Privacy policy

Saglora is a brand owned by ABV Games AB, company registration number 559535-4654, Helsingborg, Sweden ("we"). We produce reports on companies' websites, products, visibility and competitors.

Contact for questions about personal data: info@saglora.com.

We are the data controller for the details you give us when you send an enquiry, approve an assignment or contact us.

We are not your data processor. We do not process your customers' details on your behalf. When we analyse a website, we only read what is public to all visitors.

• Enquiry: company details (name, company registration number, town, legal form), contact person (name, role, email, phone), the reports you choose, the websites and competitors to be analysed, and your answers to our questions.
• Documents that you upload yourselves, for example a business plan, a product file or a price list.
• Approval: the name of the person who approves the assignment and the time of approval.
• The reports and the results: scores, findings, action lists and PDFs that we produce for you.
• Communication: emails about the enquiry and the assignment, both those we send and those you send to us. This also covers the messages in the client chat on the delivery page.
• Opened quote and Preliminary Study: when your quote link and the Preliminary Study are opened, we record the time and the type of device (computer or mobile), so that we know when it is a good time to follow up. We do not store any IP address and do not use cookies for this.
• The delivery page: when your password-protected delivery page is opened, when you log in and when a file is downloaded, we record the time, which file and the type of device (computer or mobile), so that we can give you support. We do not store any IP address.

If you search for your company, the company details are fetched from the business register of SCB (Statistics Sweden), which is public.

Please do not send sensitive information in the free-text fields, for example details about health or about individual customers. We do not need it for the reports.

• Preparing the quote, the scope of work and the Preliminary Study: steps taken at your request before entering into a contract (GDPR Article 6(1)(b)).
• Carrying out and delivering the assignment: performance of a contract (Article 6(1)(b)).
• Keeping the reports so that we can compare your progress over time and carry out booked follow-ups: performance of a contract and legitimate interest (Article 6(1)(b) and (f)).
• Contact with people who represent a company, including seeing when the quote and the Preliminary Study have been opened so that we can follow up at the right time: legitimate interest (Article 6(1)(f)).
• News and offers about our reports: consent (Article 6(1)(a)). You answer yes or no in the enquiry. We only send offers to those who answered yes. You can withdraw your consent at any time by replying to an email from us.
• Bookkeeping and invoicing: legal obligation (Article 6(1)(c)).
• Security and protection against misuse of the forms: legitimate interest (Article 6(1)(f)).

We never sell the details and do not use them for advertising by others.

We analyse a website as a visitor would: only open pages, without logging in and without completing purchases. Automated collection happens at a gentle pace and follows the website's rules for visits.

We do not collect details about the visitors to the websites we analyse. If personal details appear on a public page, for example a named contact person, we only note what is needed for the assessment.

The reports may contain details about people other than you, for example the name of someone who has written a public review of your company, an employee mentioned in a review or a named contact person at a competitor. We only use what is needed for the assessment. The legal basis is our and your legitimate interest in analysing how the company is seen and perceived (Article 6(1)(f)). In the screenshots in the reports we blur the names and profile pictures of private individuals, and reviews are quoted without names. Anyone who is mentioned can contact us at info@saglora.com to object or to have the details deleted.

To see what AI services tell your customers, we ask questions in ChatGPT, Gemini, Perplexity and Google. The questions are about your industry and your products. Some of them mention your company name or a competitor. We do not send any contact details, documents or answers from the enquiry there.

Documents are stored encrypted in a private storage area and used only for your assignment. We read them with the help of AI services, including Anthropic (Claude) in the USA. We only share them with the suppliers we need to deliver the service. They are deleted 12 months after delivery, or sooner if you ask.

The documents are kept in a private storage area. Only we can open them, through time-limited links.

We only share the details with the suppliers we need to deliver the service. They process the details on our behalf:

• Supabase: database and file storage. The servers are in London, United Kingdom. The European Commission has decided that the United Kingdom provides an adequate level of protection for personal data.
• Vercel: hosting of the website. The functions run in Frankfurt, Germany.
• Resend: sending emails to you, for example receipts, quotes, order confirmations and deliveries (USA).
• Cloudflare: receives emails to info@saglora.com and forwards them to our inbox (USA).
• Google (Gmail): our inbox. Emails to info@saglora.com are forwarded there (EU and USA).
• Microsoft (Outlook): receives our internal notifications about new enquiries, with the company's and the contact person's details (EU and USA).
• Anthropic (Claude): an AI service that helps us read enquiries and documents, analyse websites and draft quotes, reports and replies (USA). Enquiries, assignments, questions in Ask Saglora and messages in the client chat are processed with AI services, including Anthropic. This may include the contact details in the enquiry and the documents you have uploaded. We make the assessments ourselves.

