Privacy policy

Bliqat Software Labs AB is the data controller for the processing of personal data about you as a user of our website and service.

For personal data that you as a customer put into the service — for example data about your own end customers — you are the data controller and Bliqat is the data processor. That processing is governed by a separate data processing agreement.

You own all data you put into the service ("Customer Data"). Bliqat acquires no rights to Customer Data beyond what is required to provide the service.

Bliqat may process Customer Data in order to provide the service, give support, troubleshoot, monitor security and invoice.

Bliqat may use Customer Data to improve the service, including AI features, provided that the data is anonymised or aggregated so that it cannot be linked to an identified person — or that you have given separate and explicit consent.

Personal data is never processed to train general AI models without anonymisation or a legal basis under the GDPR.

You may at any time request in writing that your identifiable Customer Data is not used for further development of the service. Such a request does not affect models already trained or data that can no longer be linked to you.

Bliqat uses external providers for AI, operations, infrastructure, payment, communication and analytics — for example Anthropic, Google, cloud providers and payment providers.

A current list of material sub-processors is made available on request. Bliqat will notify you at least 30 days before a new sub-processor that processes personal data on your behalf is added.

All data processing at external providers takes place under contract and applicable data protection law. Data is stored within the EU/EEA unless expressly stated otherwise.

Bliqat applies appropriate technical and organisational security measures to protect your data, including encryption in transit and at rest, access control, logging, regular backups and incident handling procedures.

In the event of a personal data breach that risks affecting your rights, we will notify the data subjects concerned without undue delay.

Account data and Customer Data are kept for the term of the agreement and for 60 days thereafter, after which they are deleted unless longer storage is required by law — for example the Swedish Accounting Act (7 years).

Anonymised and aggregated data may be kept without time limit in order to improve the service.

You have the right to request access to, rectification of or erasure of your personal data, and to restrict or object to the processing.

You have the right to data portability — to receive your data in a machine-readable format.

Where the processing is based on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing carried out before then.

You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at www.imy.se.

Bliqat uses only necessary and functional cookies so that the service works. We use no cookies for analytics, marketing or third-party tracking — which is why no separate cookie banner is needed.

Necessary cookies handle sign-in and session (Clerk and Supabase). One functional cookie (bliqat_nav_pos) stores your choice of navigation layout for up to a year. We also store locally in your browser which notifications you have already read, so they are not shown again.

Because these cookies are necessary for the service to work, no consent is required by law — but you can always delete them through your browser.

We may update this policy. Material changes are communicated by email or clearly within the service at least 30 days before they take effect.