Privacy policy

Who is responsible for your data

Guttae AB, reg. no. 559266-9948, Stockholm, Sweden, is the data controller for the processing described here. If you have questions, reach us at info@bokfrid.se.

What data we process

We process the data the service needs to work:

• Account data: name, email address and password (stored in protected, hashed form).
• Company data: company name, registration number and similar details about your business.
• Accounting material: bank statements, vouchers, invoices and payroll data that you upload or create in the service. This material can contain personal data about others, such as employees, customers and suppliers.
• Messages: what you write to the AI assistant and to support.
• Tax account: the balance and transactions on your company's tax account with Skatteverket, which we fetch only when you ask for it and have signed in with Skatteverket using your e-identification.
• Technical information: logs and IP address, needed for operations and security.

Why we process the data

We process the data to provide the service under our agreement with you, to meet legal obligations (including the Swedish Bookkeeping Act), and, based on legitimate interest, to keep the service secure and improve it.

We never sell your data, and we do not use it for advertising.

The AI assistant

Bokfrid's suggestions are generated with the help of AI providers that process the data on our behalf, as data processors. The data is used solely to produce the suggestions in the service and not to train the providers' models.

We send only what is needed to produce a good suggestion: the rows to be booked, your messages to the assistant, and the company's bookkeeping settings, such as company form and VAT period.

Your company's identity is never included automatically. Company name, registration number, your name and your contact details are not part of what is sent to the AI providers.

Keep in mind that what you write to the assistant, and the content of documents you upload, is sent as-is so that it can be read, and it can of course contain names, for example on an invoice.

Who we share data with

We share data with subcontractors that help us run the service, for example for hosting, AI processing and email. They process the data under agreements with us and only for our purposes.

If you ask for help from an accounting consultant, we share what is needed for the consultant to help you. We also disclose data when required by law, for example to authorities.

Where the data is processed

We aim to process data within the EU/EEA. If a subcontractor processes data outside the EEA, we use safeguards such as the European Commission's standard contractual clauses.

How long we keep the data

We keep your data for as long as your account is active. Under the Swedish Bookkeeping Act, accounting records must be kept for seven years after the end of the calendar year in which the financial year ended, so they are retained even after the account is closed.

Other data is deleted or anonymised within a reasonable time after the account is closed.

How we protect the data

The data is protected with encryption in transit, access controls and other technical and organisational measures. Only those who need the data to do their work have access to it.

Your rights

You have the right to access your data, have inaccurate data corrected, have data erased when it is no longer needed, have processing restricted, object to processing based on legitimate interest, and receive data you have provided in a machine-readable format.

Contact us at info@bokfrid.se and we will help you. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Cookies and local storage

Bokfrid uses no advertising or tracking cookies. The browser's local storage is used only for what the service needs to work: your login and your settings, such as the chosen theme.

Changes to this policy

If we change this policy, we publish the new version here with a new date. For material changes, we notify you in the service or by email.