Skip to content
SVBook a Call

Privacy

Privacy Policy.

How we handle your personal data. Short and clear.

Last updated: 3 November 2026

1. Data controller

nexunest (sole proprietorship), Linköping, is the controller responsible for processing your personal data on nexunest.se. You can reach us at hi@nexunest.se.

2. Personal data we process

  • Name, email and company when you submit a form or email us. When you request a meeting, also your phone number if you provide it, your preferred meeting format and requested time.
  • What you write in forms, emails and messages.
  • Billing information when we work together.
  • What you write in the nexubot chat (see section 6).
  • The website address you enter in our free website audit. If you send a quote request after the audit, we also receive the audit results (scores, selected improvements and time of request).
  • Technical information sent by your browser, such as your IP address. It is used by our service providers to display the website and protect it against abuse.
  • If you have accepted marketing cookies: information about your visit and certain events, for example that a form was submitted (see section 8).

3. Legal basis

We process personal data so that we can respond to your request and fulfil agreements (contract and legitimate interest), and to meet the requirements of the Swedish Bookkeeping Act (legal obligation).

Confirmation emails, the chat, the website audit and protection against abuse are based on legitimate interest: being able to provide the service you ask for and keeping the website secure.

Marketing cookies and ad measurement are based on your consent. You can withdraw it at any time.

4. How long we keep data

Inquiries that do not lead to an assignment are kept for no longer than 12 months. Data related to an assignment is kept for as long as the collaboration continues, and accounting records for seven years as required by law.

To limit the number of confirmation emails, we count how many are sent to each email address per day. The address is then stored only as a one-way code (hash) and deleted at midnight (UTC).

5. Forms and email

When you submit a form on the website, the information passes through our form service at Cloudflare. From there, an email is sent to us and a confirmation email with a copy of your submission is sent to you. Links in your message are removed from the confirmation. Emails are sent with Zoho ZeptoMail from a data center in the EU.

The forms are protected by Cloudflare Turnstile, which checks that a human is submitting the form. If our form service does not respond, the form is submitted through Webflow instead, which then stores the submission and emails it to us.

6. The nexubot chat

nexubot answers with prepared replies that we have written ourselves. When you type a question, the text is sent to our service at Cloudflare, where an AI model (Cloudflare Workers AI) only determines which topic the question is about. The question is not stored and is not used to train any model.

The conversation is kept only in your browser until you close the tab. Do not enter sensitive personal data, passwords or payment details in the chat.

7. Free website audit

When you analyze a website, its address is sent to our audit service at Cloudflare. The service reads only what is open to all visitors: the website's homepage and icon, robots.txt, sitemap, llms.txt and a few other public standard files, as well as public DNS and domain information. We never log in, do not search for vulnerabilities and do not try to access anything that is not public.

We do not save the website address or the report. The results are shown only in your browser, and the PDF report is created in your browser and is not sent to us. Loading times are measured with Google's PageSpeed Insights service; the website address (no information about you) is then sent to Google. Cloudflare's operational statistics may briefly show which web addresses the service has fetched.

To stop abuse, we use Cloudflare Turnstile to check that a human is running the audit, and we limit how many audits can be run from the same IP address. The IP address is used only temporarily for this purpose.

If you want help with what the audit shows, you can send the PDF report or the website address to us. The information is then used only to reply with pricing and a timeline, and is kept according to section 4.

8. Cookies and ad measurement

Necessary. We use necessary cookies and browser storage so that the website works, for example for protection against abuse (Cloudflare Turnstile), so that the chat remembers the conversation while the tab is open, and to store your cookie choice. Your choice is stored in your browser for 12 months.

Marketing, only with consent. If you accept, we load the Meta Pixel (Meta Platforms Ireland Ltd) and the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company). They set cookies and record, for example, that you visited the website, submitted a form, booked a call or ran a website audit. We use this to see which ads lead to enquiries and to show ads to people who have visited us. The content of what you write in forms is not sent to Meta or LinkedIn.

For the collection through the Meta Pixel, we and Meta are joint controllers. Meta and LinkedIn are responsible for their further processing under their own privacy policies.

You can change or withdraw your consent at any time via , which is also at the bottom of every page.

9. Recipients

We never sell your data. It may be processed by our service providers acting as data processors: web hosting and form fallback (Webflow); form service, audit service, protection against automated requests and topic detection in the chat (Cloudflare); and email and email delivery (Zoho, including Zoho ZeptoMail in the EU). Google receives only the website address being analyzed.

Meta and LinkedIn receive data only if you have accepted marketing cookies (see section 8). The data may then be transferred to the United States. If data is transferred outside the EU/EEA, this is done on the basis of the EU–US Data Privacy Framework, the European Commission's standard contractual clauses or equivalent safeguards.

10. Your rights

You have the right to request access to, correction or deletion of your data, to object to or restrict processing, and to receive your data (data portability). You also have the right to withdraw consent at any time.

11. Contact and complaints

Contact hi@nexunest.se if you have questions. If you are dissatisfied with how we handle your data, you can contact the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se).