Legal
Privacy Policy
Last updated: 2026-11-09
This policy explains what personal data Sjo collects when you use our website, app, emails and free tools, why we collect it, and the choices you have. We collect what we need to run Sjo for you, and nothing for advertising profiles. We do not sell personal data.
1) Who is responsible
The controller of the personal data described here is:
- Operated by
- [Your full name] (private individual, not yet a registered company)
- [privacy@your-domain]
Your customers' and teammates' data. When you put other people's personal data into your workspace (for example client names on an imported invoice), you are the controller of that data and we process it for you under our Data Processing Agreement. Those people should contact you first; we will help you answer them.
2) What we collect, why, and our legal basis
| Data | Why | Legal basis (GDPR Art. 6) |
|---|---|---|
| Account: name, email, sign-in and session data (via Clerk), profile picture if you add one. | Create and secure your account. | Contract |
| Workspace and team: company name, members, roles, invited teammates' emails, email preferences. | Run your workspace and let teammates collaborate. | Contract |
| Company data you add: metrics (MRR, cash, spend, runway), hard rules, decisions, assumptions, evidence, clarity requests and answers, and data imported from Sjo's free tools (for example invoice client names and amounts). | Give Sjo the context it needs to advise you and keep your decision history. | Contract |
| Stripe connection: an encrypted restricted, read-only key and the subscription data we read with it (amounts, plans, statuses, discounts, Stripe customer IDs). We do not store your customers' names or emails from Stripe. | Calculate MRR and customer metrics automatically. | Contract |
| Conversations: your messages, Sjo's replies, and items Sjo proposes and you choose to keep. | Answer you and keep continuity across conversations. | Contract |
| Billing: plan, subscription status, Stripe customer and subscription IDs, country and tax ID. Card details are handled by Stripe and never reach us. | Take payment, apply tax, manage access and refunds. | Contract; legal obligation (bookkeeping) |
| Emails we send: the Monday brief and clarity request emails, only if you turn them on; service emails such as receipts. | Deliver the updates you asked for. | Contract |
| Support, waitlist and inquiries: email, name and your message. | Answer you. | Legitimate interests (responding to you) |
| Discord, only if you connect it: Discord user ID and username, and the server roles we assign. | Give members access to the Sjo community. | Contract |
| Referrals and attribution: invite or referral code, and campaign tags (utm_source, utm_medium, utm_campaign) from the link you signed up through. | Credit referrals and understand which channels bring founders. | Legitimate interests (measuring our marketing) |
| Usage and security data: message counts, rate-limit and error events, IP address and device info in server logs. | Enforce plan limits, prevent abuse, keep Sjo reliable. | Legitimate interests (security, reliability); contract (plan limits) |
| Analytics: pages viewed and performance metrics (Vercel Web Analytics and Speed Insights), only after you accept analytics cookies. | Understand and improve the website. | Consent |
Free tools. The calculators and tools on /tools keep your inputs in your own browser. They reach our servers only if you sign in and sync or import them into your workspace.
Where we rely on legitimate interests you can object at any time (see section 9). Please do not put sensitive data (health, religion, political views and similar) into Sjo; it is not needed for the Service.
3) How the AI works
- Sjo's replies are generated by an AI model from Anthropic. For each reply we send Anthropic your message, recent conversation context and the parts of your company context relevant to it. We do not send sign-in records, card details or your Stripe key.
- Anthropic processes this data on our behalf to produce the reply. Under its commercial terms it does not use our API data to train its models.
- Sjo does not make decisions about you that produce legal or similarly significant effects (GDPR Art. 22). Its recommendations are suggestions for you to judge.
4) AI training is off unless you opt in
We do not use your conversations or company data to train or fine-tune AI models unless you opt in. You make this choice separately when you first sign in, it is off by default, and you can change it later. If you opt in, we may use your conversations to improve how Sjo answers; withdrawing consent stops future use.
6) International transfers
Several processors are based in the USA, so personal data may be transferred outside the EU/EEA. We rely on the EU-US Data Privacy Framework where the recipient is certified, and otherwise on the European Commission's Standard Contractual Clauses with additional safeguards such as encryption in transit and at rest. You can ask us for a copy of the relevant safeguards at [privacy@your-domain].
7) How long we keep data
- Account, workspace, company data and conversations: while your account is active. When you delete your account we delete them right away from our live systems; copies in backups are overwritten within 35 days.
- Stripe connection: the key is deleted when you disconnect Stripe or delete your account.
- Billing and accounting records: 7 years from the end of the financial year, as Swedish bookkeeping law requires.
- Support messages and inquiries: up to 24 months after the conversation ends.
- Server and security logs: up to 90 days, unless needed to investigate an incident.
- Analytics: kept in aggregate form only.
8) Security
We use encryption in transit (TLS) and at rest, keep connected-service keys separately encrypted, limit staff access to what is needed, and protect accounts with Clerk's sign-in security. If a breach is likely to put your rights at risk, we will tell you and the supervisory authority as the law requires.
9) Your rights
Under the GDPR you have the right to:
- access your data and get a copy in a machine-readable format (portability);
- correct inaccurate data;
- delete your data;
- restrict or object to processing based on legitimate interests;
- withdraw consent at any time (for analytics cookies or AI training), without affecting earlier processing.
Signed-in members can export or delete everything below. For other requests, email [privacy@your-domain] or use the Support form. We answer within one month.
Your data
Signed-in members can download a structured copy or permanently delete the Sjo account and core profile data. You can also write to us via Support.
You can complain to the Swedish Authority for Privacy Protection (IMY) at imy.se, or to the supervisory authority where you live or work.
11) Children
Sjo is for people aged 18 and over. We do not knowingly collect data about children.
12) Changes to this policy
We will post changes here and update the date above. If a change materially affects how we use your data, we will tell you by email or in the product before it applies, and ask for consent where the law requires it.