How we process personal data.

Who is the data controller?

Authoricy AB, company registration number 559565-6827, Stockholm, Sweden, is the controller for personal data processed through this website and in the Alfred service. Contact: hej@getalfred.se.

What data do we process, and why?

How long do we keep it?

• Strategy session requests: 12 months after the last contact.
• Call recordings and transcripts: 90 days, unless otherwise agreed.
• CRM customer data: for as long as the contract runs, then 30 days before deletion.
• Data from Meta: for as long as the business keeps its account connected, then 30 days before deletion.
• Accounting records: seven years, as the Swedish Bookkeeping Act requires.

Where is the data processed?

Within the EU/EEA. If a subcontractor processes data outside the EU, it does so under the standard contractual clauses with supplementary safeguards. Current sub-processors are listed in the data processing agreement, which you receive when the contract is signed.

The voice agent and recorded calls

The voice agent says that it is an AI assistant in the first sentence of every call. Calls are recorded so that the booking can be delivered and the answers improved. Anyone who calls can ask for the recording to be deleted.

Data from Facebook, Instagram, Messenger and WhatsApp

Alfred uses Meta’s platforms through the Alfred app. When a business connects its Facebook Page, Instagram account, ad account or WhatsApp number to Alfred, we process data from Meta on that business’s behalf:

• Messages and comments sent to the business, and the name and profile picture of the person who wrote them, so that the business’s customers get an answer.
• Answers submitted in the business’s lead forms, so that the business can follow up each lead.
• Ad accounts, campaigns and ad results, so that we can create, run and report on the business’s ads.
• Basic Page, Instagram and WhatsApp account details, so that we can connect the right account.

This data is used only to deliver the service to the business that connected the account. It is never sold, never used to build profiles of individuals, and never shared with anyone other than the sub-processors needed to run the service. We also read public ads in the Meta Ad Library to analyse advertising in our customers’ markets. Those contain the advertiser’s name and the ad’s content, and no data about the people who saw the ads.

How to have your data deleted

• Email hej@getalfred.se with the subject “Delete my data” and give the name or number you used on Facebook, Instagram, Messenger or WhatsApp.
• We delete the data within 30 days and confirm by email when it is done.
• A business that disconnects its account from Alfred has all its data from Meta deleted within 30 days.
• You can also remove Alfred’s access yourself under Apps and websites in your Facebook settings.

Step-by-step instructions: getalfred.se/en/data-deletion.

Do we share the data with anyone?

With the subcontractors needed to run the service: telephony, email, cloud storage and advertising platforms. We never sell personal data, and we never put sensitive data into advertising platforms.

What are your rights?

• Find out what data we hold about you, and get a copy.
• Have incorrect data corrected.
• Have data deleted when we no longer need it.
• Object to processing based on legitimate interest.
• Withdraw a consent, for example for statistics and mailings.
• Complain to the Swedish Authority for Privacy Protection (IMY) if you believe we process data incorrectly.

Write to hej@getalfred.se and say what you want. We answer within 30 days.

Cookies

We set only necessary cookies until you consent to more. Statistics cookies are set only once you have chosen to allow them, and you can change your choice at any time through the link in the footer.