policy · gdpr
Privacy policy.
How we collect, store and process personal data. Last updated: October 2025.
Data controller.
InnerState AB is the data controller for the processing of your personal data. You can reach us at info@innerstate.ai.
What data we collect.
When you contact us via a form, email or phone we may store the following:
- Name and company name
- Email address and phone number
- The content of messages you send
- Information you provide about your business
When you use Aioos or Bizflow, product-specific data is also stored — call history, invoices, customer details — in accordance with our agreement with you.
Why we process the data.
- To answer enquiries and book meetings
- To deliver and improve our services
- To invoice and fulfil agreements
- To meet legal obligations (accounting, tax)
How long we keep the data.
Contact details are kept as long as there is an active business relationship or interest, or as long as the law requires. Accounting records are kept for seven years under the Swedish Accounting Act.
Who we share data with.
We never sell your data. We share it only with processors needed to deliver the services — for example server providers, email systems and payment providers — always with a data processing agreement in place.
Your rights.
Under the GDPR you have the right to:
- Be told what data we hold about you
- Request correction of inaccurate data
- Request erasure ("the right to be forgotten")
- Restrict or object to processing
- Receive your data in a portable format
- Complain to the Swedish Authority for Privacy Protection (IMY)
Cookies.
We only use cookies that are necessary for the website to work. We do not use tracking cookies without your consent.
Security.
Your data is stored encrypted on secure Swedish servers. We comply with the GDPR and Swedish law, and update our security routines continuously.
Contact us about the policy.
Questions about this policy or how we handle your data: info@innerstate.ai