Privacy Policy

1. Data controller

Nordyn AI is the controller of your personal data.

Nordyn AI operates from Sweden. For data protection matters, including access or erasure requests: info@nordynai.se or +46 76 067 89 37. We reply in Swedish or English.

2. What we process

We only process what you give us, plus the technical data needed to run the site:

• Waitlist and demo requests: your email address and which service you expressed interest in.
• Customer account: email address, password (always stored as a one-way hash — we can never read it) and, if you enable it, two-factor authentication data.
• The Booking Agent configurator: the form opens your own email client and sends the details to us as an ordinary email. Nothing is stored automatically in any system of ours — it arrives in our inbox like any other message. The content is whatever you choose to enter: business type, channels, opening hours, contact details and any free-text notes.
• Payment details: handled entirely by Stripe. We never receive or store your card number — we see only payment status, amount and the last four digits.
• Technical information: essential session cookies that keep you signed in, and standard server logs (IP address, timestamp, browser type) generated by our hosting provider for operational and security purposes.

We do not process special categories of data under Article 9 GDPR, and we do not use automated decision-making or profiling that produces legal effects for you.

3. Cookies

We use strictly necessary cookies only. They are required to sign you in and keep you signed in, and cannot be disabled without breaking the service.

We use no analytics, marketing, advertising or tracking cookies. We do not run Google Analytics, the Meta pixel or any equivalent tool. That is also why you see no cookie consent banner — there is nothing to consent to beyond the strictly necessary.

4. Why we process it, and on what legal basis

• To answer your enquiry and send the information you asked for — legal basis: legitimate interests (Art. 6(1)(f) GDPR).
• To create and administer your account and deliver the service — legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• To process payments and subscriptions — legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• To send news or offers — legal basis: your consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time, and every message contains an unsubscribe link.
• To meet statutory bookkeeping obligations — legal basis: legal obligation (Art. 6(1)(c) GDPR).
• To protect the service against abuse, fraud and disruption — legal basis: legitimate interests (Art. 6(1)(f) GDPR).

5. Who we share it with

We never sell your personal data and never share it for anyone else’s marketing. We do use a small number of processors acting on our behalf, each bound by a data processing agreement:

• Supabase, Inc. — database, sign-in and authentication.
• Vercel, Inc. — hosting and site delivery.
• Stripe Payments Europe, Ltd. — payments and subscription management.

Once you are a customer and your agent is connected to a messaging channel, conversations are also processed by the platform you chose. Which ones depends entirely on your selection, and may include Meta Platforms Ireland Limited (WhatsApp Business and Instagram), Apple Distribution International Ltd. (iMessage), Google Ireland Limited (Google Calendar). Those platforms’ own terms and privacy policies govern their processing.

We may also disclose data where required by law, regulatory decision or court order.

6. Transfers outside the EU/EEA

Some of our providers are established outside the EU/EEA or may access data from there. Where data is transferred to a third country, it is done under the European Commission’s Standard Contractual Clauses or a valid adequacy decision, together with supplementary safeguards where needed.

For a copy of the safeguards applied, contact us at info@nordynai.se.

7. How long we keep it

• Waitlist and demo requests: until you ask us to delete them, or at most 24 months after our last contact.
• Customer and account data: for the term of the agreement and 12 months thereafter, so you can resume without starting over.
• Records subject to bookkeeping obligations, such as invoices: seven years after the end of the calendar year in which the financial year ended, under the Swedish Bookkeeping Act (1999:1078).
• Server logs: normally no more than 30 days.

Once the retention period expires, data is deleted or permanently anonymised.

8. Your rights

Under the GDPR you have the right to:

• be informed about and receive a copy of the personal data we hold about you,
• have inaccurate data corrected,
• have data erased where we have no legal obligation or other ground to keep it,
• request that processing be restricted,
• object to processing carried out on the basis of legitimate interests,
• receive the data you provided in a machine-readable format and transfer it elsewhere (data portability),
• withdraw consent, without affecting the lawfulness of processing carried out beforehand.

Contact us at info@nordynai.se and we will help. We respond without undue delay and within one month at the latest.

If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), the supervisory authority in Sweden — imy.se.

9. Security

All traffic to and from the site is encrypted over HTTPS. Passwords are never stored in plain text, only as one-way hashes. We offer two-factor authentication on customer accounts and recommend enabling it. Access to customer data is limited to those who need it to deliver the service.

No internet service can guarantee complete security, but we work continuously to protect your data and remediate weaknesses as soon as they are found.

10. Changes to this policy

We may update this policy, for example as the service develops or the law changes. The current version is always on this page and the date at the top shows when it last changed. We notify affected customers by email of material changes.

11. Contact us

If you have questions about how we handle your personal data, email info@nordynai.se or call +46 76 067 89 37.