Inzenda Privacy Policy

Inzenda AB, company registration number 559480-1580, is the controller for the processing described in this policy.

• Postal address: Sysslomansgatan 20, 112 42 Stockholm
• Privacy email: privacy@inzenda.se
• Support: support@inzenda.se

We have not appointed a data protection officer.

Inzenda has two roles, and it matters to keep them apart:

• We are the controller for data about you as an account holder and visitor: your account, your sign-in, payment, support requests, email from us, statistics on how the service is used, and protection against misuse. That processing is what this policy covers.
• We are a processor for the data your company enters into the service about other people: board members, employees and payees in payroll and the employer declaration (AGI), counterparties in transactions, the person who signs the annual report, and similar. For that data your company is the controller, and we process it under our data processing agreement (DPA). Anyone with questions about such data, an employee for example, should contact the company first.

For demo companies we are the controller of all data in them, including the address of anyone you invite. We send the invitation on your behalf and delete the data when the demo company is deleted.

Account data. Name and email address. If you have a password, it is stored only as a hash. If you sign in with Google, Google gives us your name, email address, profile picture (as a link) and an id for your Google account. We also store which version of the terms of service you accepted, and when.

Sign-in and security. While you are signed in we keep a session with your IP address and browser and device information (user agent) and how you signed in (password, Google or passkey). A session lasts 7 days from its last use, or until you sign out. If you turn on two-step verification we store an encrypted setup key for your authenticator app and encrypted backup codes. We log when it is turned on or off, when new backup codes are created, when a backup code is used, when you confirm an action with the code, when the account is locked after too many errors and when support resets it. If you add a passkey you can sign in with it and confirm sensitive actions with it. We then store its public key, an id for it, what kind of passkey it is, a name and when it was added and last used. The private key and your screen lock never leave your device. We log when a passkey is added or removed.

Company data relating to you. Your company's registration number, name, address and financial year, and which company your account is linked to. If you are yourself the contact person for the employer declaration, we process your phone number on the company's behalf under the DPA.

Company lookup. When you enter a registration number we fetch the company's register data from Bolagsverket (the Swedish Companies Registration Office), including the board members' and auditors' names and personal identity numbers. For the lookup, before the company is added to an account, we are the controller on the basis of legitimate interest (showing the right company and the right people), and personal identity numbers are used only to identify the right person. The lookup itself stores no personal data with us. If you continue in the wizard, the data is kept in the draft in your browser, and with us only once the company is added to an account. A personal identity number from the register is never shown in full in your browser, only the year of birth. During the lookup we also collect technical browser signals to protect it against automated requests (Vercel BotID) and limit the number of lookups per IP address.

Payment. Card details are entered directly with Stripe and never reach Inzenda. We store Stripe's customer id, subscription id, subscription status (plan, billing period, renewal date) and the payments made (amount and date). In Stripe's checkout you can enter a billing address and registration number; those are stored by Stripe.

Communication. Email you send to support, which reminders we have sent, and whether (and when) you have unsubscribed from reminders.

Use of the service. Which steps you take in the service, for example completed wizard steps, a started checkout, a completed payment and a filing. It is linked to your account when you are signed in. We also store which campaign link (utm parameters), which website (domain name only) and which landing page a visit came from. These statistics store no IP address and use no cookies.

Technical data. Our hosting provider logs IP addresses in server logs. Vercel Web Analytics and Vercel Speed Insights give us visit statistics and load times without cookies. If something breaks, an error report is sent to Sentry; personal identity numbers are masked before the report leaves us, and we do not send IP addresses or sign-in data with error reports.

Filing data. Receipt numbers and status from Bolagsverket and Skatteverket (the Swedish Tax Agency) for what you file.

PDF bank statements. If you upload a bank statement as a PDF, it is read in memory and never stored, neither the file nor its text. The rows you confirm become transactions in the company's books; of the file only its checksum (sha256), the period and the account are kept, as a trail for the books.

Trials. If we give a company a trial, we keep the e-mail address the invitation is sent to, the day you asked for it, the end date and the purpose (test, prospect or partner), and then which account and company it covers. The data is kept before you have an account.

Where we rely on legitimate interest we have weighed our interest against yours, and you always have the right to object (see section 8).

We send no newsletters and no marketing by email. If we start, we update this policy before the first mailing, and you can always opt out.

We make no decisions about you based solely on automated processing that have legal effects for you.

You need to provide your name and email address to create an account, and the data a filing requires for us to prepare it and send it to the authority for the company's signature. Without them we cannot deliver the service. You are not obliged to provide any other data.

We never sell personal data.

