Who is responsible for your data
Kodivo is a Swedish sole trader (enskild firma) that runs the website kodivo.se, and is the data controller for the personal data collected here. That means that we decide why and how the data is processed, and that we are the ones you turn to if you have questions.
You can reach us at kontakt@kodivo.se.
This is a translation of our Swedish policy. If the two versions differ, the Swedish version applies.
Information we collect
We only collect what we need in order to answer you and carry out our work. In practice it comes down to three things.
- Information you provide yourself. Name, email address, telephone number, company information and whatever you choose to write in a message, in the contact form, in the booking chat or in the chat.
- Technical data from the web server. When your browser requests a page, the server at our hosting provider automatically notes things such as the IP address, the time, which page was requested and which browser you use. Every web server does this, and the data is used for operations and security. We have no visitor measurement installed on kodivo.se, that is, neither Google Analytics nor any similar tool, and we do not build a profile of your visit.
- Technical information the site needs in order to work. For example, your browser remembering that you have already seen the opening animation, and the chat widget holding together when you change page. All of it is listed under cookies and local storage.
We never ask you for sensitive personal data, that is, data about health, religion, political opinions, trade union membership or the like. Do not write such data in the chat or in a message to us.
How we use your information
We use your information only in order to:
- answer your questions or messages
- communicate about potential collaborations, projects or services
- improve the experience on the website and in the chat
- send relevant information to the company you are interacting with via the chat
- meet requirements that the law places on us, for example accounting rules
We will never sell, rent out or share your personal information with third parties without your consent. We do not profile you, and we do not make any automated decisions that have legal consequences for you.
Legal basis for the processing
The GDPR requires every processing operation to rest on a legal basis. We rely on four:
- Consent. When you write to us of your own accord in the chat or in a form. You can withdraw your consent at any time.
- Legitimate interest. When we keep the website running and protect it against misuse, that is, the technical logs of the web server. We have weighed our interest against your privacy and therefore collect as little as possible.
- Performance of a contract, or steps taken prior to entering into a contract. When we discuss or carry out an assignment for you.
- Legal obligation. When the law requires us to keep something, for example accounting records.
The chat on the website
On kodivo.se you can talk to an AI assistant of the same kind as the ones we build for our clients. What you write there is handled in the same way as a message to us.
The information is sent to the technical platform we use to run the assistant. The platform processes the data on our behalf and in accordance with our instructions, and does not use it for its own purposes. We use it to ensure correct functionality, data security and the delivery of messages.
Do not write sensitive information in the chat
Passwords, personal identity numbers and payment details do not belong in a chat window, neither here nor anywhere else. If we need such information, we ask for it in a safer way.
When we build assistants for businesses
Kodivo sells to companies and organisations, not to private individuals. When we build an AI assistant for a client and the assistant is used on the client's own website, the client is the data controller for the conversations with its visitors. Kodivo then processes the data on the client's behalf, as a data processor.
What the assistant may access, which subprocessors are used and how long the conversations are kept is set out in the agreement with each client. If you are a visitor to such a website, you will find the company's own privacy policy there.
The platform that runs the assistants uses language models from external AI providers to formulate the answers. Email addresses, phone numbers, personal identity numbers and similar data are masked before the message is used any further. How that works is described on the security page.
Cookies and local storage
We do not use any cookies for marketing, and we do not follow you between different websites. What is stored in your browser is:
- Storage that is necessary for the site to work. We save a note that you have already seen the opening animation, so that it is not played again during the same visit, and whether the chat widget is open. The notes disappear when you close your browser.
- Storage that the chat needs. The chat widget saves a random ID in your browser, so that the conversation holds together when you change page. The ID contains nothing about you and is replaced when you start over or end the chat. The platform behind the assistant also stores the ongoing conversation in your browser for as long as the tab is open.
- A copy of your chat history. The chat widget saves a copy of your earlier conversations in your own browser, so that you can read them again under the History tab. The copy clears itself after 30 days, and you can clear it yourself at any time with the button in the same tab. Clearing the copy does not mean the conversation is gone from our side. The conversation itself is sent to the platform behind the assistant, see the section on the chat above.
As long as you do not open the chat, the website does not fetch any files from other servers. Everything the page needs in order to be displayed is hosted on our own domain, so your IP address is not passed on simply because you open a page. When you open the chat, the chat widget's program is loaded from the platform behind the assistant, and your IP address then reaches that platform's server.
You can block and delete cookies and other stored site data in your browser settings. Some parts of the website, above all the chat, may then stop working as they should.
Who may have access
What you send to us is only accessible to us, and to the company you are talking to when the chat sits on a client's website. In addition, we engage a small number of suppliers that process data on our behalf:
- the web host that runs kodivo.se
- the platform that runs the AI assistant, and the AI providers whose language models the platform uses
- the form service that receives what you send in the contact form and the booking chat and forwards it to our email
- our email provider
The suppliers process the data on our behalf and may only use it in order to perform the service for us. If any processing takes place outside the EU and the EEA, it does so with the safeguards that the GDPR requires, as a rule the European Commission’s standard contractual clauses.
We may also need to disclose data if a public authority requires it on the basis of law.
How long we keep the information
We do not keep data for longer than we need it.
- Messages and enquiries that do not lead any further. Up to twelve months, so that we can follow up on an earlier contact.
- Data linked to an assignment. For as long as the collaboration is ongoing, and thereafter for as long as the law requires. Accounting records are kept for seven years.
- The technical logs of the web server. For as long as our hosting provider keeps them for operations and security. We do not read them in order to analyse visitors, and we compile no visitor statistics from them.
If you would like us to delete something sooner, all you need to do is get in touch.
Security
kodivo.se is SSL secured with HTTPS, which means that the traffic between your browser and the website is encrypted. You can see this from the padlock in the address bar.
Information you provide is stored securely and is accessible only to those who need it for their work. No technical solution is entirely without risk, but we choose suppliers and procedures on that basis. Should an incident nevertheless occur and involve a risk to you, we report it to the Swedish Authority for Privacy Protection (IMY) and inform you when the law requires it.
If someone writes a piece of sensitive information in the chat window, it is masked before the message is used further. What is caught, and where the line is drawn, is set out on the page about security and privacy.
Your rights
You have the right to:
- find out what data we hold about you, and request a copy of it
- have incorrect or incomplete data corrected
- ask us to delete your personal information
- request that we restrict the processing while a matter is being looked into
- object to processing that we base on legitimate interest
- receive the data you have provided yourself in a machine readable format, and have it transferred to someone else
- withdraw a consent you have given, at any time, without this affecting processing that has already taken place
To exercise these rights, simply send an email to kontakt@kodivo.se. It costs nothing, and we normally reply within one month.
If you are not satisfied with how we have handled your data, you have the right to complain to the Swedish Authority for Privacy Protection (IMY), which is the supervisory authority in Sweden. Their contact details are available at imy.se.
Links to other websites
On kodivo.se there are links to our social media accounts, and sometimes to other sites. When you click through, that site’s own privacy policy applies, not ours. We are not responsible for how others handle your data.
Children and young people
The website is aimed at companies and professionals, not at children. We do not knowingly collect data about children under the age of thirteen. If you are a guardian and believe that your child has given data to us, get in touch and we will delete it.
Changes to this policy
We may update this privacy policy when needed, for example if we start using a new tool. Any changes will be published here with a new date at the top. If a change concerns something material, we will inform you in a clearer way than that.
Contact
If you have questions about this privacy policy or about how we handle your data, get in touch at kontakt@kodivo.se. We are happy to answer.