Privacy policy

Who is responsible for your data?

The data controller is Oblinit aktiebolag (Swedish reg. no. 559155-6609), which operates Bokly. If you have questions, reach us at hej@bokly.ai.

What data do we collect?

When you join the waitlist we store your email address, which form the signup came from and the time of the signup. If you arrived via a campaign link — for example an email from us — we also store the link’s campaign tag, so we know which message brought you here. Nothing more.

The contact form

If you submit the contact form we process your name, email address, your message and whatever you choose to add – phone number and company. We do not store it in a database: it is emailed to hej@bokly.ai and then lives in our inbox for as long as we need it to answer you. The processing is based on your consent (article 6.1 a GDPR) and you can ask us to delete the message at any time.

Why, and on what legal basis?

We use your email address to get in touch about Bokly, when the service is ready for you and for occasional launch updates. The processing is based on your consent (Article 6(1)(a) GDPR): you choose to sign up, and you can withdraw at any time by emailing us.

How long do we keep the data?

Until the waitlist has served its purpose after launch, or until you ask us to remove you, at most 24 months after your signup.

Website analytics

To understand how the start page is used we measure anonymous visitor statistics via PostHog (EU-hosted). This is done without cookies and without building any profile of you. So that a visit can be read as one coherent visit, a temporary, randomised visit identifier is stored in your browser session storage; it is deleted when you close the tab and is never linked to you as a person.

We also record anonymised sessions of how the page is used — how far people scroll, what they click and where the visit ends. Anything you type into form fields is masked and never stored. The recordings are analysed automatically to find obstacles on the page.

Who do we share the data with?

We never sell your data and never share it for marketing. Your signup is stored in our database at Supabase, the website is hosted via Vercel, and anonymous visitor statistics and anonymised session recording are handled via PostHog within the EU. Beyond that, the data is only processed by the providers required to run the service. Processing takes place within the EU/EEA, or with providers that offer equivalent protection under the GDPR (e.g. the EU Standard Contractual Clauses).

Your rights

You have the right to access, rectify and erase your data, to object to or restrict the processing, and to data portability. Email us and we will help you. You can also lodge a complaint with the Swedish Authority for Privacy Protection (imy.se).

Contact

Questions about this policy or your data? Email hej@bokly.ai.