Privacy Policy

1. Data Controller

TheScraper.se, c/o Convendum, Regeringsgatan 48, 111 56 Stockholm, Sverige. Contact: Support@thescraper.se.

2. Data We Collect

• Account data: email, hashed password, language preference. If you sign in with Google, we receive your email, name and profile picture from Google — no password is stored.
• Usage data: searches you run (Eniro, Allabolag, Merinfo), saved lists, AI prompts, exports and notification preferences.
• Technical data: IP address, browser, device, session timestamps, audit logs for security.
• Email data: transactional email events (sent, bounced, unsubscribed) via our domain notify.thescraper.se.
• Billing data: handled by our payment processor; we only store plan and invoice references.

3. Purposes & Legal Bases (GDPR)

• Providing the service — contract.
• Security, fraud prevention, abuse detection — legitimate interest.
• Billing and accounting — legal obligation.
• Product improvement using aggregated, non-identifiable data — legitimate interest.

4. AI & Training Data

We do not use your prompts, lists or exports to train foundation models. Your data stays with your account.

5. Sharing & Subprocessors

We share data only with vetted subprocessors required to deliver the service: cloud hosting & database (Lovable Cloud / Supabase), authentication (incl. Google OAuth for "Sign in with Google"), AI inference (Lovable AI Gateway), email delivery (notify.thescraper.se), and payment processing. A current list is available on request.

6. Retention

Account data is kept while your account is active. Deleted lists are purged within 30 days. Email suppression entries (unsubscribes/bounces) are kept indefinitely to honour your choice. Billing data is retained as required by Swedish accounting law (typically 7 years).

7. Your Rights (GDPR / CCPA)

• Access, correction, deletion ("right to be forgotten").
• Data portability (export your data).
• Objection to processing based on legitimate interest.
• Lodge a complaint with Integritetsskyddsmyndigheten (IMY).

Send requests to Support@thescraper.se. We respond within 30 days.

8. International Transfers

Where data leaves the EEA we rely on Standard Contractual Clauses or equivalent safeguards.

9. Cookies

See our Cookie Policy.