Privacy Policy

1. Data Controller

We are the controller of your personal data.

2. Information We Collect

We may collect the following categories of personal data when you use our Services:

a. Information You Provide

• Name, email address, phone number
• Login or profile information
• Contact details for customer support
• Form submissions or communication content

b. Automatically Collected Information

• IP address
• Device information (browser type, OS, device type)
• Usage data (pages viewed, session duration, clicks)
• Cookies and similar technologies
• Meta Pixel and similar tracking tools to measure and optimize advertising performance

c. Data from Third-Party Platforms (Google, LinkedIn, etc.)

If you use our integrations or apps, we may receive data according to your permissions:

• Basic profile information
• Email address
• LinkedIn or Google account ID
• Organization or workplace info (if permitted)
• Calendar, contacts, or documents (only when you explicitly grant access)

We only access the specific data necessary for the app to function. We never store or access more data than required.

3. How We Use Your Information

We use your personal data for the following purposes:

• To operate and provide the Services
• To authenticate and connect your Google or LinkedIn account
• To personalize user experience
• To analyze usage and improve functionality
• To provide customer support
• To send service-related notifications
• To comply with legal obligations

We do not use your data for marketing without your explicit consent.

4. Google API Services User Data Policy Compliance

Our apps comply with the Google API Services User Data Policy, including limited use requirements.

• We only access Google user data required for the app's core functionality.
• We do not sell or share Google user data.
• We do not use Google data to serve ads.
• We do not transfer Google user data to third parties except when necessary for the functionality of the service and with user consent.
• We allow users to revoke access at any time via their Google Security settings.

5. LinkedIn API and Platform Policy Compliance

For apps connected to LinkedIn:

• We only request permissions necessary for core features.
• We do not store or share LinkedIn user data beyond what is strictly required.
• We do not use LinkedIn data for unauthorized advertising or analytics.
• We follow LinkedIn's Marketing Developer Platform rules and data retention limitations.

6. Legal Basis for Processing (GDPR)

We process personal data under the following lawful bases:

• Consent – when you connect a Google or LinkedIn account, or allow optional analytics.
• Contract – to provide the Services.
• Legitimate Interest – improving services, preventing abuse, maintaining security.
• Legal Obligation – when required by Swedish or EU law.

7. Data Sharing and Disclosure

We only share your information with:

• Service providers (hosting, analytics, customer support tools)
• Third-party platforms you choose to connect with
• Legal authorities when required by law

We do not sell your personal data.

All processors operate under GDPR-compliant agreements.

8. International Data Transfers

If data is transferred outside the EU/EEA, we ensure appropriate safeguards:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Additional technical and organizational measures

9. Data Retention

We retain personal data only as long as necessary for:

• Providing the Services
• Fulfilling legal obligations
• Resolving disputes
• Enforcing agreements

You may request deletion at any time.

10. Your GDPR Rights (EU/EEA Users)

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Restrict processing
• Data portability
• Withdraw consent
• Object to processing

To exercise your rights, contact us at: mateohugosson@vitalai.agency

11. Security

We use appropriate technical and organizational measures to protect your data, including:

• Encryption
• Access controls
• Secure data hosting
• Regular audits

However, no method of transmission is 100% secure.

12. Children's Privacy

Our Services are not intended for users under 16 years of age. We do not knowingly collect data from children.

13. Changes to This Privacy Policy

We may update this policy from time to time. Changes are effective when posted on this page. We encourage you to review the policy periodically.

14. Contact Information

If you have questions or concerns about this Privacy Policy, contact: