LEGAL

Privacy policy

Last updated: 25 August 2026

Who is responsible

CardWithAI is developed and operated by A-Hedin Konsulter in Sweden. A-Hedin Konsulter is responsible for the personal data described in this policy.

Information you provide

When you use the contact form, we process your name, email address, company if supplied, areas of interest and the content of your message. If you become a customer, we also process the professional information and content needed to create, review and operate your card. The card owner decides which approved professional information is made public.

AI questions and security data

Questions submitted to a live AI card are processed to generate a response. Visitors should not submit personal, confidential, medical, financial or otherwise sensitive information. Technical information such as timestamps, usage counts and security events may be processed to prevent misuse and maintain the service.

Why we process information

We process enquiry and onboarding information to respond to you, take steps you request before an agreement and provide the service. We also have a legitimate interest in protecting, operating and improving CardWithAI, and may process information when needed to meet legal obligations.

How long information is kept

Ordinary enquiries that do not lead to a customer relationship are normally deleted within 12 months. Customer and accounting information may be kept longer when needed to provide the service, document agreements or comply with law. Our form delivery provider states that form submissions are retained for up to 30 days.

Service providers and international transfers

We use providers for website hosting and security, form delivery, email and AI processing. These providers receive only the information needed for their function. Some processing may take place outside the European Economic Area; where required, we rely on recognised transfer mechanisms and appropriate safeguards.

Cookies and analytics

The public site does not currently use advertising or behavioural analytics cookies. Essential security or infrastructure functions may still be used to deliver and protect the site. If we add optional analytics or marketing technology later, we will update this policy and request consent where required.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal data, and object to certain processing. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Contact

Use our contact form and write “Privacy request” in your message. We will route the request to the person responsible for privacy matters.