[ LEGAL ]
Privacy Policy
This policy explains what personal data Scaleops.ai collects through this website, why we collect it, and what you can ask us to do with it. We have kept it short and specific rather than long and vague.
Last updated 2026-09-01
Who is responsible
Scaleops.ai is the data controller for the personal data described here. Use the details below for any question about this policy, or to exercise any of the rights in it.
- Company
- Scaleops.ai
- support@scaleops.se
What we collect
We collect what you choose to send us, and what your browser has to send for the page to load. Nothing else.
- What you type into the enquiry form: your name, your email address, and whatever you write in the free-text field.
- What you type into the chat assistant: your messages, and — only if you choose to give them — your name, email address, and a line describing what you want built.
- Technical data your browser sends with every request — your IP address, your browser type, and the page you asked for. Our hosting provider and the services listed under Third parties receive this as part of serving the page.
- Your language choice, held in the single cookie described under Cookies.
Why we collect it, and on what basis
Enquiry details are used to reply to you, and — if we go on to work together — to set up and run that engagement. The legal basis is our legitimate interest in responding to people who contact us, and thereafter performance of a contract.
Technical data is used to serve the site, keep it available, and protect it from abuse. The legal basis is our legitimate interest in running a working, secure website.
We do not use your data for advertising, profiling or automated decision-making, and we do not sell it or trade it.
Third parties
Loading this page contacts a small number of outside services, and each of them sees your IP address as a result. We have kept that list as short as we can.
- Google Fonts — serves the typefaces this site is set in.
- Unsplash — serves the photography on this site.
- Our hosting provider — serves the site itself.
- Anthropic — receives the messages you send to the chat assistant, in order to generate the reply.
- Our email provider — receives your enquiry when you send one.
Chat messages are sent to Anthropic's API to produce an answer and are not used to train models. We do not store the transcript: it lives in your browser for the length of your visit and is cleared when you close the tab. The exception is a conversation where you give us your contact details and ask to be followed up — there, the details and the recent messages are passed to the team so someone can reply to you properly.
If you book through a calendar link here, that calendar provider handles the booking under its own privacy policy. Each of these companies acts as our processor or as an independent controller in its own right, and none of them receives your data from us for their own marketing.
Where your data goes
Some of the providers above operate outside the EU and the EEA. Where that is so, the transfer relies on a European Commission adequacy decision or on standard contractual clauses. Ask us and we will tell you which applies to a given provider.
How long we keep it
We keep enquiry correspondence while we are in contact with you and for a reasonable period afterwards, so a conversation you return to is not lost. Once it is clear there will be no engagement, we delete it. Records we are legally obliged to keep — accounting records, for instance — are kept for the period the law sets.
Chat transcripts are not kept. If you give us contact details through the assistant, those are treated exactly like an enquiry sent through the form and are kept on the same basis.
The language cookie expires after twelve months, or as soon as you clear it.
Your rights
Under the GDPR you can ask us to:
- give you a copy of the personal data we hold about you
- correct it where it is wrong
- delete it
- restrict how we use it
- hand it to you or to another provider in a portable format
- stop processing it where we rely on legitimate interest
Write to us using the details at the top of this page and we will respond within one month. If our answer does not satisfy you, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), or to the supervisory authority in the EU country where you live.
Security
We keep the number of places your data lives small, limit access to the people who need it, and use providers that encrypt data in transit and at rest. No arrangement is perfect and we will not claim otherwise — but if a breach affects you, we will tell you promptly.
Changes to this policy
If we change how we handle personal data, we will update this page and the date at the top of it. Material changes will be described here rather than made quietly.