Privacy Policy
Last updated: August 23, 2026
AI Company Nordic AB ("we") respects your privacy. This policy explains what we collect, why, and your rights under the EU General Data Protection Regulation (GDPR).
Data controller
- Company: AI Company Nordic AB
- Company registration number: 5591637359
- Registered address: Källvägen 11, 191 46 Sollentuna, Sweden
- Contact: info@myagents.se
Data we collect
- Account: email, name, language preference.
- Content you create: tasks, notes, calendar events, AI memories, conversations, decisions.
- Connected accounts: email/calendar tokens you authorize (encrypted at rest).
- Billing: subscription status and invoices (card details are handled by Stripe, never by us).
- Call data: transcripts and summaries of executive calls, when you enable them.
- Optional personal context: if you choose to answer the optional personal section of onboarding, we store what you write about your family, children, school routines and personal boundaries.
Special categories of personal data (Art. 9 GDPR)
The optional personal section may include information about your health, sleep, stress or energy levels. Such data constitutes a special category of personal data. It is collected only where you volunteer it, on the basis of your explicit consent (Art. 9(2)(a) GDPR), and used solely to adapt how the Service paces and prioritises your work. Every such question is individually skippable.
These entries are stored separately from ordinary business data, in records readable only by your own account. They are never shared with your organisation, team members, administrators or other users, and are not used for profiling, marketing or automated decisions with legal effect. You can review, edit or delete each entry at any time under Executive Memory, and withdrawing consent by deleting the entry stops all further processing of it.
Why we process it
To operate the Service, personalize AI responses, and meet legal obligations. Legal bases: contract (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f)), and legal obligation (Art. 6(1)(c)) for accounting records.
Subprocessors
| Processor | Purpose | Location |
|---|---|---|
| Supabase (via Lovable Cloud) | Database, file storage and sign-in | EU (Ireland) |
| Cloudflare | Runs the web app and its server code (requests are handled at the data center nearest the user) | Global (EU for EU visitors) |
| Lovable | AI gateway, connectors for Gmail, Outlook and Google Calendar, sign-in and notification email | EU / USA |
| Google Cloud (Vertex AI) | Gemini language models and reading of documents | EU (Netherlands); USA only as fallback |
| Anthropic | Claude language models for longer agent tasks | USA |
| OpenAI | Real-time voice when you call your agent, and drafting of tender bids | USA |
| 46elks | SMS and phone calls between you and your agent | Sweden |
| Unipile | LinkedIn, WhatsApp and Instagram messages you connect | EU |
| Firecrawl | Web search and page reading for the agents | USA |
| Brave Search | Web search (search terms only) | USA |
| Browser Use | Browser agent for bookings and purchases you approve | USA |
| Stripe | Subscription billing and payment processing | USA / EU |
Services you connect yourself (Google, Microsoft, Fortnox, Visma Spiris, TikTok, your email provider) only receive data when you authorize them. Business customers: our Data Processing Agreement is at myagents.se/legal/dpa.
Transfers outside the EU/EEA
Some processors are established in the United States — in particular Anthropic (AI models), OpenAI (real-time voice on phone calls and tender drafting), Firecrawl, Brave Search and Browser Use (web search and browsing) and Stripe (payments). Those transfers rely on the European Commission's Standard Contractual Clauses (SCC, Art. 46(2)(c) GDPR), supplemented by encryption in transit and at rest and by data minimisation before any content is sent to a model. Where a provider offers EU-region processing, we use it.
Retention
| Data type | Retention period |
|---|---|
| Account data (email, name, preferences) | Until you delete your account |
| Content you create (tasks, notes, decisions, memories) | Until you delete it, or account deletion |
| Conversations with the agents | 24 months, then deleted |
| Call transcripts and summaries | 12 months, then deleted |
| Connected-account tokens | Until you disconnect the integration |
| Email send logs | 12 months |
| Security and audit logs | 12 months |
| App usage log (when you open the app and which pages you visit, never what you write) | 12 months |
| Billing records (invoices) | 7 years (Swedish Bookkeeping Act) |
| Backups | Rotated within 30 days |
Your rights
Access, rectification, erasure, portability, restriction, objection. Use Account & Privacy to export or delete your data, or email info@myagents.se. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Known gaps
- A granular cookie-consent banner is not implemented yet; today MyAgents only uses strictly necessary and functional storage.
Contact
info@myagents.se