Jarel
本文件以英文發布，以英文版本為準；法律審查後將提供翻譯。
Legal
Last updated: May 2026
Bizlution AB ("Jarel", "we", "us") is the data controller for personal data processed through the Jarel platform. Bizlution AB is incorporated in Sweden and headquartered in Gothenburg. Our primary contact for data protection matters is privacy@jarel.se.
We collect information you provide directly: name, work email address, organization name, and role. We also collect data created through your use of the Service, including documents you upload, AI queries and responses, audit log entries, and usage metrics (session duration, feature interactions). We collect technical data such as IP address, browser type, and device identifiers for security and performance purposes.
We use your data to: (a) provide and operate the Service; (b) authenticate your identity and authorize access; (c) generate AI-powered analysis and document outputs in response to your requests; (d) maintain audit logs for security and compliance; (e) send transactional communications (access invites, security alerts); (f) improve the reliability and performance of the Service.
Documents you upload and queries you submit are processed to provide the Service. They are stored securely, encrypted at rest (AES-256) and in transit (TLS 1.2+). Customer content is not used to train Jarel models. Model providers are configured not to train on it where their terms support that. Jarel employees do not access your documents except where required for support with your explicit consent.
For users in the European Economic Area, we process your data on the following legal bases: (a) Contract — processing necessary to provide the Service; (b) Legitimate interests — security monitoring, fraud prevention, and service improvement; (c) Legal obligation — compliance with applicable laws. Where we rely on legitimate interests, you have the right to object to that processing.
We share data only with: (a) your workspace administrator, who manages your account; (b) subprocessors who help us deliver the Service (listed on our Security page); (c) law enforcement or regulators where required by law. We do not sell personal data. A full subprocessor list is available at jarel.se/security or on request.
We retain your personal data for as long as your workspace account is active. Upon account termination, personal data is deleted within 90 days, except where retention is required by law. Anonymized usage statistics may be retained indefinitely. You may request deletion of your data at any time by contacting privacy@jarel.se.
Workspace data is stored in Dublin, Ireland. Some processors, including our AI model provider, process data outside the EEA; the subprocessor list on our Security page shows where. Where personal data is transferred outside the EEA, we rely on a safeguard under Chapter V GDPR, such as the EU-US Data Privacy Framework or Standard Contractual Clauses. Which safeguard applies to each processor is not yet listed there; ask privacy@jarel.se. Additional residency options are discussed only for eligible enterprise deployments.
Under GDPR and applicable Swedish law, you have the right to: access your personal data; correct inaccurate data; request deletion ("right to be forgotten"); restrict or object to processing; receive your data in a portable format; withdraw consent at any time. To exercise any of these rights, contact privacy@jarel.se. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.
We use strictly necessary cookies to authenticate sessions and maintain security. With your consent, we also use PostHog (product analytics, EU), Google Tag Manager, Google Analytics and Google Ads, and the Meta Pixel to understand site performance and measure campaigns. If you have not made a choice, the sign-up page may send anonymous visit events to PostHog without cookies or local storage. You can change your choice at any time with Cookie settings in the footer. The cookies are listed in our Cookie Policy. The client portal loads no analytics or advertising cookies.
We implement security-conscious measures including encryption at rest and in transit, multi-factor authentication options, role-based access controls, and audit logs for review where available. For a detailed description of our security practices, see our Security Policy at jarel.se/security.
The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately at privacy@jarel.se.
The Jarel iOS and Android apps process the same categories of data described above. In addition: (a) Microphone — when you initiate a voice query or dictation, the app captures audio on-device; audio is sent to our speech-to-text provider and is not retained after transcription unless you explicitly save it; (b) Speech Recognition — Apple's on-device speech recognition may be used and is governed by Apple's privacy terms; (c) Push Notifications — if you grant permission, your device's push token is stored to deliver alerts (security events, completion notifications); you can revoke this in iOS/Android settings at any time; (d) Local storage — auth tokens and cached content are stored in the iOS Keychain / Android Keystore and the app sandbox. The mobile app does not use third-party analytics, advertising SDKs, or cross-app tracking. We do not access your contacts, photos, or location.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-product notification at least 30 days before they take effect. The date of the most recent revision appears at the top of this page.
For privacy questions, data subject requests, or DPA enquiries, contact privacy@jarel.se or write to: Bizlution AB, Gothenburg, Sweden. We aim to respond to all requests within 72 hours and to resolve them within 30 days.
Questions about this policy? Contact privacy@jarel.se. See also our Terms of Service and Security Policy.