Privacy Policy

Last Updated: 2026-10-18

1

Introduction

Welcome to Skatteguru (hereinafter referred to as "we", "our", or "us").

We are committed to protecting the privacy and security of your personal information. This Privacy Policy outlines our practices concerning the collection, use, and sharing of your information when you use our services. By using our services, you agree to the collection and use of information in accordance with this policy.

2

Data Collection and Use

Information We Collect:

In order to provide and improve our services, we collect the following types of information:

1. Personal Data: This includes information that can be used to identify you, such as your name, email address, and contact details. Personal Data is collected to create your account, enable service delivery, and facilitate communication.
2. Trade Information: We collect details of your stock transactions necessary for calculating the average acquisition cost of shares and determining your tax obligations, such as the date of purchase, sale, and the number of shares traded, if you choose to provide this information.
3. Document Data: When you upload tax statements, PDFs, or images for analysis, we collect the data contained within those files. This information is processed primarily by our proprietary in-house tools to extract the trade information necessary for your calculations.
4. Technical Data: Device information, log data, and cookie usage for service improvement and security.

Technical Data

1. Device Information: We may collect information about the device you use to access our services, such as the device type, operating system, and browser type. This information is used to improve the performance and security of our services.
2. Log Data: When you use our services, we may collect information that your browser sends whenever you visit our website or use our services. This log data may include your IP address, browser type, browser version, the pages of our services that you visit, the time and date of your visit, the time spent on those pages, and other statistics.
3. Cookies and Tracking Technologies: We use cookies and similar tracking technologies to track the activity on our services and store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our services. For more information about the cookies we use and your choices regarding cookies, please read our Cookie Policy.
4. Analytics and Feature Flags: We use third-party service providers to help us understand product usage and to deliver frontend feature flags and remote configuration. We currently use EU-hosted Mixpanel for consent-based product analytics, and EU-hosted PostHog for anonymous frontend feature flags and remote configuration. These providers are contractually restricted to providing services on our behalf.

Legal Basis for Processing

Under GDPR Article 6, we process your data based on:

1. Contractual Necessity: To provide the services you requested (Terms of Service).
2. Legal Obligations: To comply with accounting and tax laws.
3. Consent: For optional analytics and other processing where you have explicitly opted in.
4. Legitimate Interests: For network security, fraud prevention, service improvement, and limited anonymous feature-flag or remote-configuration processing needed to operate the service safely.

How We Use Your Information:

The information we collect is used for the following purposes:

1. Service Provision: We use both your Personal Data and Trade Information to deliver and enhance our services, ensuring accurate tax calculation and efficient customer support.
2. Communication: Your Personal Data may be used to contact you with service updates, support messages, and administrative communications.
3. Service Reliability and Product Changes: We use anonymous frontend feature flags and remote configuration to roll out changes more safely and reduce the risk of service regressions.

Storage of Personal and Financial Data:

In order to provide our services, we do store some personal data, including your email address and the financial data you provide. This information is essential for processing and facilitating your tax calculations.

We prioritize your privacy and are committed to protecting your data. All stored information is used strictly in ways that are beneficial to you and in accordance with our Privacy Policy.

Your privacy is our priority, and we are committed to protecting your data and using it only in ways that are beneficial to you and in accordance with this Privacy Policy.

3

Data Sharing and Disclosure

We do not sell your personal data. We share data only in the following circumstances:

1. Service Providers: We share your information with service providers who perform services on our behalf, such as data storage and processing. We use Amazon Web Services (AWS) for storage. We use Amazon Bedrock for document analysis with AI. We use EU-hosted Opper for AI document classification, which processes a truncated excerpt of the document text and routes to EU-hosted model providers. We use Vercel for frontend hosting and content delivery (EU-hosted). We use Neon for database storage (EU-hosted, Finland). We use EU-hosted Mixpanel for optional product analytics where you have consented. We use EU-hosted PostHog for anonymous frontend feature flags and remote configuration. Our sub-processors are contractually prohibited from using your data for any purpose other than the specific services they provide to us.
2. Legal Requirements: If required by law or in response to valid requests by public authorities (e.g., a court or a government agency).

Our service providers are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.

Data Security:

We take the security of your data seriously. We implement appropriate technical and organizational measures to protect your personal and trade information from unauthorized access, alteration, disclosure, or destruction.

International Transfers of Data:

Your information, including personal data, may be transferred to computers located in the European Union / EAA.

4

Data Security and Storage

Security Measures:

Safeguarding your personal data is of utmost importance to us. We employ robust security measures to protect your data from unauthorized access, disclosure, alteration, or destruction. These measures include:

1. Encryption: We use advanced encryption technology to ensure the secure transmission and storage of your data.
2. Access Controls: Access to your personal data is strictly limited to authorized personnel who need the information to provide our services. They are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution, if they fail to meet these obligations.
3. Regular Audits: We regularly review and update our security practices to address new threats and ensure the continued protection of your data.

Data Storage:

Your personal data and trade information are stored and processed on secure servers provided by our trusted partners, including Amazon AWS and Neon, on secure servers in the European Union. This ensures your data remains protected under the stringent data protection laws of the European Union at all times.

Data Retention:

We retain your personal data only for as long as necessary to provide you with our services and for legitimate business purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements. When we no longer need to use your personal data, we remove it from our systems and records and/or take steps to anonymize it so you can no longer be identified from it.

5

User Consent and Rights

Consent for Data Processing:

We obtain your consent for processing personal data at the time of registration and ensure that the consent is:

1. Freely Given: You have the option to agree or disagree with the data processing, and your decision does not affect your access to our services.
2. Informed: We provide clear and comprehensive information about the data processing activities your consent applies to.
3. Specific and Unambiguous: Your consent is obtained for distinct processing operations, and you have the right to withdraw your consent at any time.

Your Rights under GDPR:

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

1. Right of Access: You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data.
2. Right to Rectification: You have the right to have inaccurate personal data corrected or completed if it is incomplete.
3. Right to Erasure ('Right to be Forgotten'): You can request the deletion or removal of personal data where there is no compelling reason for its continued processing.
4. Right to Restrict Processing: You have the right to 'block' or suppress further use of your personal data under certain circumstances.
5. Right to Data Portability: You have the right to obtain and reuse your personal data for your own purposes across different services.
6. Right to Object: You have the right to object to the processing of your personal data in certain circumstances, including for direct marketing purposes.

Right to Lodge a Complaint

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority. In Sweden, this is Integritetsskyddsmyndigheten (IMY).

6

Amendments to the Privacy Policy

Changes to the Policy:

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices or services, changes in the law, or other operational reasons. Your continued use of our services after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Notification of Changes:

1. Significant Changes: In the event of significant changes to this Privacy Policy, we will provide you with clear notice, for instance, by posting a notice on our website or sending you an email notification.
2. Periodic Review: We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information and your privacy rights.

7

Contact Information

For privacy concerns, please contact our Data Protection Officer at:

Contact Details: