Privacy Policy

Introduction

rapidshiftix AB ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and safeguard your personal information when you visit our website, use our services, or interact with us. We are the data controller for the personal data we process under this policy.

Data We Collect

The data we collect includes various types of personal information that you provide to us directly or that we collect automatically when you use our services. This data collection enables us to provide and improve our cloud-based finance management systems and deliver personalised services to our customers.

We may collect the following categories of personal data:

• Contact Information: Name, email address, phone number, company name, and business address
• Account Information: Username, password, and account preferences
• Business Information: Company details, industry sector, and business requirements
• Technical Information: IP address, browser type, device information, and operating system
• Usage Data: Information about how you use our website and services, including pages visited and features used
• Communication Data: Records of our correspondence and interactions with you
• Financial Data: Billing information and transaction records related to our services

How We Use Your Information

We use your information for various legitimate business purposes to provide and improve our services. How we use your data depends on the specific information we collect and the context in which we collect it. We process your personal data based on the following legal grounds under GDPR: consent, contract performance, legitimate interests, and legal obligations.

Specifically, we use of your data for the following purposes:

• To provide, maintain, and improve our cloud-based finance management services
• To process transactions and manage your account
• To communicate with you about our services, updates, and support
• To respond to your enquiries and provide customer support
• To send marketing communications (with your consent)
• To analyse usage patterns and improve our website and services
• To ensure security and prevent fraud
• To comply with legal obligations and regulatory requirements
• To enforce our terms of service and protect our rights

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our business
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Protection of Rights: To protect our rights, property, or safety, or that of our users
• Consent: With your explicit consent for specific purposes

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The specific retention period depends on the type of data and the purpose for processing. Generally, we retain customer account information for the duration of the business relationship and for up to seven years thereafter for legal and regulatory compliance purposes. Marketing data is retained until you withdraw consent or for up to three years from last interaction.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Your Rights

Under the General Data Protection Regulation (GDPR) and other applicable privacy laws, you have certain rights regarding your personal data. These your rights include:

• Right of Access: Request access to your personal data and information about how we process it
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request restriction of processing in certain situations
• Right to Data Portability: Request transfer of your data to another controller
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing based on consent

To exercise these rights, please contact us using the contact information provided below. We will respond to your request within one month, unless the request is complex, in which case we may extend this period by up to two additional months.

International Data Transfers

As a company based in Sweden, we primarily process data within the European Economic Area (EEA). If we transfer your personal data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other legally recognised mechanisms to protect your data.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your privacy.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us using the following information:

You also have the right to lodge a complaint with the Swedish Data Protection Authority (Integritetsskyddsmyndigheten) if you believe we have not handled your personal data in accordance with applicable law.

Supervisory Authority

If you have concerns about our data processing practices that we cannot resolve, you have the right to lodge a complaint with the Swedish Data Protection Authority (Integritetsskyddsmyndigheten) or the supervisory authority in your EU member state of residence.