Providers that process data on our behalf (processors):

Recipients that are controllers in their own right:

• Bolagsverket receives annual reports and, when the company has an auditor, your and the auditor's email address for the receipt and the notice about the audit report, and gives us register data. It is a public authority and processes the data under its own rules.
• Skatteverket receives income tax returns, employer declarations and VAT returns. It gives us the employees' tax table ('Fråga om skatteavdrag') and, where your company has authorised us as a read-only agent (läsombud), data on the company's tax account and returns. It is a public authority and processes the data under its own rules.
• Stripe (Stripe Payments Europe Ltd) handles payments for us and is a controller in its own right for part of that processing, for example fraud prevention and financial regulation.
• Google is a controller for your Google sign-in, if you choose to sign in with Google.

• The provider of an AI assistant you connect, for example Anthropic or OpenAI, receives your name and the companies' data under your or your company's agreement with that provider (see Connected AI assistants).

When you sign at Bolagsverket and Skatteverket, it happens in their own services.

We may also have to disclose data to authorities where the law requires it.

The database and file storage are in the EU (Frankfurt and Stockholm). Logs of sent emails are stored by Resend in the US, and support email at Google may be stored in the US. Several of our providers (Vercel, Neon, Resend, Sentry, Google and Stripe) are also US companies or part of US groups, so data may in some cases be accessed from or transferred to the US, for example for support or operations.

The provider of an AI assistant you connect may process the data outside the EU/EEA under its own terms (see Connected AI assistants).

When that happens the transfer is protected by one of the following:

• The EU-US Data Privacy Framework, where the provider is certified under it. This applies to Vercel, Neon (Databricks), Resend, Sentry and Stripe.
• The European Commission's standard contractual clauses in the provider's data processing agreement, where the provider is not certified. All our US providers also include standard contractual clauses in their agreements, and they apply to Google.

You can get a copy of the safeguards by contacting us.

The books are not deleted on request. Vouchers, their history, transactions, receipts, annual reports, tax returns, payroll runs and the system documentation in force for each year are accounting records that the company must keep under the Bookkeeping Act. The right to erasure does not apply where processing is required to comply with a legal obligation (GDPR Article 17(3)(b)). A deleted transaction therefore stays in the books as a reversal.

When you close a company in Inzenda, your account loses access at once and you are offered a download of the books first. Data about you that is not part of the books, such as the phone number and the log of reminders, is deleted then. The books are kept until 31 December of the seventh year after the last financial year ends and are then deleted automatically, receipts in file storage included.

Database backups are deleted as they rotate out, within 6 hours.

You have the right to:

• access the data we hold about you and get a copy;
• rectify inaccurate data;
• have data erased, except what we must keep by law (see section 7);
• restrict processing, for example while we look into an objection;
• object to processing based on legitimate interest. You can stop reminders at any time through the link in every reminder;
• receive your data in a machine-readable format (data portability) for what you have given us under the contract.

If you are the only one with full access to a company (demo companies excepted), you cannot delete your account until you have given someone else full access or closed the company. The company's books stay when your account is deleted, since the company must keep them.

Write to privacy@inzenda.se. We answer within one month. We may need to ask you to confirm who you are before we disclose data.

If your question is about data a company has entered into Inzenda about you, as an employee or board member for example, that company is responsible. Contact the company; we help it answer.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), www.imy.se, Box 8114, 104 20 Stockholm, Sweden. We would appreciate hearing from you first.

• All traffic to and from the service is encrypted (HTTPS).
• Personal identity numbers and salary bank account numbers are encrypted in the database with AES-256-GCM, with a key the database itself does not hold. They are shown masked in the browser.
• Passwords are stored only as hashes.
• Whoever adds a company gets full access to it. Others get access only through an invitation from someone with full access, with full access, edit access or view only. With view-only access you can ask for edit access; everyone with full access is then e-mailed your name and your message, and the message is deleted 30 days after the request is decided or expires. If someone with full access has connected an AI assistant, the assistant can read the request. Data fetched from Skatteverket under the company's authorisation is shown only to those with full access to the company. Those with access to a company linked in a group see the group's figures.
• The books cannot be overwritten afterwards; changes are kept as corrections with history.
• Error reports mask personal identity numbers before they leave us.

We use only the cookies the service needs to work, mainly for sign-in. We use no cookies for advertising or tracking and have no advertising pixels on the website. In your browser's local storage we keep, among other things, your choice of light or dark mode and drafts in the wizard. Read more in our cookie policy.

Stripe sets its own cookies on its payment pages. Those are covered by Stripe's cookie policy.

We update this policy when the service or the law changes. The date at the top shows when it last changed. For significant changes we notify you by email or in the service before they take effect.

Inzenda AB
Company registration number 559480-1580
Sysslomansgatan 20, 112 42 Stockholm
privacy@inzenda.se