Privacy Policy

This policy explains what personal data Bokfirma processes, why, and for how long.

Who is responsible for your data

Smålandsbron AB (org. no. 559421-9619), Fuxvagen 11, 352 55 Växjö, Sweden, is the data controller for the personal data described below (your account, subscription and support data). Contact: support@bokfirma.se · Phone: 0765841697.

For the invoices, receipts and customer/billing-recipient details you create in Bokfirma, you are the data controller — that data is stored only in your own browser and, if you choose to connect one, your own cloud drive. Smålandsbron AB does not access, view, or store it, except for the brief technical pass-through described below (cloud sync, Document AI, and emailing an invoice at your request), where we act purely as your processor / technical intermediary on your explicit instruction.

Data we store on your device — and, if you connect one, your own cloud drive

Invoice data, customers, and settings are always saved in your browser's local storage first — this is the primary copy and requires nothing from you.
If you connect a cloud-drive provider (Google Drive, OneDrive, Dropbox, or pCloud), each completed document is automatically saved there too as soon as you create it, without a separate export step.
If you don't connect a provider, your data exists only in that browser: clearing its site data, switching devices, or losing access to it permanently deletes anything not also saved to a connected drive. We do not keep a separate backup on our servers — connecting a provider is the recommended way to back up your data.
Drive connection data (OAuth tokens) is stored locally when you connect a provider.

Data we process on our servers

The table below lists every purpose for which our servers (hosted on Netlify) handle personal data.

Account & subscription (email, name, payment status): to create your license and manage your subscription. Legal basis: performance of a contract. Payment records are held by Stripe for as long as required by Swedish accounting law (Bokföringslagen, normally 7 years); we keep the license/email mapping for as long as your subscription is active, then delete it.
Cloud-drive uploads & sync: when you upload or sync a file, it passes through our serverless functions only in transit (held in memory for that single request) and is forwarded directly to your chosen provider. Legal basis: performance of a contract / your explicit authorization. We do not retain the file.
OAuth token exchange: when you connect a drive provider, the authorization code is exchanged for an access token on our server and immediately relayed to your browser; it is never written to disk or a database on our servers. Legal basis: your consent/contract.
Document AI (invoice/receipt scanning): the image you choose to scan is sent to Google's Gemini API to extract structured data, and the result is returned to your browser. We do not store the image or the extracted data ourselves. We use the Gemini API under a billed Google Cloud account (Google's "Paid Services" tier), under which, per Google's Gemini API Terms of Service, Google does not use your submitted images or prompts to improve its products — it retains them only briefly, to detect and prevent abuse. Legal basis: performance of a contract (a feature you actively trigger). Usage is capped per plan using a one-way SHA-256 hash of your license key plus a monthly counter — never the invoice content itself.
Support requests (name, email, description, optional screenshot): to respond to your inquiry. Legal basis: legitimate interest in providing support / pre-contractual measures. Kept in our support mailbox until your case is resolved and for a reasonable follow-up period afterwards, then deleted.
Sending an invoice by email: when you use "Email PDF", the recipient address and the PDF are used only to relay that one email via our mail provider; we do not retain them afterwards. Legal basis: performance of a contract (an action you initiate).
Technical/service logs: our hosting provider (Netlify) generates operational logs (e.g. request timestamp, IP address, endpoint, and error details) for security, abuse prevention, and debugging. Legal basis: legitimate interest. These are retained only as long as necessary for that purpose under Netlify's own operational retention; we do not export them into a separate long-term store.

Payments

Subscriptions are handled by Stripe. We do not store full payment details — card numbers never touch our servers.
Stripe acts as an independent controller for the payment data it collects and processes it according to its own privacy policy.

Analytics

Umami Analytics: we use Umami to collect anonymous usage statistics (pages visited, features used, browser type, country). Umami does not use cookies, does not collect personal data, and does not track you across other websites. Events such as document exports and feature interactions are recorded as aggregate counts only — no identifying information is included. Data is processed by Umami, Inc. under their privacy policy.
Cloudflare Web Analytics: we use Cloudflare's privacy-first analytics to monitor page performance and availability. No cookies are set and no personal data is collected. Data is processed by Cloudflare, Inc. under their privacy policy.
Both analytics services rely on our legitimate interest in understanding how the service is used, in order to improve it. You can opt out of Umami tracking by enabling "Do Not Track" in your browser settings.

Sub-processors and third parties

Netlify — hosting and serverless functions.
Stripe — subscription billing and payments.
Google — Gemini API (Document AI) and, if you connect it, Google Drive.
Microsoft — OneDrive, if you connect it.
Dropbox and pCloud — if you connect them.
one.com — transactional email (support, welcome, and invoice-delivery messages).
Cloudflare and Umami — privacy-preserving analytics (see above).

International transfers

Some of the providers above (Google, Microsoft, Dropbox, Stripe, Cloudflare) are based in, or transfer data to, the United States. Where that occurs for data we control, it relies on the safeguards those providers offer — the EU-US Data Privacy Framework and/or Standard Contractual Clauses. If you choose to connect your own Google Drive, OneDrive, Dropbox, or pCloud account, any transfer of your files to that provider happens directly between your browser and the provider under your own agreement with them, not under our control.

Your choices and rights

You can delete local data at any time by clearing your browser storage.
You can revoke drive access at any time in your provider's own account settings.
If you are in the EEA/UK, you have the right to request access to, correction of, deletion of, or restriction of processing of your personal data, to object to processing based on legitimate interest, and to data portability. To exercise any of these rights, contact support@bokfirma.se; we will respond within one month as required by GDPR.
You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se, or with the data protection authority in your own EU/EEA country.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date below.

Last updated: 2026-09-28.

Contact

Questions? Contact support.

Smålandsbron AB · Org. no. 559421-9619
Fuxvagen 11, 352 55 Växjö, Sweden
Telefon: 0765841697

Back to app