Privacy Policy

Last updated: March 21, 2026

1. Data Controller

Tingsteq Solutions AB ("we", "us") is the data controller for the processing of your personal data in connection with the GrönKoll service.

Contact: info@tingsteqsolutions.com

2. What Data We Collect

  • Account information: Email address and name upon registration (via Clerk).
  • Scan data: The URLs you scan and the results from the analysis.
  • Technical data: IP address, browser type, and device information to ensure service functionality.
  • Cookies: Necessary cookies for authentication and session management.

3. How We Use Your Data

  • Provide and improve the GrönKoll service.
  • Manage your account and authentication.
  • Save your scan results so you can access them again.
  • Communicate with you about the service (e.g., important updates).

4. Legal Basis

We process your personal data based on:

  • Contract: To provide the service you have registered for (Art. 6.1.b GDPR).
  • Legitimate interest: To improve and ensure the security of the service (Art. 6.1.f GDPR).
  • Consent: For marketing, if you have chosen to subscribe (Art. 6.1.a GDPR).

5. Sharing with Third Parties

We share your data with the following service providers needed to operate GrönKoll:

  • Clerk — Authentication and account management.
  • Vercel — Hosting and server infrastructure.
  • Anthropic (Claude AI) — AI analysis of website environmental claims. Content that is scanned is sent to Anthropic's API for analysis.
  • Stripe — Payment processing (if applicable).

We never sell your personal data to third parties.

6. Data Storage and Security

Your data is stored within the EU/EEA where possible. Some service providers (Clerk, Anthropic, Vercel) may process data in the USA under adequate protection mechanisms (EU-US Data Privacy Framework or Standard Contractual Clauses).

We retain your data as long as your account is active or as long as required to fulfill our legal obligations.

7. Your Rights

Under GDPR, you have the right to:

  • Request access to your personal data.
  • Request correction of inaccurate data.
  • Request deletion of your data ("right to be forgotten").
  • Object to processing based on legitimate interest.
  • Request data portability.
  • File a complaint with the Swedish Data Protection Authority (IMY).

Contact us at to exercise your rights.info@tingsteqsolutions.com

8. Changes

We may update this policy. Material changes will be notified via email or in the service. Continued use after changes constitutes acceptance.