Privacy Policy

Improvify AB is the data controller for personal data processed on improvify.se, in the customer portal and in Improvify Suite and its modules. We process the data needed to provide the service you use. We never sell personal data and never use it for advertising. Data is stored and processed within the EU/EEA.

Improvify AB, reg. no. 556829-8888, c/o Anders Bratland, Enskärsgatan 12, 421 60 Västra Frölunda, Sweden. Anders Bratland is responsible for data protection. Contact: hej@improvify.se.

Account data such as name, email address and organisation. Content you add or connect yourself, such as consultant profiles and CVs, projects, documents, messages, meeting recordings and transcripts, receipts and financial records. Data from connected services that you authorise, see the LinkedIn section. Enquiries through the booking form: email and company. Orders on the site: email, company name and domain. Card details are handled by Stripe and never reach us. Website analytics run only after you consent in the statistics panel.

We process data to provide the service under the contract with you or your organisation (contract), to answer enquiries and stay in touch with customers (legitimate interest), to comply with bookkeeping and tax rules (legal obligation), and for analytics and for connecting external accounts such as LinkedIn (consent, which you can withdraw at any time).

In Improvify Suite you can choose to connect your own LinkedIn account under Connections in the customer portal. The connection uses LinkedIn sign-in (OAuth) and requires your explicit authorisation. Through the LinkedIn Member Data Portability API we retrieve your profile, positions and experience, education, skills, certifications and languages, and, if you choose, your own LinkedIn messages. We use this data solely to pre-fill and keep up to date your CV and consultant profile in the Konsultkollen module, and to place your own messages in your private, searchable message archive in the Messages module.

LinkedIn data is visible to you and to the people in your organisation you choose to share your profile with. We never share it with third parties, never sell it and never use it for advertising or to train AI models. The data is kept while the connection is active. When you disconnect LinkedIn or ask us to delete the data, the imported data is deleted within 30 days. You can revoke access at any time under Connections in the customer portal or in LinkedIn settings for permitted services.

We use suppliers that process data on our behalf under data processing agreements: hosting and storage on servers in the EU, email delivery through Resend in its EU region, and card payments through Stripe. Google Analytics loads only after your consent.

Data is stored and processed within the EU/EEA. Where a supplier exceptionally processes data outside the EU/EEA, this is based on the European Commission standard contractual clauses or an adequacy decision.

We keep data for as long as the purpose requires. Account data and content are kept while the account is active. Order records are kept for at most twelve months and bookkeeping records for seven years under Swedish bookkeeping law.

You have the right to access, rectification, erasure, restriction, objection, data portability and to withdraw consent. Email hej@improvify.se and we respond within one month. You may also lodge a complaint with the Swedish Authority for Privacy Protection, imy.se.

All traffic is encrypted over HTTPS, and access to data is controlled per user and organisation.

When our processing changes, this page and the date at the top are updated. This policy is also available in Swedish.