Version 2026-09-15

Privacy Policy

This policy explains how personal data is handled when you use Loggen. It applies to visitors, invited client users, team members, and other people whose data is processed through the service.

1. Who is responsible for your data?

WTMG Create AB, organisation number 556815-9353, is responsible for personal data used to operate Loggen, administer accounts, secure the service, and manage its customer relationships. Postal address: c/o WTMG Create AB, Kivra 556815-9353, 106 31 Stockholm, Sweden.

For project content that a client organization or team uploads or connects to Loggen, WTMG Create AB will generally process that content on the organization's behalf. The applicable service agreement and any data processing agreement govern that processing. Privacy questions and requests may be sent through your usual WTMG contact or the contact details in your service agreement.

2. Personal data we process

Account and identity data, such as name, email address, organization, role, login details, verification status, and two-factor authentication settings.
Client and project data, such as organization number, business information, project details, assignments, forecasts, tasks, comments, and delivery status.
Work and commercial data, such as time entries, estimates, quotes, pricing plans, agreements, approvals, and billing-related summaries.
Content you provide or connect, such as documents, board attachments, meeting information, recordings or transcripts, messages, and email or repository metadata.
Integration data from services you choose to connect, such as Google, GitHub, Bitbucket, Trello, calendar, and email account identifiers and access credentials.
Technical and security data, such as IP address, browser and device information, session identifiers, request logs, error logs, and audit events.

3. Where data comes from

Data comes directly from you, from the organization or team that invites you, from other authorized users collaborating in Loggen, and from integrations you choose to connect. Organization details may also be checked against public registers, including the EU VAT Information Exchange System (VIES).

4. Why we process data and our legal bases

Provide and administer the service

To create accounts, manage projects, collaborate, track work, store documents, and deliver contracted services. The legal basis is performance of a contract or steps requested before entering a contract.

Security and service reliability

To authenticate users, prevent abuse, investigate errors, maintain audit trails, and protect Loggen and its users. The legal basis is our legitimate interest in operating a secure and reliable service.

Customer administration and legal duties

To manage agreements, approvals, invoicing support, accounting records, and legal claims. The legal bases are contract, legal obligation, and legitimate interests.

Optional integrations

To access data from a third-party service only when an authorized user connects it. The legal basis is contract or the user's requested action. You may disconnect an integration at any time.

AI-assisted features

To transcribe meetings, summarize content, or suggest backlog and quote information when an authorized user requests those features. The legal basis is contract and legitimate interests in providing the requested functionality.

5. Who receives personal data?

We disclose only what is needed to authorized members of your team or client organization and to service providers that help operate Loggen. Depending on the features used, these may include:

Laravel Cloud and Cloudflare R2 for application hosting and encrypted object storage.
Our configured email delivery provider for service and invitation emails.
Google, GitHub, Bitbucket, and Trello when an authorized user connects those services.
Recall.ai and configured AI providers, including OpenAI, when meeting transcription or AI-assisted features are requested.
Professional advisers, authorities, or other recipients when required by law or necessary to establish or defend legal claims.

Service providers may only process data under our instructions and appropriate contractual safeguards, except where they act as independent controllers for their own services.

6. International transfers

Some providers may process data outside the EU/EEA. Where this happens, we use an applicable adequacy decision, the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism, together with supplementary safeguards where required.

7. How long we keep data

We keep account and project data while the relevant account or customer relationship is active and then only as long as needed for the purposes described above. Agreement, approval, and financial records may be retained for statutory accounting periods or while legal claims may be made. Security logs are retained for a limited operational period. Deleted data may remain in protected backups until those backups rotate. Data processed for a client organization is deleted or returned according to its agreement and documented instructions, subject to legal retention requirements.

8. Security

We use access controls, authenticated and authorized downloads, encrypted network connections, protected credentials, private storage, backups, and operational monitoring. No system can guarantee absolute security. Please use a strong password, enable two-factor authentication where available, and report suspected unauthorized access promptly.

9. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your personal data, and you may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Contact us through your usual WTMG contact or the contact details in your service agreement. We may need to verify your identity. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.

10. Automated processing

Loggen may use AI to produce transcripts, summaries, estimates, or suggestions. These outputs support human work and may be inaccurate. Loggen does not use solely automated decision-making that produces legal or similarly significant effects for users.

11. Changes to this policy

We may update this policy when Loggen, our providers, or legal requirements change. The version date at the top identifies the applicable text. If a material update requires renewed acknowledgement, Loggen may ask you to review the new version before continuing.