Effective 19 September 2026

Privacy information

This notice explains how SaleQMS handles personal data for business accounts, billing, support and the Complete workspace.

Who is responsible

Kai Kimmo Mikael Kiviranta, Bränningestrandsvägen 125, 151 39 Södertälje, Sweden, is the controller for SaleQMS account, billing, support, security and direct customer-relationship data. Privacy contact: info@saleqms.com.

For personal data that a business customer chooses to place in workspace content about its own personnel, customers or other people, that business customer is the controller and SaleQMS acts as processor under the Data Processing Agreement.

Data we use

Account data can include email address, password hash, verification and recovery records, organisation/workspace identifiers and session/security information. Workspace data consists of the review text, values and files you choose to save. Commercial records include order references, accepted terms, campaign evidence, subscription status, invoice/payment references, refund requests and service communications.

Stripe collects payment details in Stripe Checkout and its billing portal. SaleQMS does not store complete card numbers or card security codes. Hosting and security systems can process IP addresses, timestamps and request/security logs.

Why we process personal data

We process account, workspace and subscription data to enter into and perform the SaleQMS contract. We retain accounting and transaction evidence where required by law. We process limited security, abuse-prevention and service-integrity data for our legitimate interests in protecting the service and customers. We process privacy requests to comply with data-protection obligations.

We do not use workspace content to advertise to you and the launch service does not send marketing email without a separate lawful basis.

Providers and transfers

Simply.com provides hosting and configured email infrastructure. Stripe provides payment, subscription billing and customer billing functions. Other strictly necessary infrastructure providers may be used to operate, secure or back up the service.

Providers can act as processors and, for some activities, independent controllers under their own terms. Where personal data is processed outside the EEA, the applicable provider must use a lawful transfer mechanism and appropriate safeguards. Current provider and subprocessor information can be requested from info@saleqms.com.

Cookies and service communications

SaleQMS uses a necessary session cookie for sign-in and request protection. Stripe may use its own technologies when you open Checkout or the billing portal. Account verification, recovery, purchase confirmation, refund acknowledgements, privacy-request receipts and security notices are service communications.

Retention

Workspace records remain available while Complete is active and for 90 days after paid access ends, during which they remain readable and exportable. After 90 days, workspace content is deleted from active systems unless a specific legal claim or other documented lawful basis requires longer retention.

Backup copies of deleted workspace data may remain for up to a further 90 days solely for disaster recovery and are not used as ordinary workspace storage. Security data is kept only as long as reasonably necessary for service protection and investigation. Order, invoice and other accounting evidence is retained separately for the period required by Swedish law. Privacy-request records can be retained as needed to document handling of the request and legal compliance.

Your rights

Depending on the circumstances, you may request access, correction, erasure, restriction or portability, and may object to processing based on legitimate interests. Erasure is not absolute where information must be retained to comply with a legal obligation or establish, exercise or defend legal claims.

Signed-in users can use the Privacy & data page to download an application-data export and submit a privacy request. You can also contact info@saleqms.com. You may lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Security and updates

SaleQMS uses account verification, access controls, isolated private storage, transport encryption, provider-signed payment evidence and other technical and organisational controls appropriate to the service. No system can be guaranteed completely secure.

Material changes to this notice will be dated here. Changes do not alter immutable purchase records already stored with an order.