privacy policy

Privacy Policy

1. Introduction

This Privacy Policy outlines how Real AI Sweden AB ("we," "our," or "us") collects, uses, and protects personal data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

2. Data Collection

We collect the following personal data:

• Authentication Data: When users log in through Auth0, we collect information such as login attempts and IP addresses.
• API Usage Data: Our API records the time users fetch information, the success of the call, and the number of rows returned.

3. Data Usage

The collected data is used for the following purposes:

• Authentication and Security: To authenticate users and ensure the security of our services.
• Service Improvement: To analyze API usage patterns and enhance our services.

4. Data Storage and Processing

• Auth0: User authentication data is processed and stored by Auth0 within the European Union. Auth0 retains user profiles and associated metadata as per their data processing policies.
• Azure: Our API operates on Azure servers located in Sweden, where API usage data is stored and processed.

5. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law:

• Authentication Data: Retained for up to 12 months to ensure system security and investigate potential fraud.
• API Usage Data: Retained for up to 6 months for performance analysis and troubleshooting.
• Legal Compliance: Data may be retained longer to comply with applicable laws, such as tax and accounting regulations, which may require retention for up to 10 years.

6. Data Sharing

We do not share personal data with third parties except:

• As required by law.
• To protect our rights and property.

7. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

8. User Rights

Users have the right to:

• Access their personal data.
• Request correction or deletion of their data.
• Object to or restrict processing.
• Data portability.

To exercise these rights, contact us at [Contact Information].

9. International Data Transfers

All personal data is processed and stored within the European Economic Area (EEA). We do not transfer personal data outside the EEA.

10. Changes to This Policy

We may update this Privacy Policy periodically. Users will be notified of significant changes through our website or other communication channels.

11. Contact Information

For questions or concerns about this Privacy Policy or data processing practices, contact us at:

Real AI Sweden AB

privacy@realai.se

By using our services, you acknowledge that you have read and understood this Privacy Policy.