Privacy Policy

Syntheon AI AB · Org. nr 559329-3128 · c/o Bluerock AB, Mailbox 113, 111 73 Stockholm, Sweden is the data controller for information submitted through syntheonai.se.

We collect information you submit through our contact and briefing request forms. This typically includes your name, company, role, work email, and any free-text description you choose to share.

Workflow assessment submissions. The description you write about how your team works, plus the workflow, volume, sector and region we derive from it, and any assumptions you adjust. Stored without identity unless you ask us to contact you. If you request a call or give us an email address, your contact details are attached to that record at that point, and not before.

Documents we generate for you. Workflow assessments, briefs and proposals we produce, together with the figures they contained, so we have an accurate record of what was shared with you.

Usage analytics. Anonymous, aggregated information about how the assessment is used, for example which step people leave at. No third-party trackers, no advertising or cross-site tracking, and nothing that identifies you.

Shared assessment links. If an assessment link is opened, we record that it was opened. We do not record who opened it. Shared links stop working 90 days after they are created.

We do not deploy tracking beyond what is strictly necessary to operate the site.

Submissions are used to respond to enquiries and to scope potential engagements. Our legal basis under the GDPR is legitimate interest and the taking of pre-contractual steps at your request, per Article 6(1)(b) and (f).

• Anonymous assessment records: up to 12 months.
• Enquiry and contact data: up to 24 months, unless an engagement follows, in which case for the duration of the engagement and any applicable record-keeping obligations.
• Documents we generate, including every version of an assessment, brief or proposal and the figures it contained: 24 months from the date the document was produced, after which they are automatically deleted from our document register by a scheduled purge. Superseded versions are retained for the same period so we keep an accurate record of what was shared with you and when.
• Aggregated analytics: retained in aggregate form only and not linked to an individual.

This website is delivered through a global content delivery network, so pages may be served from an edge location outside the EU. No client data is processed here.

Client systems and client data are a separate matter. Production deployments and any client data we process run in EU regions, and data residency is agreed per engagement and recorded in the documentation for that system.

Assessment records and generated documents are processed in our own customer records system, operated by Syntheon AI. Data residency for that system is agreed per engagement and recorded in the documentation for that system. We do not sell data, and we do not share it with third parties for their own purposes.

You have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data. To exercise any of these rights, contact us at contact@syntheonai.se.

You also have the right to lodge a complaint with IMY, the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten).