Who we are and scope
Fidrel AB, a Swedish company identified in the company details below, operates fidrel.com and the Fidrel service and is responsible for website inquiries, accounts, security and its own customer relationships. For project content that a customer controls, the customer decides how it is used, and Fidrel processes it on the customer’s behalf as a service provider under the customer agreement; contact the project owner first about that content. As a company established in Sweden, Fidrel also complies with the EU General Data Protection Regulation (GDPR).
Information we collect and sources
From you: name, email address, professional role, organization, inquiries and quote details. From your organization: an administrator may invite you and assign your role. From your use of the service: documents, versions, metadata, reviews, comments and activity in projects. From payments: subscription, billing references and payment status, not full card numbers. Automatically: IP address, browser and device details, and security and error logs. From sign-in providers: the details described below.
How we use information
To provide, secure and support the service; create and manage accounts; process orders, payments and renewals; answer inquiries; detect and prevent fraud, abuse and security incidents; keep tax and accounting records and meet other legal obligations; and maintain and improve the service. Any optional tracking requires your choice in Cookie settings.
Who receives information
Authorized project members see content under the project’s rules. Our service providers are OVHcloud (servers in London, United Kingdom) and Cloudflare for hosting and delivery; Supabase for the database, authentication, document storage and authentication emails; and Stripe for payments when its checkout is used. Stripe may also use information for its own legal obligations. We disclose information to authorities when the law requires it, and to a successor if Fidrel’s business is reorganized, merged or sold, subject to this notice. Resend sends the service’s email, such as invitations, notifications and invoices. Google provides reCAPTCHA on the website’s forms. Map images come from OpenFreeMap and Esri, and a project’s address is sent to Komoot’s address search (Photon) when the project is placed on the map. Fidrel AI is described in its own section.
Where information is processed
Fidrel is based in Sweden, and our providers may process information in the EU/EEA, the United States and other countries. We do not promise processing in any single country. Where the law requires it, transfers are protected by safeguards such as standard contractual clauses. You may ask us which recipients and safeguards apply. The database and documents are stored with Supabase in Stockholm, Sweden.
Retention
Account information is kept while the account is in use; project content and versions follow the agreed project and retention periods. The recycle bin is not immediate deletion. Inquiries are kept for as long as they need handling and for potential legal claims; tax and accounting records are kept for the period the law requires. Documents and folders in the recycle bin are deleted permanently after 30 days, as are schedules, unapproved estimates and supplier invoices in the bin; uploads that are never completed are moved there after one day. Fidrel AI conversations and drafts are deleted 180 days after they were last used, technical logs of AI calls after 30 days, and records of AI usage without content after 400 days. Invitations are valid for 7 days. Database backups are kept for 7 days and then overwritten.
Your privacy rights
Depending on where you live, you may have the right to know what personal information we hold and to access it, to correct it, to delete it, to receive a portable copy, to opt out of its sale or sharing, targeted advertising and profiling, and to limit the use of sensitive personal information. We will not discriminate against you for using these rights, for example by charging a different price or providing a lower quality of service. We verify requests by matching them to your account email, and we may ask for more information when needed. We respond within one month and, if a request is complex, tell you within that time if we need up to 45 more days.
Sign-in with Google, Microsoft or Facebook and deleting your data
If you sign in with Google, Microsoft or Facebook, we receive your name, email address and, where available, profile picture from that service. We use them only to create and recognize your account, never post anything on your behalf and do not read your contacts. You can disconnect the service under Settings in Fidrel or remove Fidrel in the service’s own app settings. To delete your account and personal information, choose Request account closure under Settings, or email [email protected] from your account’s address with the subject “Delete my data”. We confirm the request and delete the account data without undue delay, normally within one month, except what the law requires us to keep, such as tax and accounting records. Content in a customer’s project is handled under that customer’s agreement.
Fidrel AI
When you use Fidrel AI, your question, earlier messages in the same conversation, the page you are on and the project information the assistant reads to answer are sent to OpenAI, which processes them as our subprocessor. The assistant reads only what you yourself have access to, and files or images you attach. Project information may include the names of people on the project. Your name and email address are not sent; OpenAI receives a code that cannot be linked to you without our records. OpenAI does not use the information to train its models and keeps it for up to 30 days to detect abuse. OpenAI may process the information in the United States under our data processing agreement with OpenAI. Your conversations are stored in Fidrel, visible only to you, and deleted after 180 days without activity. The project’s administrator can turn Fidrel AI off for the project. Answers can contain mistakes: check what matters. If you ask Fidrel AI to read a supplier invoice, its contents are sent in the same way.
U.S. state privacy disclosures
This section applies to residents of California (under the CCPA as amended by the CPRA) and of other states with comprehensive privacy laws, to the extent those laws apply to Fidrel. In the past 12 months we collected these categories: identifiers (name, email, IP address); customer records (billing details); commercial information (subscriptions and payments); internet or other electronic network activity (logs and usage within the service); professional information (role and organization); and sensitive personal information limited to account login credentials. Sources and business purposes are described above, and retention under Retention. We disclose these categories only to the service providers and recipients listed above, for those purposes. We do not sell personal information, do not share it for cross-context behavioral advertising, do not use it for targeted advertising or for profiling with legal or similarly significant effects, and have not done so in the past 12 months. We do not knowingly sell or share information of anyone under 16. We use sensitive personal information only to provide and secure the service, as the law permits, and not to infer characteristics about you. We honor Global Privacy Control signals as a valid opt-out of sale and sharing. We do not disclose personal information to third parties for their own direct marketing.
How to make a request or appeal
Use Settings in Fidrel, including Request account closure to delete your account, or email [email protected] with the subject “Privacy request”. An authorized agent may submit a request with your signed permission; we may ask you to confirm your identity and the permission directly with us. If we decline your request, you can appeal by replying to our decision or by emailing [email protected] with the subject “Privacy appeal”; we will answer within the time your state’s law requires, and if we deny the appeal you may contact your state attorney general.
Security, children and changes
Access controls and encrypted connections protect the service, although no system is completely secure. The app does not make solely automated decisions with legal or similarly significant effects. Fidrel is a professional service and is not directed to children; we do not knowingly collect personal information from children under 13. We will post changes to this notice here and notify account holders of material changes.
Newsletters
Newsletters are planned. A subscription requires a separate, voluntary signup explaining email use and how to unsubscribe. Accepting cookies does not subscribe you.
Read the provider’s information
Contact and company details
- Company name
- Fidrel AB
- Registration number
- 559556-3593
- EU VAT ID
- SE559556359301
- Mailing address
- Paviljongvägen 2 132 40 Stockholm
- [email protected]