Privacy policy

01Data controller

02What data we collect

We only collect what you choose to give us, plus the technical minimum required to run the site securely.

• The contact chat: name, company, email and possibly phone number, along with the content of the messages you write to the assistant.
• Technical operations: your IP address is processed briefly to protect against abuse (rate limiting of the chat). It is not stored in a database.

We don't collect data you don't actively give us, and we don't track you across websites.

03Purpose and legal basis

We process your data in order to respond to your enquiry and arrange a demo. The legal basis is partly your consent, when you start a conversation and share your details yourself (GDPR Article 6(1)(a)), and partly our legitimate interest in responding to enquiries from potential customers (Article 6(1)(f)).

04How the chat works

The assistant in our contact chat is powered by a language model. When you write a message, the conversation is sent to our sub-processor Anthropic, which generates the reply on our behalf. Once you have shared your name, company and email, we send a summary of the conversation as an internal email to our team so we can get back to you.

We don't use your messages to train models, and the conversation is used solely to follow up on your enquiry.

05Processors and sub-processors

We only share data with suppliers who process it on our behalf under a data processing agreement:

• Anthropic (Claude): generates replies in the contact chat based on the messages you send.
• Microsoft (Azure and Microsoft 365): hosting of the website in the EU and delivery of the internal lead email to our team.

06Transfers to third countries

The website is hosted in the EU. Processing in the contact chat may involve transfers to the United States at Anthropic. Transfers take place on the basis of the European Commission's standard contractual clauses (SCCs) and any supplementary safeguards, so your data is protected to EU standards.

07Retention and deletion

We keep the internal lead email for as long as necessary to follow up on your enquiry and any customer relationship. If the enquiry doesn't lead anywhere, we delete the data once it no longer serves a purpose. You can always ask us to delete your data.

08Cookies

We don't use cookies for tracking, statistics or marketing. Fonts and other assets are served from our own domain, so you aren't shared with third-party ad networks.

09Your rights

Under the GDPR you have the right to:

• access the data we process about you,
• have inaccurate data corrected,
• have your data deleted,
• object to or restrict the processing, and
• receive a copy of your data (data portability).

If you have given consent, you can withdraw it at any time. Write to hej@svarly.aiand we'll help you quickly.

10Security

We protect your data with encryption in transit (HTTPS), access restrictions and the principle of least privilege with our suppliers. We only collect what's necessary and don't keep it longer than necessary.

11Complaints to the Danish DPA

If you are unhappy with how we process your data, you can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk. We would, however, always appreciate you contacting us first, so we can put it right.

12Changes

We update this policy when our processing changes. The date at the top shows when it was last amended.