Several of the suppliers are US companies or process details in the USA. Transfers there take place under the European Commission's standard contractual clauses or under the EU-U.S. Data Privacy Framework where the supplier is certified.

The current list of suppliers is on the Suppliers page.

We keep the reports longer than other details. That way you can compare your progress after 6, 12, 24 and 36 months. Whatever is not needed for the comparison we delete sooner. The legal basis is the contract and our legitimate interest in being able to follow up the reports.

• The reports and the results (scores, findings, action lists and PDFs) and the enquiry and quote they are based on: for as long as the client relationship continues and for 36 months after the latest delivery. We need them to compare progress over time and for booked follow-ups. You can ask us to delete them at any time.
• The contact person's name, email and phone: anonymised 36 months after the latest delivery. Until then we need them to be able to reach you about the follow-up.
• Enquiries that did not lead to an order: deleted 12 months after the latest activity in the case, so that we can answer questions about the quote in the meantime. If you have ordered another report, we keep the Preliminary Study for as long as that one.
• Uploaded documents: deleted 12 months after delivery. If there was no delivery, they are deleted 12 months after the enquiry. Documents that were uploaded but never sent with an enquiry are deleted after 7 days.
• The client chat on the delivery page: deleted 12 months after the latest message.
• Ask Saglora threads: deleted 12 months after the latest message.
• Emails: the content of emails we have sent and received is deleted 12 months after the email was sent. We keep the date and what kind of email it was. Emails that do not belong to any enquiry are deleted completely.
• Opening logs for the quote, the Preliminary Study and the delivery page: deleted after 12 months.
• Records for invoiced assignments are kept for as long as bokföringslagen (the Swedish Accounting Act) requires.

The deletion runs automatically once a day.

You choose which cookies you accept in the box shown on your first visit. You can change your choice at any time via the Cookie settings link at the bottom of the page.

• Necessary. These make the site work, for example the cart and your cookie choice. They do not require consent.
• Statistics. Google Analytics shows how the site is used, for example which pages are visited and for how long. Google then sets cookies (_ga) that are stored for up to two years. IP addresses are not stored.
• Marketing. These make our adverts with, for example, Google and Meta more relevant and measure which adverts lead to enquiries. Active marketing tools are listed on the Suppliers page.

Google processes the details in the EU and in the USA, where Google is covered by the EU-U.S. Data Privacy Framework. If you say no, the tools are not loaded at all.

Without cookies, we also count the number of visits and page views with Vercel Web Analytics. Nothing is stored in your browser and nothing can be linked to you as a person.

The cart and a form you have started are saved locally in your own browser, so that nothing is lost if you reload the page. The details do not leave your computer until you send the enquiry. They are cleared once the enquiry has been sent.

We count anonymously how many people reach each step of the form, to see where it gets difficult. This happens without cookies and without anything that can be linked to you.

In the Ask Saglora box on the site you can ask us questions. The questions are answered by the Saglora team, who are real people. We reply within one working day.

• What we store: your email address, your question and the messages you and we write in the thread, when they were written and which page on the site you wrote from.
• Why: so that we can reply to you. You receive a link to your chat thread by email. Anyone who has the link can read the thread, so do not share it. The legal basis is our legitimate interest in answering questions about our services (Article 6(1)(f)). If the question concerns a quote or an order, the legal basis is steps taken before entering into a contract (Article 6(1)(b)). The box you tick means that you have read the terms and this policy.
• AI support: we may use Anthropic (Claude) to draft a reply. One of us reads the reply and sends it.
• Suggested answers: while you type, answers to common questions are shown. This happens in your own browser. Nothing you type is sent until you press Send.
• Retention period: threads are deleted 12 months after the latest message. The link to your thread is saved locally in your browser so that you can find your way back.
• Deletion: if you want us to delete a thread sooner, write to info@saglora.com.
• Terms: the answers are guidance about our reports and how we work. They are not legal advice and they are not a binding quote. Prices are given in a quote.

Encrypted transfer (TLS) and encryption at rest. Access only for Saglora, protected with two-factor login. Private storage areas and time-limited links. Limits on the number of requests to the forms.

You have the right to know which details we hold about you, to have them corrected or deleted, to restrict or object to the processing, and to receive the details in a machine-readable format. Contact us at info@saglora.com.

If you are not satisfied with how we process the details, you can contact the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

The reports and other deliverables contain details about your business and are protected by copyright. You may use them freely within your own business. They may not be resold or published. The method, structure and texts may not be copied or recreated, including with the help of AI tools. The full terms are in the terms of use, section 9. Every report carries the same reminder at the bottom of its pages.

We update the policy when the service changes. The date of the latest update is shown at the top.