Privacy policy

Data controller

Astrevi AB, Swedish company registration number 559496-8827, Stockholm, is the controller for processing on astrevi.com. Contact us at contact@astrevi.com with questions about this policy or to exercise your rights.

Information you provide

When you submit a contact form we process your name, email address, company name if given, and whatever you write in the message. It is used solely to answer your enquiry and for any continued discussion about a project.

If you book a meeting you provide your name, email address and chosen time. Bookings are handled in Cal.com, our scheduling provider.

The legal basis is legitimate interest: you contacted us and expect a reply. Data is kept while the conversation is active and then for at most 24 months, unless needed for a contract or under accounting law.

Cookies and measurement

We use cookies to measure how our ads perform. None of it loads or is set until you actively agree in the banner shown on your first visit. If you choose necessary only, no measurement tools load at all and the site works exactly as normal.

If you agree, three tools are used: Google Tag Manager, which governs which measurement tags run, Google Ads, which records whether an ad click led to an enquiry, and the ChatGPT Ads pixel from OpenAI, which does the same for ads inside ChatGPT.

If you submit the form after agreeing to measurement, your email address and name are passed to OpenAI in encrypted form. They are turned into an unreadable digest with SHA-256 directly in your browser, so neither we nor OpenAI transmit the address in plain text. The digest is used only to match your enquiry to an ad click.

The legal basis for measurement is your consent. You can change your mind at any time by clearing site data in your browser, after which you will be asked again.

Who we share data with

We never sell personal data. We use the following providers, who process data on our behalf: Vercel for hosting, Cal.com for scheduling, our email provider for messages from the contact form, and Google and OpenAI for ad measurement if you have agreed to it.

Several of these are US companies, which means data may be processed outside the EU and EEA. Transfers are made with the safeguards the GDPR requires, normally the European Commission's standard contractual clauses.

Your rights

You have the right to know what data we hold about you, to have it corrected or erased, to object to processing and to request that it be restricted. Where processing rests on consent, you may withdraw it at any time.

Write to contact@astrevi.com and we will handle the request. If you are unhappy with how we process your data you can complain to the Swedish Authority for Privacy Protection, imy.se.