How we handle your data.

Two kinds. What you hand us, and what your browser tells us.

What you give us. Name, email, company, phone if you add it, and whatever you write in a form or an email.

What we get automatically. IP address, browser and device, pages viewed, the page you came from, and rough location from the IP address.

What the product records. If you use Karo as a customer, the platform stores the operational data your team puts in. That sits under your customer agreement, not this page.

We use personal data for the purposes set out in this section, and not for others.

To answer you when you get in touch or book a demo.

To run and secure the site.

To understand which pages work and which do not.

To send you what you asked for, and nothing you did not.

To meet bookkeeping and tax obligations under Swedish law.

Under the GDPR we rely on your consent for analytics and marketing email, on contract or steps taken before a contract when you ask for a demo, on legitimate interest for site security and basic product improvement, and on legal obligation for bookkeeping.

We use a small set of processors to run the site and the business. Hosting and analytics, email delivery, meeting scheduling, and CRM. They process data only on our instructions.

We do not sell personal data. We do not trade it.

Some providers sit outside the EU and EEA. Where they do, the transfer rests on the European Commission's standard contractual clauses or an adequacy decision.

The site sets the cookies it needs to work. Nothing else loads until you say so.

Analytics and marketing cookies stay blocked until you consent through the cookie banner. We run that on Cookiebot, with Google Consent Mode set to deny by default.

You can change or withdraw your choice at any time through the banner, and clear cookies in your browser. Declining analytics does not break the site.

Contact and demo enquiries, up to 24 months after our last exchange.

Analytics, up to 14 months.

Accounting records, seven years, because Swedish law says so.

Everything else goes when we no longer need it.

You can ask for a copy of your data, ask us to correct it, ask us to delete it, ask us to limit what we do with it, object to processing based on legitimate interest, or ask for it in a portable file.

Consent can be withdrawn at any time and applies from that point forward.

Write to hello@usekaro.io and we will answer within one month.

If you think we handled it badly, you can complain to the Swedish Authority for Privacy Protection, IMY, at imy.se.

When this policy changes we update the date at the top. If a change matters to you, we will say so more loudly than a date.

Karo Commerce AB, Stockholm, Sweden. VAT SE559585281401. hello@usekaro.io