Privacy Policy
Effective Date: 2025.09.15
Controller: TACKL Solutions ("we", "us", "our")
1. Who we are and scope
This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit our website, contact us, or use our services, including AI chatbots, AI voice agents, premium web development, and related consulting and support. We operate primarily in Sweden and process personal data in accordance with the EU General Data Protection Regulation (GDPR).
2. The data we process
We process business-related personal data. Typical categories include:
Identity and contact data: name, job title, company, email, phone, country.
Business context data: industry, role, use-case, project details, support history.
Communications: emails, call notes, chat transcripts, meeting recordings (where lawful and with notice).
Technical and usage data: IP address, device identifiers, browser type, pages viewed, timestamps, referral source, cookie IDs.
Marketing preferences: opt-ins, unsubscribes, campaign interactions.
Payment and billing: company billing details, VAT, invoices and payment status. We do not store full payment card data; where applicable this is handled by PCI-compliant providers.
We do not intentionally collect special category data (e.g., health, religion). Please do not submit such data to us. If you do, we will delete or minimize it where feasible.
3. How we collect data
Directly from you: website forms, email, phone, WhatsApp, chat widgets, meetings, proposals, contracts.
Automatically: cookies, pixels, and similar technologies on our website and embedded widgets.
From third parties: public business sources (e.g., company websites, LinkedIn), referrals, partners, and service providers that help us with analytics, communications, or lead generation, in compliance with law.
4. Purposes and legal bases
We process personal data for the following purposes under GDPR Article 6:
Provide and operate services (contracts, onboarding, deliverables, support).
Legal basis: Art. 6(1)(b) contract and Art. 6(1)(f) legitimate interests.
Sales and customer communications (respond to inquiries, demos, proposals).
Legal basis: Art. 6(1)(b) and Art. 6(1)(f).
Analytics and website performance (measure traffic, fix issues, improve UX).
Legal basis: Art. 6(1)(a) consent where required, otherwise Art. 6(1)(f).
Marketing to business contacts (news, product updates, case studies).
Legal basis: Art. 6(1)(a) consent where required, or Art. 6(1)(f) for B2B direct marketing; you may opt out at any time.
Security and fraud prevention (detect abuse, protect systems and data).
Legal basis: Art. 6(1)(f) and Art. 6(1)(c) legal obligation.
Compliance and accounting (tax, bookkeeping, regulatory requests).
Legal basis: Art. 6(1)(c).
5. AI-specific processing
Inputs and outputs: When you interact with our AI chatbots or voice agents, we may process prompts, uploaded files, and generated outputs to provide the service, troubleshoot, and improve quality.
Providers as processors: We may use reputable AI infrastructure/providers (e.g., model, speech-to-text, text-to-speech, telephony). They act as processors under our instructions.
No model training on client data: We do not allow providers to use client data to train foundation models unless we have your explicit written permission.
Human oversight: We may review logs to resolve incidents, improve accuracy, and ensure safety.
Automated decision-making: Our AI features provide suggestions and automation, but we do not make decisions producing legal or similarly significant effects without appropriate human review.
6. Cookies and similar technologies
We use cookies, pixels, and tags for basic site functionality, analytics, and B2B marketing attribution. Where required, we obtain your consent via a cookie banner and record your choices. You can change preferences in your browser and through our cookie banner at any time. See our Cookie Policy for details on categories, retention, and vendors.
7. Sharing and disclosures
We may share personal data with:
Service providers (processors): hosting, analytics (e.g., GA4), communications, CRM, email, AI infrastructure, voice/telephony, billing, project tools.
Business partners and subcontractors: to deliver agreed services.
Legal and compliance: courts, authorities, auditors where required by law.
Business transfers: in connection with a merger, acquisition, or asset transfer.
We do not sell personal data.
8. International transfers
If personal data is transferred outside the EEA, we use lawful safeguards such as EU Standard Contractual Clauses (SCCs), an adequacy decision, and supplementary measures where appropriate.
9. Data security
We apply administrative, technical, and physical safeguards, including encryption in transit, access controls, least-privilege permissions, audit logging, and vendor due diligence. No system is perfectly secure; please notify us promptly if you suspect any security issue.
10. Retention
We keep personal data only as long as necessary for the purposes above:
Sales inquiries and leads: up to 24 months after last meaningful interaction.
Contracts, invoices, accounting: up to 7 years to comply with Swedish bookkeeping requirements.
Support logs and AI interaction logs: typically 12–24 months, unless needed longer for security or legal reasons.
We will delete or anonymize data when no longer needed.
11. Your rights (EEA)
Subject to legal limits, you have the right to:
- • access your personal data and receive a copy
- • rectify inaccurate or incomplete data
- • erase data ("right to be forgotten")
- • restrict processing
- • data portability
- • object to processing, including B2B direct marketing
- • withdraw consent where processing relies on consent
To exercise rights, email Contact@tacklsolutions.com with the subject "Data Rights Request". You also have the right to lodge a complaint with Integritetsskyddsmyndigheten (IMY) in Sweden.
12. Children
Our services are intended for business users. We do not knowingly collect data from children.
13. Third-party links
Our website may contain links or embeds to third-party sites and services. Their privacy practices are governed by their own policies.
14. Data Processing Agreement (DPA) for clients
For clients who engage us as a processor of personal data on their behalf, a GDPR-compliant Data Processing Agreement is available upon request and will govern such processing.
15. Changes to this Policy
We may update this Policy from time to time. The revised version will be posted with an updated Effective Date. Material changes will be highlighted where appropriate.
16. Contact
TACKL Solutions
Email: Contact@tacklsolutions.com
If you are contacting us about data rights, please include sufficient information to identify you and your request.