Who we are
Respectlytics is provided by Loheden AI Solutions AB, which is the controller of the personal data described here. For the data a customer's app sends to Respectlytics, the customer is the controller and we process it on the customer's behalf under our Data Processing Agreement.
What we process and why
- Account: your email address and password, the apps you create and their settings, what you set up on a paid plan (your team members' email addresses and roles, share links, declared properties, A/B tests and where alerts go), and the AI assistants you connect. To provide Respectlytics under our contract with you.
- AI assistant calls: which tool an assistant called, for which app, when and with what result, to apply the free plan's limits and protect our services (legitimate interest).
- Emails about your account: service messages, alerts and the weekly email about your apps, to provide Respectlytics (contract); setup reminders, usage warnings and similar notes, which you can turn off, to help you use it (legitimate interest); product news only if you ask for it (consent).
- Team invitations: the email address a customer enters, to send the invitation the customer asked for (legitimate interest).
- Where your sign-up came from: the site or link that brought the visit, the first page it opened, your country and the kind of device, kept with your account to learn which places bring customers (legitimate interest).
- Purchases: your email address, whether you buy as a business or a private person and your country, what you bought and when, the invoices you paid, the version of the terms you accepted with the time, network address and browser you used, a withdrawal and the name given with it, and records of payment disputes. To perform the contract and keep accounts (contract; legal obligation), and to establish and defend legal claims, such as payment disputes, and to connect a new account opened with the same email address to your earlier purchases (legitimate interest).
- Messages you send us: to answer you and keep a record (legitimate interest).
- Website visits: we count visits in aggregate on our own server, without cookies and without keeping anything that identifies a visitor, to understand how the site is used (legitimate interest).
- Security: to protect our services we keep records of misuse, such as failed sign-ins and blocked network addresses (legitimate interest).
Who receives it
Our hosting, network, storage and email providers, which process it on our behalf (our network provider also processes some of it as an independent controller, to improve its security checks); the payment provider, Link, a Stripe company, which takes payments as merchant of record and processes payment data as an independent controller; the people and services you give access to, such as your team members, anyone with a share link, and the AI assistants, chat channels and webhooks you connect, at your direction; and authorities, courts or advisers where the law requires it or to establish or defend legal claims.
Outside the EEA
Some of these providers process data outside the EEA. Those transfers rely on an adequacy decision of the European Commission or on its standard contractual clauses; a copy is available on request.
How long
- Account data: as long as the account exists, and the record that it was deleted for a short time after.
- Team invitations: until shortly after they are accepted, cancelled or run out.
- Purchase records: 8 years after the account is deleted; records of a payment dispute: 8 years after it is closed.
- Messages you send us: as long as needed to answer them and keep a record of the matter.
- Security records: as long as needed to protect our services.
Deleted data can remain for a short time in copies kept to restore our services.
What you must provide
Without the details an account or a purchase needs, we cannot provide Respectlytics.
Your rights
You have the right to request access to, rectification or erasure of your personal data, to restrict or object to its processing, and to data portability, and to withdraw consent at any time where processing is based on consent. You may also lodge a complaint with a supervisory authority.
Your device
We store on your device only what the site needs: to keep you signed in, to protect forms, to show the result of something you just did, to remember your choices in the dashboard, and our network provider's security checks. Browsers' Do Not Track signals do not change how the site works.
Changes
We may update this policy; the date above shows the version in force.
Contact
Loheden AI Solutions AB, org. no. 559261-7566
Vretavägen 26
71993 Vintrosa
Sweden
Email: respectlytics@loheden.com