Privacy policy
Pilot version, 16 October 2026. To be reviewed by a lawyer before the first external production customer.Who is responsible
Agentsmedjan is the controller for the personal data on this website. Contact: hej@agentsmedjan.se. Full company details will be added before launch.
What the website collects
The website sets no tracking cookies. The visitor statistics are described under Cookies and measurement. What is stored is what you write yourself in the registration form (name, company, email, phone if you give it, which routine you want to start with, which systems you use, approximate volume and any message), the time you accepted this policy and which version you saw, which page the registration was sent from, and our own notes about the contact. Your IP address is not stored with the registration. A salted checksum of it is stored separately, is used only to limit the number of registrations, and is deleted automatically at the next registration once it is more than 24 hours old.
Why and for how long
The data is used to contact you about the pilot and for nothing else. The legal basis is your consent (Article 6(1)(a) of the GDPR), which you can withdraw at any time by emailing hej@agentsmedjan.se; we then delete the data. It is stored in Supabase in Stockholm (EU) and is deleted or de-identified no later than twelve months after the most recent contact or change to your registration, or earlier if you ask. The website runs on Vercel. If the bot check (Cloudflare Turnstile) is switched on, your IP address is sent to Cloudflare for that check and nothing else.
Your rights
You can at any time ask to see, correct or delete your data by emailing hej@agentsmedjan.se. You can also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
The Agentsmedjan service
When you have an account in the service (app.agentsmedjan.se), the terms and the data processing agreement that you accept when the organisation is created apply. They state which sub-processors are used, in which region, and how data is exported and deleted on termination.
Cookies and measurement
The website sets no tracking cookies and therefore shows no cookie banner. What is kept in your browser is your choice of light or dark theme and whether the intro has already played, and it never leaves your device. To see how many people visit the pages we use Vercel Web Analytics: a visit is counted as a page view with the page, the referring website, country, device type, operating system and browser. No cookie is set, your IP address is not stored, and the temporary checksum that tells visits apart is discarded after a day. The statistics are aggregated and cannot be tied to you. Vercel Speed Insights measures how fast the pages load in the same way.
Google user data
The service will be able to connect to Google Workspace (Gmail, Calendar, Drive) with your own Google account. Data retrieved from there is used only to run the agents you have built yourself, is shown to you and your approvers, is not stored for longer than the agent needs, and is never used for advertising, never used to train models and never sold on. The use complies with the Google API Services User Data Policy, including the Limited Use requirements. This text will be updated when the connection launches.
Report a vulnerability
If you find a security flaw, email security@agentsmedjan.se. We reply within two working days and take no legal action against anyone who reports in good faith.