Privacy policy and cookies

OfferAgent is provided by Stream Shed AB, company registration number 556788-5818, Fältvägen 12A, 163 40 Spånga, Sweden. Stream Shed AB is the data controller when we decide why and how personal data is processed on the public website, during account administration, sales, billing and support.

A company using OfferAgent is normally the data controller for customer, lead, quote and communication data placed in its workspace. In that situation, Stream Shed AB processes the data on the customer's instructions as a data processor. The customer decides the purpose, legal basis, access and retention for that data.

The data depends on how you interact with OfferAgent.

• Website data: page address, browser and device information, approximate location and pseudonymous analytics identifiers after consent.
• Account data: name, email address, company, role, authentication and security events.
• Service data: inquiries, contact details, messages, quote content, revisions, acceptance events, bookings and customer history entered by an OfferAgent customer.
• Commercial data: plan, subscription, invoices and payment status. Payment card details are handled by the payment provider and are not stored by OfferAgent.
• Support data: information you provide when asking for help, booking a demo or reporting a problem.

We process personal data only for defined purposes and with an applicable legal basis.

• To provide accounts, subscriptions and requested services under an agreement or before entering into one.
• To secure the service, prevent misuse and maintain traceability based on our legitimate interest and legal obligations.
• To provide support and communicate about the service under the agreement or our legitimate interest in handling the request.
• To manage payments, accounting and legal claims under the agreement and applicable legal obligations.
• To measure and improve the public website only after consent to optional analytics cookies.

Google Analytics is disabled until you actively accept analytics cookies. If accepted, Google may process page visits, browser and device information, approximate location and a pseudonymous browser identifier. Google signals and advertising personalization are disabled.

OfferAgent does not send names, email addresses, form content, quote content or quote identifiers to Google Analytics. Analytics cookies are configured to expire after no more than 395 days. You can reject them without losing access to the website and change your choice at any time through Cookie settings in the footer.

Our first-party conversion measurement uses a random identifier limited to the current browser tab. It does not run without consent and excludes direct personal identifiers. Your consent choice is stored locally in your browser so the website can remember it.

We use providers for hosting, database and authentication, payments, email delivery and optional website analytics. Current core providers include Vercel for website hosting, Supabase for platform infrastructure, Stripe for payments and Google Analytics for optional website analytics.

A provider receives only the data needed for its task and acts under applicable contractual and security requirements. Some providers may process data outside the EEA. Where required, transfers rely on an adequacy decision, the European Commission's standard contractual clauses or another lawful safeguard.

We retain personal data only while it is needed for the purpose, the customer agreement or a legal obligation. Account and service data follow the applicable agreement, customer retention settings and data-processing terms. Accounting records are retained for the period required by Swedish law. Support and sales inquiries are removed or anonymised when they are no longer needed for the relationship or a legal claim.

The consent preference remains in your browser until you change it or clear browser storage. Session-based conversion context ends with the browser session. Google Analytics cookies expire according to the period stated above.

Depending on the processing and applicable law, you may request access, correction, deletion, restriction, portability or object to processing. You may withdraw consent at any time without affecting processing that was lawful before withdrawal.

• For data a company has entered in OfferAgent about you, contact that company first because it normally controls the data.
• For OfferAgent website, account, sales, billing or support data, contact Stream Shed AB using the details below.
• You may lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or the supervisory authority where you live or work.

We use account separation, authorization controls, encrypted transport, restricted public links, event history and provider controls appropriate to the service. No online service can promise absolute security, so we continuously review these safeguards.

We update this policy when processing, providers or legal requirements materially change. Significant changes are communicated through the website, service or another appropriate channel before they take effect when required.