Privacy policy
Draft — last updated 12 October 2026. Must be legally reviewed before public launch.
Data controller
[TODO: registered AB name — e.g. Linneva AB] (reg. no. [TODO: organisationsnummer]), [TODO: registered address]. Contact: d.baldi88@gmail.com.
We collect only the data we need to run LinneaNordic Agent and this website, and we never sell it on.
What we process and why
Visitor analytics (Google Analytics): anonymised traffic data — only after you accept cookies. No analytics cookie is set before then.
Account (LinneaNordic Agent): email and password, or Google sign-in, via our auth provider Supabase, so you can log in and see reports.
Agent searches: what you type into the search box is saved, together with your email if you are logged in, so we can understand demand, develop the service and send you a report. Kept until you request deletion.
Purchases: at checkout, Stripe handles card payment plus your name and shipping address. We never store your card details.
Email: order and contact replies are sent via Resend.
Operations: the site is hosted by Vercel, which temporarily logs data such as IP address for security and debugging; images are stored in Vercel Blob.
Legal basis
Purchases and delivery: performance of a contract. Analytics cookies: your consent (which you can withdraw). Security and accounting: legitimate interest and legal obligation respectively.
Retention
Order data is kept as long as Swedish bookkeeping law requires (7 years). Account data is kept until you request deletion. Analytics data is kept for a shorter period.
Your rights
You have the right to access, rectification, erasure, data portability and to object to processing. Contact us at d.baldi88@gmail.com.
You may also complain to the Swedish Authority for Privacy Protection (IMY), imy.se.