Privacy policy
How we handle personal data — both on this website and in the Sparaa platform.
Last updated 4 September 2026
This is a translation provided for convenience. The Swedish version is the one that applies.
Who is responsible
Sparaa AB, Swedish company registration number 559592-7350, is the data controller. Contact for all matters concerning personal data: felix@sparaa.com. We respond without undue delay and within one month at the latest.
We have two different roles depending on the context, and it affects what we're responsible for.
- On the website we are the data controller. We decide ourselves why and how visitor data is processed.
- In the platform we are a data processor for the data you enter. You decide, we execute. A separate data processing agreement must be in place before that processing begins.
Part 1 — When you visit the website
What we collect
| Data | Why and for how long |
|---|---|
| Email address via a form | To send the calculation or material you asked for, and to be able to follow up. Stored for 24 months from last contact. |
| Information you provide when contacting us | To answer your question and document the exchange. Stored for 24 months from last contact. |
| Questions and short conversation history in the website chat | To generate and display an answer. Sparaa does not store a chat transcript. Anthropic processes the content as described below. |
| Visit statistics | To understand how the website is used and improve it. Collected only if you consented to statistics cookies. Stored for 14 months. |
| Marketing data | To measure and target advertising. Collected only if you consented to marketing cookies. |
The savings calculation on the home page runs entirely in your browser. Nothing you enter is sent to us unless you choose to provide your email address afterwards. The address and calculator choices are then sent to Resend for the requested email, and Felix receives a copy so he can respond if you contact us. The data is not used for newsletters.
When you use the website chat, your question and the short conversation history shown in the open chat are sent to Anthropic's commercial API to generate an answer. The history exists only in the current browser tab and Sparaa does not store a chat transcript. We may log technical measurements without question or answer text, such as response type, response time and token count, for security and quality monitoring. Do not enter personal data, sensitive data, passwords or other secrets in the chat.
Under Anthropic's standard terms, commercial API data is not used for model training. Anthropic normally deletes inputs and outputs within thirty days. Exceptions may apply to enforce its usage policy, comply with law, or where a different retention agreement has been activated.
Legal basis
For contact, website chat answers and material you requested: legitimate interest in being able to respond and deliver what you asked for, alternatively consent. For statistics and marketing: your consent, which you can withdraw at any time via the cookie settings.
Cookies
We use cookies to make the website work, for visit statistics and for marketing. No cookies beyond the strictly necessary are activated before you consent. You can change your choice at any time. Detailed information is in our cookie policy.
Part 2 — When you use the platform
What is processed
In the platform we process the data you enter yourself. That is:
- Account details, primarily the email address used to sign in.
- Information about your supplier contracts: supplier, cost, terms, dates.
- Transaction data about external supplier costs imported from a SIE4 file.
- Contact persons appearing in uploaded contract documents.
The platform is intended for supplier contracts. Salary data, tax data, health data and other sensitive personal data must not be uploaded. Contracts may contain names and contact details for contact persons; those details are processed when the document is uploaded.
AI analysis of contracts
When you upload a contract, the content is analysed to extract supplier, amount, dates and terms. The analysis is performed by Anthropic on our behalf. Under Anthropic's standard terms, commercial API data is not used for model training. Anthropic normally deletes inputs and outputs within thirty days; exceptions may apply to enforce its usage policy, comply with law, or where a different retention agreement has been activated.
SIE4 import
When you choose to import accounting data, the SIE4 file is processed to identify recurring external supplier costs. The original file is not stored. The platform stores only the allowed transaction rows and suggestions needed for the feature; payroll, taxes and customer payments are excluded through account-number rules. No suggestion becomes a contract without the user's approval.
For how long
Data is processed for as long as needed to provide the service and meet our obligations. Each signed-in person can download a machine-readable file with data tied to their own login under Settings. That export does not include colleagues' own rows. Request a complete return for the company account or deletion at felix@sparaa.com; those parts are handled manually under your written instruction and the applicable data processing agreement. The platform currently has no automated account deletion.
Records we are required to retain under Swedish accounting law are kept for the period the law requires.
Where data is stored
The platform's database, authentication and file storage are provided by Supabase in eu-north-1 (Stockholm). Vercel Functions are configured for arn1 (Stockholm). Vercel's global network and other subprocessors mean this is not a promise that all processing takes place in Sweden.
Some of our suppliers may process data in countries within or outside the EU and EEA. Where a transfer to a country outside the EU and EEA occurs, it is made under the European Commission's standard contractual clauses together with the supplementary safeguards required. Current recipient countries and safeguards must be set out in the customer's data processing agreement and subprocessor list.
Who we share data with
We never sell personal data and don't share it for others' marketing. We do, however, engage suppliers that process data on our behalf:
| Supplier | Function |
|---|---|
| Supabase | Database, file storage and authentication. |
| Vercel | Hosting of website and platform. |
| Anthropic | AI analysis of uploaded contracts and answers in the website chat. |
| Resend | Sending the savings estimate you request through the form on the home page and, when enabled, transactional emails from the platform. A data processing agreement is in place. |
| Google, Meta, LinkedIn, Instantly | Visit statistics and marketing — only with consent. |
Data may also be disclosed if we are required to do so by law or by a decision of a public authority.
Your rights
You have the right to know what data we hold about you, to have inaccurate data corrected, to have data erased, to object to processing, to request restriction, and to receive your data in a machine-readable format. Where processing has been based on consent, you may withdraw it at any time.
Get in touch at felix@sparaa.com and we'll respond without undue delay and within one month at the latest.
If you are not satisfied with how we've handled your data, you have the right to complain to the Swedish Authority for Privacy Protection, imy.se.