Privacy policy

Frälse AB, Mellangatan 1, 212 18 Malmö, Sweden, is the controller for personal data described in this policy. Contact privacy@fralsewines.com with questions or requests.

• Product and review information entered in the beta form.
• Label artwork, specifications, safety reports, efficacy evidence and other files you choose to submit.
• Review settings, extracted product facts, findings and reports.
• Support communications, audit events, IP address, browser and security logs.

We process data to create and deliver reviews, secure the service, answer support requests, maintain source and audit records, improve review quality and comply with legal duties.

• Contract, to provide the review you request.
• Legitimate interests, to secure and improve a business service and respond to enquiries.
• Legal obligation, for accounting, tax and lawful authority requests.
• Consent, where we specifically ask for it.

Submitted files may be processed by machine-learning models to read layout, extract structured facts and draft explanations. Automated output is constrained by a versioned rule system and is not used by itself to make a legal or similarly significant decision about a person.

We do not use customer uploads to train a general-purpose model. Providers process content only to deliver the contracted service.

We use selected providers for hosting, document processing, AI inference, email and operational monitoring. The beta review is hosted on Vercel and uses AI models routed through Vercel AI Gateway. Beta files are temporarily staged in private, request-specific Supabase storage and deleted after the review. The report without the original files can be saved to an account when the user chooses. New reports retain protected previews and image evidence rendered from the original. Images follow report access and deletion; explicit sharing includes them. Failed deletions are queued for retry. Revocation stops new downloads but cannot recall previously downloaded copies. Saved supplements contain producer answers, assessments, relevant text excerpts and file checksums. These accompany the report when shared or exported. Retrieved public website information is saved with its source and check date. Supplemental files are deleted after reassessment is saved; interrupted attempts may retain files for retry.

Providers act under contract and may only process data for the service they supply.

We prefer EU processing where available. If a provider processes personal data outside the EEA, we use an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism, together with appropriate safeguards.

Beta uploads are held only while the review request is processed and are then deleted. An unsaved report can be linked to an account for seven days. Reports saved to an account remain until the user deletes them. Share links expire after 30 days. Infrastructure and AI providers may retain limited request data according to their security and abuse-prevention terms. Operational logs are kept only as long as needed for security and troubleshooting.

Measures include encrypted transport, server-side AI credentials, request-size and file-type validation, and controlled access to the service. Please do not send sensitive product material by ordinary email unless agreed with us.

Depending on the circumstances, you may request access, correction, deletion, restriction, portability or object to processing. You may withdraw consent at any time. Contact us to exercise a right. You may also complain to Integritetsskyddsmyndigheten, the Swedish Authority for Privacy Protection.

privacy@fralsewines.com

Frälse AB
Mellangatan 1
212 18 Malmö
Sweden