Privacy

Controller

iSearch App Sweden AB, org. no. 559410-3367. Contact: hello@iSearch.app.

We are the controller for the website, for our customer relationships and for our marketing. For data in the product, the customer’s organisation is the controller, as described below.

The contact form

When you send the contact form we process your name, work email and organisation, and your phone number and message if you give them. Name, work email and organisation are needed for us to reply. The purpose is to answer the enquiry. The legal basis is our legitimate interest in handling enquiries from organisations, or contract if your organisation becomes a customer.

The guide

When you download a guide we keep the work email, whether you have asked to be contacted, the language of the page and the time of the download. The legal basis is our legitimate interest in knowing who has downloaded the guide.

We contact you about the guide only if you have ticked the box for it. The legal basis for that contact is your consent, which you can withdraw at any time by emailing hello@iSearch.app.

Statistics and cookies

We keep simple statistics on our own web server, without cookies and without third-party services. We count how often each page is viewed, which website visitors come from (the domain name only), campaign tags in the link (utm) and a few events, such as the form being sent. A small script on the page tells our server when the page has actually been viewed, so we can tell visits apart from automated requests. It stores nothing in your browser. To count unique visitors, the server creates a temporary id from the IP address and browser type combined with a random value that changes every day. The IP address is not stored, and the id and the random value are deleted at the end of the day. After that only totals remain. The statistics are kept as daily totals. The website sets no cookies.

To protect the forms and the statistics from abuse, the IP address is held briefly in the server’s memory to limit the number of attempts. It is never stored. The browser identification is read only to filter out automated visits and is not stored either.

Customer relationships

When your organisation is a customer, or is considering becoming one, we process details of your contact people, such as name, work email and phone number. The purpose is to provide quotes, perform the agreement and invoice. The legal basis is our legitimate interest in working with your organisation.

Accounting records such as invoices are kept for seven years after the end of the calendar year in which the financial year ended, as required by the Swedish Bookkeeping Act.

The product: two deployment modes

On your side. The whole chain runs in your own environment, with no public AI services. Your organisation is the controller for the data in the product. If we are given access to the data by agreement, for example for support, we process it as a processor and a data processing agreement is concluded.

Hosted by us in Sweden. We run iSearch for you in a separate environment of its own. Your organisation is the controller and we are the processor. A data processing agreement is concluded before the service is used. Your documents are not mixed with other customers’.

Data in the product

Which data is processed depends on how iSearch is used. It may include account and contact details, permissions, documents in knowledge bases and the search data created for them, questions and answers, instructions to assistants, and material and drafts, for example for proposals. The same kinds of data may be processed in the mobile app.

The meeting feature also processes recordings, transcripts and minutes. These may contain information about everyone taking part and, in some organisations, sensitive personal data such as health information. Your organisation is responsible for having a legal basis for the processing and for informing participants.

Language models and public AI services

The language model can run in your own environment or in our environment in Sweden. We never use your data to train models.

Your organisation can choose to use public AI services. Only then are relevant excerpts from documents and questions sent to the chosen service so that an answer can be produced, and for that part the provider’s own terms and processing also apply. The provider may be located outside the EU/EEA. The transfer must then take place with the safeguards required by the GDPR. The provider’s role depends on which model you choose and is set out in the agreement with your organisation. iSearch can be used entirely without public AI services.

Recipients

We share personal data only with those who help us run the website and the service, such as providers of web hosting and email, and only to the extent needed. They process the data on our behalf. Our web host may keep technical logs for operations and security. If a provider processes data outside the EU/EEA, this takes place with the safeguards required by the GDPR.

When we run iSearch for a customer, the agreement with the customer sets out who processes the data. Data may also be disclosed where the law or a decision by an authority requires it.

Retention and deletion

Enquiries from the contact form are sent by email to hello@iSearch.app and also kept in a file on our web server. Details from the guide are sent and kept in the same way. Enquiries and guide details are kept for as long as needed for the purpose and then deleted. Consent to be contacted applies until you withdraw it. The statistics contain no personal data.

In the product, the owner deletes knowledge bases, assistants and the account. When an agreement for hosting by us ends, we delete the customer’s data as set out in the agreement.

We protect personal data with technical and organisational measures in proportion to the risks.

Your rights

You have the right to access your personal data, to have inaccurate data corrected, to have data erased, to restrict processing, to object to processing based on legitimate interest and to receive data you have provided yourself (data portability). You can always object to direct marketing. Consent can be withdrawn at any time, without affecting processing before the withdrawal. We make no decisions based solely on automated processing.

Email hello@iSearch.app to exercise your rights. We reply within one month and may need to confirm your identity.

If you use iSearch at a customer, contact your organisation first, as it is the controller. We help the organisation respond to the request.

Complaints can be filed with the Swedish Authority for Privacy Protection (IMY), imy.se.

Changes

We update this policy when our business or the rules change, and show the date at the top of the page.

Language

This policy is available in Swedish and English. In the event of any discrepancy, the Swedish version prevails.