Contact us

Konvyra Privacy Policy

Last updated: 31 October 2026

This policy explains how Stääv & Wollter Affärsutveckling Handelsbolag ("we") processes personal data when you visit konvyra.com, contact us, or are a contact person at a customer or reseller. The Swedish version is a translation for convenience; if the two differ, the English version prevails.

1. Who is responsible

The controller is Stääv & Wollter Affärsutveckling Handelsbolag, org. no. 969775-6808, Snapphanens Väg 38, 235 43 Vellinge, Sweden. Contact for all privacy questions: sales@konvyra.com.

2. What this policy covers, and what it does not

This policy covers personal data that we process for our own purposes, as controller: website visits, enquiries, and contact and invoicing data for customers and resellers.

It does not cover the personal data that our customers put into Konvyra about their own leads, prospects, customers and users. For that data the customer is the controller and we are the processor under our data processing agreement. If we hold data about you in a customer's Konvyra instance, contact that customer.

3. The website

The marketing pages are static; the public demo is an interactive application. We have not added analytics, advertising, social media plug-ins, embedded third-party content or third-party scripts to the current pages. Fonts and images are served from our own site. The current pages use a script for the navigation menu and, on the quote page, a script that assembles an email.

Cookies. The site is delivered through Cloudflare, which sets the technical security cookie __cf_bm to tell human visitors from bots. It is set by Cloudflare, is HttpOnly, expires after about 30 minutes, and we do not use it to track you. We use it because it is needed to protect the site.

Server data. When you open a page, the hosting provider and Cloudflare process technical data about the request, such as IP address, time, requested page and browser type, to deliver the site and protect it from misuse. Our legal basis is our legitimate interest in a secure and working website (GDPR article 6(1)(f)). The providers keep technical request logs for security and operation under their own terms; we do not use them to track visitors.

Public demo AI. The AI chat at konvyra.com/demo/ is for the public demo only; it is not a description of the AI setup in a purchased Konvyra product. If you type a question, our site relay sends it, the selected language and a summary of the fictional demo data to OpenRouter, which sends the request to a model provider. Do not enter personal or confidential information. Suggested questions are answered from the demo data in your browser.

The relay code does not store or log the question, demo summary or answer. Hosting and network providers may keep request logs; their retention for this demo has not been confirmed. To limit misuse, the relay keeps request timestamps and the IP address provided by the hosting platform in temporary process memory. It counts recent requests within one- and ten-minute windows; inactive entries may remain until the process is recycled or its map is cleared, so there is no fixed retention time. OpenRouter and the selected model provider may retain or use inputs and outputs under their own settings and policies; the account's logging and training settings and provider retention have not been verified. See OpenRouter's privacy policy.

4. Quote and reseller enquiries

The quote form and the reseller application do not send anything to a server. When you press the button or link, your own mail program opens with a prepared email to sales@konvyra.com, and nothing is sent until you send it. We therefore receive only what you choose to send, and we handle the email as a sales enquiry. Your own email provider handles the message under its own policy.

  • Data: your name, company, country, role, email address and phone number if you give them, and what you tell us about your needs (for example number of users, requirements and wishes on start).
  • Purpose: to answer your enquiry, prepare a quote and, if you ask, have a discussion about a reseller relationship.
  • Legal basis: our legitimate interest in answering business enquiries (article 6(1)(f)); where you are yourself the prospective contracting party, for example a sole trader, steps at your request before a contract (article 6(1)(b)).
  • Retention: Enquiries that do not lead to an agreement are kept for 24 months after the last contact and then deleted. If an agreement follows, see section 5.

We use the contact details in an enquiry to deal with that enquiry and follow up on it. We do not add you to a mailing list without your consent.

5. Customers, resellers and their contact persons

  • Data: contact persons' name, title, employer, email address and phone number; order, quote and invoicing data; and our correspondence with you, such as support.
  • Purpose: to enter into and fulfil agreements, manage the customer relationship, invoice and give support.
  • Legal basis: performance of a contract (article 6(1)(b)), only where the individual is the contracting party, for example a sole trader; legal obligations such as bookkeeping (article 6(1)(c)); and our legitimate interest in managing business relationships with employees and other representatives of corporate customers and resellers (article 6(1)(f)).
  • Retention: during the customer relationship and as long after as we need to handle claims. Accounting records are kept for seven years after the end of the financial year, as the Swedish Bookkeeping Act requires.

We also process data to establish, exercise or defend legal claims, based on our legitimate interest (article 6(1)(f)).

6. Who receives personal data

We do not sell personal data. We use these providers, who process personal data on our behalf:

  • Cloudflare: network, security and domain for the website and the service;
  • OpenAI: hosting of the website via ChatGPT Sites;
  • Google Workspace: email to sales@konvyra.com.

For the public demo AI, OpenRouter and the selected model provider receive the data described in section 3.

We disclose personal data to authorities and courts when the law requires it.

7. Transfers outside the EU/EEA

Some of these providers are established in or process data in the US or other countries outside the EU/EEA. When personal data is transferred to such a country, we rely on the transfer mechanism under Chapter V of the GDPR that applies to the provider concerned.

8. Your rights

You have the right to:

  • access the personal data we hold about you, and to get a copy;
  • have incorrect data corrected;
  • have data erased, in the cases the GDPR provides;
  • have processing restricted;
  • object to processing that is based on our legitimate interest;
  • receive the data you gave us in a structured, commonly used format (data portability), where processing is based on a contract.

Write to sales@konvyra.com to use these rights. We answer within one month. You also have the right to complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY, imy.se), or to your national data protection authority.

9. Providing data, automated decisions, security

You decide yourself what you send us. If you do not give us the data we need for a quote or an agreement, we may not be able to handle your enquiry. We make no decisions about you by automated means, and we do not profile you.

We protect personal data with technical and organisational measures that suit the risk, and limit access to those who need it.

10. Changes

We may update this policy. The date at the top shows when it was last changed. We state material changes on this page.