Privacy
Privacy policy
How Pertento AB handles personal data about visitors to this website, people who contact us, and users of the platform and their billing contacts, and what you can ask us to do about it.
Effective 12 October 2026
1Who we are
1.1Pertento AB, Karlavägen 86, Stockholm, Sweden (“Pertento”, “we”) is the controller for the personal data described in this policy. Contact: hello@pertento.ai.
2Scope
2.1This policy covers personal data about visitors to pertento.ai, people who contact us or request a demo, and users of the Pertento platform and their organisations’ billing contacts.
2.2It does not cover data about visitors to our customers’ websites. For that data, the customer is the controller and Pertento is a processor under our Data Processing Agreement (pertento.ai/dpa). Visitors to those websites should read the website owner’s privacy policy.
3Personal data we process
| Category | Examples | Source |
|---|---|---|
| Contact and form data | Name, email, company, company size, role, message, and the campaign and referring site you arrived from, where present | You, through forms and demo requests |
| Account data | Name, email, role in the account, login and security events | You or your organisation |
| Billing data | Billing name, email, billing address, company name, VAT ID, plan, subscription status, invoices, card brand and last four digits | Polar, or you for invoice customers |
| Usage data | Session counts per account, feature use, AI credit use, notices sent | Generated by the platform |
| Support data | Emails and messages to us and our replies | You |
| Integration data | For connected tools such as Google Analytics 4: account ID, property, audiences and event data used to evaluate experiments | The connected tool, on your instruction |
| Website data | Pages visited on pertento.ai, browser and device type | Your browser |
3.1We do not receive full card numbers. Polar and its payment processors handle them.
4Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering enquiries and demo requests | Steps before a contract, or legitimate interest in responding |
| Providing the platform and administering accounts | Performance of contract |
| Metering Sessions and AI credits, sending usage notices, managing plans, trials and plan moves | Performance of contract |
| Billing, invoicing and collecting payment from invoice customers | Performance of contract |
| Detecting artificial traffic, fraud and abuse, and securing the platform | Legitimate interest in protecting the service and accurate billing |
| Bookkeeping, tax and other legal duties | Legal obligation |
| Product marketing to existing business customers | Legitimate interest, with a right to object at any time |
| Other marketing | Consent, which you may withdraw at any time |
| Improving the platform with anonymised data | Legitimate interest. Anonymised data is no longer personal data |
5Payments and Polar
5.1Paid plans and credit packs paid by card, Apple Pay or Google Pay are sold through Polar Software Inc., 3500 South DuPont Highway, Dover, DE 19901, USA (“Polar”) as merchant of record. Polar collects the payment, issues receipts and invoices, and handles VAT, refunds and payment disputes.
5.2Polar is an independent controller for the personal data it collects at checkout and in its customer portal, including payment details. Polar uses Stripe, Inc. as its payment processor. Polar’s privacy policy applies to that processing: polar.sh/legal/privacy-policy.
5.3Polar shares with us the billing data listed in section 3 so that we can link the subscription to your account, provide the plan and keep our accounts. We process that data as controller under this policy.
5.4For invoice customers, Pertento issues invoices directly and processes billing data itself.
6Recipients
| Recipient | Role | Purpose | Location |
|---|---|---|---|
| Polar Software Inc. | Independent controller | Merchant of record: checkout, payment, invoices, VAT, refunds, fraud checks | United States |
| Stripe, Inc. | Polar’s payment processor | Card and wallet payments | United States |
| Anthropic, PBC | Processor | AI features, only when switched on by the customer | United States |
| Hosting and IT service providers | Processors | Hosting and operating the website and platform | EEA |
| Email delivery providers | Processors | Sending account, usage and billing emails | EEA or with transfer safeguards |
| Pipedrive OÜ | Processor | Managing demo requests, enquiries and customer relationships | EEA or with transfer safeguards |
| Accountants and auditors | Independent controllers | Bookkeeping and audit | Sweden |
| Authorities | Independent controllers | Only where the law requires disclosure | As applicable |
| Acquirer or successor | Controller | Merger, acquisition or asset sale | As applicable |
6.1We do not sell personal data and do not share it for cross-context behavioural advertising.
7International transfers
7.1We store personal data in the EEA. Some recipients in section 6 are in the United States.
7.2Transfers to the United States rely on the EU-US Data Privacy Framework where the recipient is certified, and otherwise on the EU standard contractual clauses (Decision (EU) 2021/914). You can ask us for a copy of the relevant safeguards.
8Retention
| Data | Kept for |
|---|---|
| Contact and form data (no account) | Up to 24 months after the last contact |
| Account data | While the account exists, including while read-only, then deleted within 90 days of termination |
| Billing data and accounting records | 7 years after the end of the financial year, as required by the Swedish Bookkeeping Act (bokföringslagen) |
| Usage data | While the account exists. Session counts linked to invoices are kept as accounting records |
| Support data | Up to 24 months after the case is closed |
| Security logs | Up to 12 months |
| Marketing preferences and objections | As long as needed to respect them |
8.1Data may be kept longer where the law requires it or to establish, exercise or defend legal claims.
9Cookies and local storage on pertento.ai
9.1pertento.ai sets no cookies for tracking or advertising and shows no cookie banner. We measure the site with Umami, an analytics tool we host ourselves, and test it with Pertento’s own script. Both are cookieless and neither stores IP addresses.
9.2The site uses your browser’s storage for two things. It remembers the language you chose, so pages that exist only in English can return you to it. And if you arrive from an ad or campaign link, it keeps that link’s campaign identifiers (such as gclid and utm parameters) and the address of the site that sent you until you close the tab, so a demo or contact request you send can say which campaign brought you. They reach us only if you submit a form.
9.3The platform at app.pertento.ai uses cookies or local storage only where strictly necessary for sign-in, security and remembering your settings.
10Your rights
10.1You have the right to access, rectify and erase your personal data, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time.
10.2You may object at any time to processing based on legitimate interest, including direct marketing.
10.3We reply within one month. Complex requests may take up to two more months, and we will tell you if so.
10.4For data held by Polar as controller, contact Polar directly. We will help forward requests where we can.
10.5You may complain to the Swedish Authority for Privacy Protection (IMY) or to the supervisory authority where you live or work.
11Security
11.1We protect personal data with technical and organisational measures appropriate to the risk, including encryption in transit, access control on a need-to-know basis, and logging of access to production systems.
12Children
12.1Pertento is a service for businesses and is not directed at children. We do not knowingly collect personal data from children.
13California residents
13.1California residents have the right to know, delete and correct their personal information and not to be discriminated against for exercising these rights. We have not sold personal information or shared it for cross-context behavioural advertising in the past 12 months. To make a request, email hello@pertento.ai.
14Changes
14.1We may update this policy. We will notify account Owners of material changes by email at least 30 days before they take effect, and show the effective date at the top.
15Contact
15.1Pertento AB, Karlavägen 86, Stockholm, Sweden. Email: hello@pertento.ai.