Privacy Policy
Last updated: 18 June 2026
This policy explains what personal data Harrysson & Co collects, why, who it is shared with, and the rights you have over it. It covers this website and the services offered through it.
Who is responsible for your data
The data controller is Harrysson & Co AB (org. no. 559264-2499), at Lärdomsgatan 1, Linköping, Sweden. For any privacy question, or to exercise your rights, contact Simon Harrysson using the details below.
What we collect and why
We only collect data you give us or that is needed to run the service you asked for. Specifically:
Newsletter sign-up
If you opt in, we store your email address to send you occasional updates. We send these only after you tick the consent box, and you can unsubscribe from any email at any time.
Purchases
When you buy a product, the payment and your billing details are handled by Stripe. We receive your email address and the details of what you bought so we can deliver it and keep accounting records.
Product access
When you open a purchased online guide, we set a cookie so your access is remembered on that device. This is strictly necessary to deliver what you paid for. See the Cookie Policy for details.
The interactive demo
If you enter a website address into the live demo, that address and the public content fetched from it are sent to our AI provider (Anthropic) to generate the demo output. Do not submit confidential URLs. We do not store the submitted URL beyond what is needed to produce the response.
Booking a call
Scheduling is handled by Cal.com. The name, email and availability you enter there are processed by Cal.com to set up the meeting.
Analytics
If you accept analytics cookies, we use Vercel Web Analytics to understand which pages and features are used. It is privacy-friendly and does not build advertising profiles of you.
Data requests and support
If you email us or submit a data request, we process the contact details and the content of your message to respond.
Our legal bases
Under the GDPR we rely on the following legal bases:
- Consent, for the newsletter and for non-essential analytics cookies. You can withdraw consent at any time.
- Contract, to process and deliver a purchase you have made.
- Legitimate interests, to keep the site secure and working, including strictly necessary cookies, and to respond to enquiries.
- Legal obligation, to keep accounting and tax records for purchases.
Who we share data with
We do not sell your data. We use a small set of trusted service providers (processors) to run the service. Each only processes data on our instructions:
| Provider | Purpose | Location |
|---|---|---|
| Stripe | Payment processing and checkout | USA / EU |
| Resend | Sending email (newsletter and order delivery) | USA |
| Vercel | Website hosting, file storage, privacy-friendly analytics | USA / EU |
| Anthropic | AI processing for the interactive demo | USA |
| Jina AI | Reading public web pages for the demo (fallback) | USA |
| Cal.com | Scheduling and booking | USA / EU |
International transfers
Some of these providers are based in the United States, so your data may be transferred outside the EU/EEA. Where that happens, the transfer is protected by appropriate safeguards such as the EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
How long we keep it
- Newsletter email, kept until you unsubscribe or ask us to delete it.
- Purchase and accounting records, kept for as long as required by Swedish accounting law (currently seven years).
- Demo input, not retained beyond producing the response.
- Support and data-request correspondence, kept for as long as needed to handle the request and a short period afterwards.
Security and automated decisions
We protect your data with appropriate measures, including encrypted connections (HTTPS) and reputable providers that maintain their own security and data-protection standards. Access to personal data is kept to what is needed to run the service.
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects for you.
Your rights
Under the GDPR you have the right to access your data, to correct it, to have it deleted, to restrict or object to processing, to data portability, and to withdraw consent at any time.
To exercise any of these rights, email us or use the data request form. We will respond within one month. There is no charge for a reasonable request.
Complaints
If you believe we have handled your data improperly, we would like the chance to put it right, so please contact us first. You also have the right to lodge a complaint with the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY) (https://www.imy.se).
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. Significant changes will be highlighted on the site.