This policy explains what personal data Sailsrep AB collects through sailsrep.ai, why we collect it, how long we keep it, and what you can ask us to do about it. It is written to the EU General Data Protection Regulation (GDPR).
Customers using the Sailsrep platform are also covered by their own agreement with us and by our data processing agreement. Where the two say different things, the agreement governs.
Who is responsible for your data
Sailsrep AB is the data controller for the personal data described here. Our full registry details are in the legal notice at the foot of this page.
Data protection is handled by our privacy and security lead, who you can reach at privacy@sailsrep.ai. For an incident or an urgent request, use the same address and write “URGENT: Data Protection” in the subject line.
What we collect
We collect three kinds of data on this website, and you can see all three coming.
- What you tell us in a form. When you book a demo or a meeting we ask for your name, your email address and your phone number, plus anything you choose to write about your product. When you subscribe to the newsletter we ask for your email address.
- How you use the site. Analytics, session replay and company-lookup data, each loaded only after you allow that category in the cookie banner. Before you make a choice, only strictly necessary cookies run.
- Technical data your browser sends. IP address, user agent and request logs, which our hosting keeps in order to serve the page and to keep the site secure.
We do not ask for special category data, we do not buy personal data from list vendors, and we do not sell any.
Why we use it, and for how long
| Purpose | Lawful basis | Retention |
|---|---|---|
| Answering a demo request or an enquiry | Legitimate interest in responding to you, or your consent where you gave it | Until the conversation is finished, then up to 12 months of sales history |
| Newsletters and product news | Consent, which you can withdraw at any time | Until you unsubscribe or withdraw consent |
| Website analytics and session replay | Consent, given per category in the cookie banner | Up to 2 years, and shorter for most cookies (see the cookie policy) |
| Identifying which companies visit the site | Consent, under the marketing category | Up to 13 months |
| Keeping the site secure and working | Legitimate interest in operating the service | Server and access logs for up to 90 days |
| Running a customer account on the platform | Performance of a contract | While the account is active, plus up to 3 years for legal and commercial obligations |
We do not use personal data for purposes that are incompatible with the ones listed above. Where we rely on your consent, you can withdraw it at any time, and withdrawing it does not affect processing that already happened.
Cookies
Every cookie this site sets, what it does and how long it lasts is listed in the cookie policy, which also carries the control for changing your consent choices. The same control sits in the footer of every page.
Who else processes your data
We use the service providers below to run the website and the platform. Each one is bound by a data processing agreement and processes personal data only on our instructions. We update this list whenever a provider is added or removed, and we tell platform customers at least 30 days before we engage a new one so that they can object.
Transfers outside the EU and EEA
Some of the providers above are outside the European Economic Area, which the table names. Where personal data goes to one of them, we rely on the European Commission's Standard Contractual Clauses together with technical and organizational measures, in line with Chapter V of the GDPR.
Data processing agreement
A copy of our data processing agreement (DPA, or Auftragsverarbeitungsvertrag) is available on request at privacy@sailsrep.ai, along with our security documentation and answers to a vendor assessment questionnaire.
Your rights
Under the GDPR you can ask us for the following.
- Access. Ask what personal data we hold about you and get a copy.
- Rectification. Ask us to correct anything inaccurate or incomplete.
- Erasure. Ask us to delete your personal data where the law allows it.
- Restriction. Ask us to pause processing while something is being sorted out.
- Portability. Receive your data in a common machine-readable format, or have it sent to another controller.
- Objection. Object to processing based on legitimate interest, and to direct marketing at any time.
Write to privacy@sailsrep.ai to use any of them. We acknowledge a request within 5 working days and answer it within 30 days. If a request needs longer, we tell you why before that month is up.
You can also complain to a data protection authority. In Sweden that is Integritetsskyddsmyndigheten (IMY), imy.se. You can complain to the authority in the country where you live or work instead, if that is easier.
How we protect it
Data is encrypted in transit and at rest, administrative access requires multi-factor authentication, access is role-based and logged, and we run regular vulnerability scanning and backups. If a breach affects your personal data we investigate immediately, notify the supervisory authority within 72 hours where the law requires it, and tell affected people without undue delay when the risk to them is high.
Changes to this policy
We update this page when our data practices or the law change, and the date at the top always says when. If a change is material, we say so through the consent banner or by email.
Legal notice (Impressum)
- Legal name
- Sailsrep AB
- Company registration number
- 559552-7812
- Registered office
- Lyckan 7, 753 24 Uppsala, Sweden
- Registered in
- Sweden, with the Swedish Companies Registration Office (Bolagsverket)
- Chief executive
- Edvin Fasth, co-founder and CEO
- Contact
- hello@sailsrep.ai for general enquiries, privacy@sailsrep.ai for data protection
- Website
- sailsrep.ai
Sailsrep AB is a Swedish private limited company (aktiebolag). Responsible for the content of this website under Swedish law: Sailsrep AB, at the address above.