are sent to our AI provider (Anthropic) to generate the reply. We also save the conversation (your messages, our replies, timestamps and language) in private storage with our hosting provider (Vercel), so we can follow up on enquiries and improve the assistant. Conversations are not linked to your name or account unless you share such details in the chat, so please do not enter sensitive personal data.

Booking a call

Scheduling is handled by Cal.com. The name, email and availability you enter there are processed by Cal.com to set up the meeting.

Analytics

If you accept analytics cookies, we use Vercel Web Analytics to understand which pages and features are used. It is privacy-friendly and does not build advertising profiles of you.

Data requests and support

If you email us or submit a data request, we process the contact details and the content of your message to respond.

Our legal bases

Under the GDPR we rely on the following legal bases:

• Consent, for the newsletter and for non-essential analytics cookies. You can withdraw consent at any time.
• Contract, to process and deliver a purchase you have made.
• Legitimate interests, to keep the site secure and working, including strictly necessary cookies, to respond to enquiries, to save chat-assistant conversations so we can follow up and improve the service, and to email companies about our services (see If we have contacted you).
• Legal obligation, to keep accounting and tax records for purchases.

If we have contacted you

We sometimes email companies we think could use what we build. We then process data about you in your professional role:

• What: your name and work email where they are shown, the company's name and what the company shows on its website, such as contact forms and services, and our emails and your replies.
• Where from: the company's own website and other public sources, such as search engines.
• Why and on what basis: to offer our services to companies. The basis is legitimate interests (Article 6(1)(f) GDPR). We only email companies, never private individuals.
• Demos: if we have built a demo of your form, it is based only on what is already published on your website.
• Replies: an AI assistant helps us draft replies to your emails, and we review the drafts before anything is sent.
• How long: for as long as the contact is relevant. If you say no, we keep only your address on a suppression list so that we never email you again.

You have the right to object to our emails at any time. Just reply no thanks to any of our emails or write to us, and we stop straight away.

Who we share data with

We do not sell your data. We use a small set of trusted service providers (processors) to run the service. Each only processes data on our instructions:

International transfers

Some of these providers are based in the United States, so your data may be transferred outside the EU/EEA. Where that happens, the transfer is protected by appropriate safeguards such as the EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

How long we keep it

• Newsletter email, kept until you unsubscribe or ask us to delete it.
• Purchase and accounting records, kept for as long as required by Swedish accounting law (currently seven years).
• Demo input, not retained beyond producing the response.
• Chat-assistant conversations, deleted automatically after at most six months, or earlier if you ask us to.
• Support and data-request correspondence, kept for as long as needed to handle the request and a short period afterwards.

Security and automated decisions

We protect your data with appropriate measures, including encrypted connections (HTTPS) and reputable providers that maintain their own security and data-protection standards. Access to personal data is kept to what is needed to run the service.

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects for you.

Cookies

We use a small number of cookies, and optional analytics only with your consent. The Cookie Policy explains each one and how to change your choice.

Your rights

Under the GDPR you have the right to access your data, to correct it, to have it deleted, to restrict or object to processing, to data portability, and to withdraw consent at any time.

To exercise any of these rights, email us or use the data request form. We will respond within one month. There is no charge for a reasonable request.

Complaints

If you believe we have handled your data improperly, we would like the chance to put it right, so please contact us first. You also have the right to lodge a complaint with the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY) (https://www.imy.se).

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. Significant changes will be highlighted on the site.