Privacy
Privacy policy for Datoden
This policy describes which personal data we process when you use Datoden, why we do it and what rights you have. It applies from 2026-10-12. The Swedish version is the legally binding one.
1. Who is responsible
Responsit AB, company reg. no. 559151-5084, Linnégatan 29, 216 14 Limhamn, is the data controller for the processing described here. Send questions about personal data to hello@datoden.com.
2. What data we process
- Account details: name, email address, company name and your password (stored as an encrypted hash, never in plain text).
- Usage and security: when you log in and were last active, IP address, browser and technical logs.
- Content in account apps: what you enter and save in apps that store data in your account. It may contain personal data about others.
- Purchases: which passes and subscriptions you have, amounts and dates. Card details are handled by Stripe – we never see them.
- Connected WordPress websites (DT plugins): if you connect a website to your account – the website address and the names and versions of its DT plugins, sent once a day. Website monitoring then visits the website every five minutes and stores the result (status, response time and the expiry dates of the SSL certificate and the domain); alerts about the events you have chosen are sent to your email address. Nothing is sent before you connect, and you can disconnect at any time. The Pro versions of the DT plugins also send the website address, a random website id and which Pro plugins are installed (no personal data) – even when the website is not connected – so that the licence can be checked.
- Contact with us: what you write to us, for example support requests and withdrawal requests.
- Browser apps: files are processed in your browser and are not uploaded. For the free limit we only store times linked to a random id and an encrypted hash of your network.
3. Why we process the data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Creating and managing your account and providing the services | Contract |
| Charging, sending receipts and bookkeeping | Contract and legal obligation (Swedish Accounting Act) |
| Protecting the service, preventing abuse and enforcing the free limits | Legitimate interest |
| Answering questions and handling withdrawals and complaints | Contract and legal obligation |
| Notifying important changes to the service or the terms | Contract and legitimate interest |
| Statistics on how the website is used | Consent (cookies) |
4. When companies enter personal data
When a company uses an account app and enters data about, for example, customers, orderers or colleagues, the company is the data controller for that data. We are then the data processor and only process the data to provide the service according to the company's instructions, protect it and do not disclose it. A data processing agreement can be requested at hello@datoden.com.
5. Who we share data with
We never sell personal data. We use the following suppliers (data processors), who may only process the data on our behalf:
- Inleed – operation of servers and databases in Sweden.
- Stripe – payments and receipts.
- Microsoft – email and code signing.
- Consent to cookies is handled by Datoden's own cookie banner (no third party). Your choice is stored in the cookie
dt_consentfor 12 months. - Visitors in the United States (recognised by the device's time zone on datoden.com and datoden.eu) are not asked first: statistics and marketing are on until you opt out with "Do Not Sell or Share My Personal Information" in the banner. If your browser sends the Global Privacy Control signal, marketing is turned off automatically. Everyone else is asked before anything other than necessary cookies is used.
- Google – fonts on the website and measuring how the pages appear in search.
We may also disclose data when required by law, for example to authorities.
6. Transfers outside the EU
Our servers and databases are located in Sweden. Some suppliers, such as Stripe, Microsoft and Google, may process data in the USA. The transfer is then protected by the European Commission's decision on the EU-US Data Privacy Framework or the EU standard contractual clauses.
7. How long we keep the data
- Account and content: as long as the account exists. When the account is closed the data is deleted; copies in backups are overwritten within 30 days.
- Payment records: seven years under the Swedish Accounting Act.
- Security logs: at most twelve months.
- Free limits in browser apps: a few hours.
- Support requests and withdrawal requests: two years after the matter is closed.
8. Security
We protect the data with encrypted connections, encrypted passwords, the option of two-step verification, restricted access and regular backups.
9. Your rights
You have the right to know what data we hold about you, to have incorrect data corrected, to have data deleted, to restrict or object to processing, to receive the data in a machine-readable format and to withdraw a consent at any time. Contact us at hello@datoden.com. You can also change most things yourself under My account.
If you are dissatisfied with how we process your data you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.
10. Cookies
We use necessary cookies for login, language, colour mode, passes and free limits. They are needed for the service to work. Statistics cookies are only used if you consent. You can change your choice at any time via the cookie icon at the bottom left of the website.
11. Changes
We may update this policy. We notify you of significant changes by email or in the service. The latest version is always on this page.