Privacy Policy

[Personuppgiftsansvarig: enskild firma — namn & org.nr fastställs vid IMY-granskning] is the controller for personal data processed on Upphandla.

NOTE: the exact sole-trader (enskild firma) name is being finalised in the same IMY review as GameAway and is not yet final.

Account: your email address (for magic-link sign-in).

Subscription: Stripe customer identifier, subscription status and related billing metadata (card data is handled by Stripe, never by us).

Saved searches: the verticals and keywords you save for monitoring.

Analytics (with consent only): anonymised usage statistics via PostHog.

Providing the service (account, subscription, monitoring): performance of a contract (GDPR art. 6(1)(b)).

Analytics (PostHog): your consent (art. 6(1)(a)). No analytics runs before you explicitly accept.

Secure operation and abuse prevention: legitimate interest (art. 6(1)(f)).

Supabase (EU) — database and authentication.

Vercel — web hosting.

Stripe — payments and subscription management.

Resend — transactional and digest email.

Anthropic — AI-generated tender summaries.

PostHog (EU) — web analytics, only after your consent.

Account data and saved searches are kept while your account is active and deleted on request.

Analytics data is retained per PostHog settings and deleted if you withdraw consent.

The daily digest is sent until you unsubscribe.

You have the right of access, rectification, erasure, restriction, data portability and to object (GDPR art. 15–22).

You can withdraw analytics consent at any time via Cookie settings in the footer.

You may lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Our daily digest includes one-click unsubscribe (RFC 8058) and a link to manage preferences.

Data-protection questions: [kontakt-e-post fastställs vid lansering].