Skip to main content
ToolsServicesAboutContactDonate

Privacy Policy

Last updated: January 2026

1. Data Controller

AtBice AB (org.nr: 559XXX-XXXX), registered in Sweden, is the data controller for the personal data processed through this website. Contact us at [email protected].

2. Information We Collect

We collect information you provide directly to us:

  • Account information (name, email, password)
  • Payment information (processed securely by Stripe)
  • Transaction history and subscription details
  • Communications you send to us

We automatically collect:

  • Device and browser information
  • IP address and approximate location
  • Usage data and analytics

3. Content You Save in Our Tools

Most of our tools run entirely in your browser and send us nothing at all. Some, such as the Year Wheel (Ã…rshjul), additionally let you save your work to your account so you can open it again from another computer. This only happens when you ask for it.

What you save is stored on our own servers in the EU, as you wrote it. We do not read it, index it, analyse it, or use it to train anything. It may contain personal data if you put personal data in it — a school year wheel often names staff, and sometimes pupils — so the tool asks you not to include more than you need.

  • Export: saved content is included in the data export you can request at any time from your profile, or via /api/v1/users/me/export.
  • Deletion: you can delete any saved item from within the tool, and deleting your account deletes all of it. There is no legal obligation that keeps it, so it is removed rather than anonymised.
  • Not saved, not sent: work you have not saved stays in your browser and never reaches us.

4. Legal Basis for Processing (GDPR Art. 6)

We process your data based on:

  • Contract performance: To provide our services and process payments
  • Legal obligations: Swedish Bokföringslagen requires 7-year data retention
  • Legitimate interests: Fraud prevention, service improvement, security
  • Consent: For marketing communications (opt-in only)

5. How We Use Your Information

  • Provide and maintain our services
  • Process payments and subscriptions
  • Send transactional emails (order confirmations, receipts)
  • Prevent fraud and enhance security (Stripe Radar)
  • Comply with legal obligations
  • Improve our services based on usage patterns

6. Data Sharing

We share data only with:

  • Stripe: Payment processing (PCI DSS compliant)
  • Cloud providers: Hosting services (EU data centers)
  • Legal authorities: When required by Swedish/EU law

We do not sell your personal data. All third-party processors are bound by Data Processing Agreements (DPAs) compliant with GDPR.

7. Data Retention

We retain your data according to Swedish law:

  • Account data: Until account deletion + 30 days
  • Content you saved in a tool: Until you delete it, or with your account
  • Transaction records: 7 years (Swedish Bokföringslagen)
  • Tax/invoice data: 7 years (required by law)
  • Marketing preferences: Until consent withdrawn

8. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access: Request a copy of your data (Art. 15)
  • Rectification: Correct inaccurate data (Art. 16)
  • Erasure: Request deletion ("right to be forgotten") (Art. 17)
  • Portability: Receive your data in machine-readable format (Art. 20)
  • Restriction: Limit how we process your data (Art. 18)
  • Object: Object to processing based on legitimate interests (Art. 21)
  • Withdraw consent: At any time, without affecting prior processing

Exercise these rights in your account settings or contact [email protected]. We respond within 30 days as required by GDPR.

9. International Transfers

Your data is primarily processed within the EU/EEA. When transfers outside the EU are necessary, we ensure adequate protection through Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Security

We implement appropriate technical and organizational measures including:

  • TLS encryption for all data in transit
  • Encryption at rest for sensitive data
  • Regular security audits
  • Access controls and authentication
  • Stripe Radar for payment fraud detection

11. Cookies & Tracking

AtBice has a strict no-cookie policy. We do not use cookies, tracking pixels, fingerprinting, or any other tracking technologies. Authentication tokens and user preferences are stored in your browser's localStorage and are never transmitted to third parties. We do not engage in cross-site tracking or behavioral profiling of any kind. Content you deliberately save to your account is a separate matter and is described in section 3 above.

12. Contact & Complaints

Data Protection Contact:
Email: [email protected]
Address: AtBice AB, [Address], Sweden

Supervisory Authority:
You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY): www.imy.se