Privacy policy

Ad Vitam Invest AB (trading as ProfitLens Consulting) is the controller for the data described in this policy. Contact: policies@profitlensconsulting.com, phone +46 10 555 87 35.

For customer data you upload into the service, you are the controller and ProfitLens is the processor. See our data processing agreement.

Account: name, email address, company and role. Purpose: providing the service and linking analyses to the right account. Legal basis: contract.

Contact form and chat: name, company, email and what you write. Purpose: answering your enquiry and handling cases, including money-back guarantee claims. Legal basis: legitimate interest in handling business enquiries.

Interviews: respondent name, title and answers. Purpose: producing input for the analysis on the customer’s instructions; the customer determines the applicable legal basis for its respondents. Voice is available by default where supported, but can be disabled; the respondent chooses whether to activate it and allow microphone access, or use text instead. Only if voice is selected is speech processed in real time by Azure OpenAI in the EU to produce transcripts and spoken replies. ProfitLens does not record or store audio; only the written transcript is saved. Declining microphone access does not prevent a text interview.

Purchases and invoicing: purchase history, amounts, VAT details. Purpose: fulfilling the purchase and accounting obligations. Legal basis: contract and legal obligation.

In-service help guide: a limited summary of column names, mapping, check results and, if enabled, sample rows is sent to Azure OpenAI in the EU for guidance. Identifying sample values are pseudonymised. You can disable sample-row sharing in the help guide. This content is not used to train foundation models; Microsoft’s security and abuse-monitoring rules may apply.

Operational telemetry: with each analysis and presentation run we store anonymous technical counters – row and column counts, which analyses ran or were skipped, run time and error status. The telemetry never contains customer content, names or figures from your data. Purpose: to monitor the health of the service and improve the analysis flow. Legal basis: legitimate interest.

Website usage: see our cookie and tracking policy.

Account data is kept while the account is active and for twelve months thereafter.

Uploaded data and analysis results are kept for twelve months after a delivered analysis, or until you request deletion.

Written interview material is retained with its analysis. A request to delete raw transcripts or quotations is handled separately from the aggregated analysis synthesis, which is not automatically erased with the transcript. No audio recording is retained by ProfitLens. Microsoft may process and retain content for security and abuse monitoring under its applicable service terms; no zero-retention exemption has been verified.

Contact cases and money-back guarantee cases are kept for thirty-six months, partly so we can see whether the guarantee has already been used.

Accounting records are kept for seven years as required by accounting law.

Microsoft Ireland Operations Limited (Azure) provides client-content storage and AI processing. Supabase provides the website and application platform and retains accounts, sign-in, access metadata and credits. Email providers deliver system notifications. The scope of each service is described in section 5 of the data processing agreement. Paddle.com acts as Merchant of Record for our orders and processes data about purchases, payments, VAT and refunds.

Client files are stored in Azure Blob Storage in Sweden; transcripts, analyses, reports and presentation content are stored in Azure PostgreSQL in Ireland.

AI inference uses Azure OpenAI EU Data Zone deployments, not Global deployments. Prompts and responses are processed within EU member states, and Microsoft does not use them to train foundation models. This is not a claim that all website delivery, support, email or account processing is restricted to the EU. Any third-country access or transfer by supporting suppliers must comply with applicable GDPR safeguards, such as standard contractual clauses where required.

Only the material required for the selected AI task is sent, never the complete file for AI inference. Identifying sample values are replaced with codes. Interview free text can still contain personal information entered by the respondent; avoid unnecessary identifiers or sensitive information.

You have the right to access, rectification, erasure, restriction, data portability and to object to processing based on legitimate interest. Contact policies@profitlensconsulting.com and we will handle the request within one month.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or with the supervisory authority in your country.

Stored client content is encrypted and access-controlled per account and analysis. Deterministic calculations run locally in a Web Worker in your browser, not in an AI model or on an Azure analysis server. The website and application servers may handle client content in transit to provide authorised access; Azure storage does not mean those servers never process it.

In the event of a personal data breach affecting your data, we notify you without undue delay.

The analysis is deterministic. Findings, potential and all calculations are produced by versioned code without AI. AI is used only as support in a few steps and never receives your full dataset.

What may be sent to Azure OpenAI: column and sheet names, limited example values, completed findings for presentation text, interview answers and relevant conversation context. If the respondent chooses voice, speech is also processed in real time in the EU. ProfitLens stores only the resulting written transcript, never audio recordings.

What is never sent: the whole file or whole columns, customer or product registers in the clear, or transaction rows for analysis.

Pseudonymisation: before example values leave our environment, customer names, product names, sales representatives and segments are replaced by stable codes (for example KUND-0147 and ART-02318). The translation table is built temporarily in memory, is not stored, and is used only when results are displayed to you.

You set the level: Standard (recommended, coded example values), Limited (column and sheet names only, examples replaced by pattern descriptions) or No AI on data (AI support in the data steps is switched off entirely). The setting applies to the account and can be changed per analysis.

Transparency: before every AI call you can read the exact text being sent. Each call is logged per analysis with time, step, mode, character count and whether example values were included. The log can be downloaded.

Microsoft does not use your prompts or responses to train foundation models. Microsoft’s applicable data protection and service terms govern security and abuse monitoring, including any permitted retention and restricted review. A claim that no content is ever retained by Microsoft would require verified service-specific conditions; we make no such claim.