Privacy Policy – SquareVerse
Last updated: 2026-10-22
SquareVerse (squareversegroup.com) is operated by SquareVerse Group AB
(“we”, “us”). This policy covers all services the company operates on
squareversegroup.com and its subdomains. We process personal data in accordance
with the EU General Data Protection Regulation (GDPR).
1. Data controller
SquareVerse Group AB
Company reg. no.: 559341-1829
Address: Pastor Ödmans väg 46, 13460 Ingarö, Sweden
Privacy contact:
integritet@squareversegroup.com
2. What data we process
- Contact details: name, email address and, if you provide them, phone number and company name. This comes from forms, email or chat.
- Content: what you write to us in forms, email, chat or SMS.
- Campaign data: which ad or link you came from (UTM parameters). If you have consented, we also store Google’s click ID (
gclid) when you have clicked a Google ad. - Technical data: IP address and browser information in security and operations logs.
- Customer and payment data: subscription and transactions. Card details are handled by Stripe and never reach our servers.
We use no third-party cookies. Campaign data is kept temporarily in your browser
(sessionStorage) during your visit and is deleted when you close the tab.
Google’s click ID is stored and used only if you have said yes in the consent box.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Answering your enquiry and sending the offer you asked for | Steps prior to entering into a contract / legitimate interest |
| Delivering the service, support and invoicing | Contract. Swedish Bookkeeping Act for payment records. |
| Seeing which campaign you came from (UTM) | Legitimate interest |
Reporting a purchase back to Google Ads (gclid) | Consent |
| Security, troubleshooting and operations | Legitimate interest |
| Follow-up offers to businesses (B2B) | Legitimate interest. You can opt out at any time by replying “no thanks” to the email. |
Some answers and analyses in our services are drafted with the help of AI services. No decisions with legal or similarly significant effect are made automatically. We only use AI providers that do not train their models on the data we send them.
4. Google APIs
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use the Google Ads API only to manage and analyse our own advertising accounts. Data obtained from it is not sold and is not disclosed to others.
5. Retention
- Leads that did not become customers: deleted automatically 12 months after the last contact, or earlier if you ask.
- Customer data: for as long as the customer relationship lasts. Accounting records are kept for 7 years under the Swedish Bookkeeping Act.
- Security logs: deleted automatically after at most 90 days.
- Backups: encrypted and rotated. Deleted data disappears from them within 12 months.
6. Recipients and sub-processors
Our own systems run on the company’s server in Sweden. We share necessary data with:
| Provider | Purpose | Location and safeguard |
|---|---|---|
| Google (Firebase / Google Cloud) | Web hosting, authentication and database | EU / US (DPF) |
| Google Ads | Advertising and conversion measurement (only with consent) | EU / US (DPF) |
| Cloudflare | DNS, security, CDN, form intake and email forwarding | Global / US (DPF) |
| Stripe | Payments | EU / US (DPF) |
| Resend | Email delivery | US (SCC) |
| OpenRouter and selected AI providers | Drafting and processing replies | US (SCC) |
| 46elks | SMS and telephony | Sweden |
| Meta (WhatsApp) / Telegram | Customer chat, only if you contact us that way yourself | Global (DPF / SCC) |
For transfers outside the EU/EEA we rely on the EU–U.S. Data Privacy Framework (DPF) where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses (SCC).
7. Your rights
You have the right to access your personal data, have it corrected or erased, object to processing, request restriction of processing, and receive your data in a machine-readable format (data portability).
Email integritet@squareversegroup.com from the address the matter concerns and we will help you within 30 days. You can also lodge a complaint with the Swedish Authority for Privacy Protection, IMY (imy.se).
8. Changes
We update this policy when our processing or services change. The date at the top shows the latest version.