Integritetspolicy

Denna integritetspolicy avser hantering av användardata, filuppladdningar, analysprocesser, betalningsregister, loggning, lagringsperioder samt användarrättigheter på webbplatsen.

E-post: admin@smartarch.ai

Integritetspolicy

Denna integritetspolicy avser hantering av användardata, filuppladdningar, analysprocesser, betalningsregister, loggning, lagringsperioder samt användarrättigheter på webbplatsen.

Categories of Personal Data Processed

If the website does not support user account creation, account information is not processed. However, the system may generate an anonymous or transaction-based customer/application ID for tracking transactions, payments, analysis results, returns, or support activities.

Contact information, billing or company information, service usage information, technical information, file and analysis metadata, payment and billing records, upload times, analysis times, output generation times and deletion events may be processed.

Uploaded file contents are processed exclusively to provide the service, perform analysis, generate outputs, debug errors, meet security requirements, and comply with legal obligations.

Purposes of Processing Personal Data

Personal data may be processed for website operation, authentication, session management, file upload services, AI-assisted analysis, demo and paid services, payment transactions, invoicing, output generation, result downloads, technical support, error detection, security, fraud prevention, legal compliance, dispute resolution, service quality and performance improvement.

Log and Audit Records

Log records may be maintained to ensure secure website operation, transaction traceability, error detection, and evidence in potential disputes. Logs are retained only for the necessary duration and safeguarded for authorized access only.

Cookies and Similar Technologies

Strictly necessary cookies may be used for website operation, session management, security, language selection and payment processing.

Performance, analytical and preference cookies may be used to improve service quality and remember language, region and display preferences. Advertising cookies are used only where explicit consent is obtained.

Transfer of Personal Data

Personal data may be shared with hosting, cloud infrastructure, payment, email, analytics, technical support, accounting, legal, audit, security and authorized public authorities only for service delivery, legal compliance, security, or explicit consent.

Children's Privacy

The services are not intended for children. Data from persons under 16 is not knowingly collected, and users under 13 are not permitted to use the system. If child data is identified, it is deleted and processing ceases.

Retention Periods

Personal data is retained only as long as necessary. Uploaded files are retained for 72 hours after analysis and output generation; transaction records are retained for service completion and six months thereafter; payment and invoice records are retained as required by tax and accounting legislation.

Data Transfer Abroad

Due to the technical infrastructure, data may be transferred abroad through cloud servers, AI analysis systems, payment infrastructures, email services, CDN/cache systems and log/error monitoring systems. Transfers are conducted under applicable legal mechanisms such as SCCs, adequacy decisions, explicit consent, standard contracts, IDTA/UK Addendum or local transfer rules.

Policy Changes and Contact

This policy may be updated due to legislative changes, technical infrastructure changes, new products or services, payment processes, security practices or changes in processing activities.

Last update date: [05.05.2026]

E-post: [email protected]

Support channel: [support link]

Rättsliga grunder för behandling av personuppgifter

Datakategori Behandlingsändamål Rättslig grund
Användarnamn / ID tillhandahållande av tjänst fullgörande av avtal
Kontaktuppgifter support, aviseringar avtal + berättigat intresse
Fildata AI-analys avtal
Tekniska data (IP, enhet) säkerhet, loggar berättigat intresse
Betalningsdata betalning, faktura rättslig förpliktelse
Loggposter säkerhet, bevis berättigat intresse
Cookies (nödvändiga) systemdrift berättigat intresse
Cookies (analys/annonsering) analys/marknadsföring uttryckligt samtycke

Tabell över personuppgiftshändelser och lagstadgade tidsfrister

Händelse KVKK (Turkiet) GDPR (EU) UK GDPR USA (CCPA/CPRA) Not
Svarstid för användarbegäran 30 dagar 1 månad 1 månad 45 dagar I USA: 45 dagar + förlängning med 45 dagar
Förlängning av tidsfrist ingen (undantagsvis) +2 månader +2 månader +45 dagar användaren måste underrättas
Avgiftsbegäran kostnadsfri kostnadsfri kostnadsfri kostnadsfri avgift kan tas ut vid missbruk

Personuppgiftsincident

Händelse KVKK GDPR UK GDPR USA Not
Anmälan till myndighet ”så snart som möjligt” 72 timmar 72 timmar varierar per delstat KVKK anger ingen fast tidsfrist
Meddelande till användare vid behov vid behov vid behov obligatoriskt krävs om det finns risk
Intern registerföring obligatoriskt i alla fall

Radering / förstöring av data

Händelse KVKK GDPR USA Not
Svar på raderingsbegäran 30 dagar 1 månad 45 dagar
Raderingsprocess skälig tid utan dröjsmål skälig tid
Om lagstadgad lagring gäller raderas inte raderas inte raderas inte skatt m.m.

Logg- och lagringstider (praktisk standard)

Data Rekommenderad period Förklaring
Loggposter 6 månader – 1 år säkerhet
Transaktionsposter 6 månader lämpligt för ditt system
Uppladdad fil 72 timmar efter analys
Betalningsposter 5–10 år skatteplikt
Cookiedata 6–24 månader beroende på cookietyp