Privacy Policy

1. Who we are

QLFR AI AB (org. no. 559389-2978), Drottninggatan 29, 103 59 Stockholm, Sweden (“Qualifier”) is responsible for the processing described here. Contact: support@qualifier.ai, +46 8-414 002 41.

2. Our two roles

Qualifier finds business contacts and helps companies write to them.

• For our own database of business contacts we decide why and how data is processed. We are the controller. Section 3 applies.
• When a customer runs its campaigns in our service, the customer is the controller and the sender of the emails, and we are its processor under our data processing agreement (qualifier.ai/dpa). Section 4 applies.

3. If you are in our database of business contacts

What we hold: name, employer, title, work email address, work phone number, the address and text of your professional profile, and whether your address works.

Where it comes from: professional networks, company websites and the open web, public company registers, and data vendors. Some email addresses are worked out from the pattern your employer uses and then verified.

Why, and the legal basis: so that companies can find and write to the right person at another company about something relevant to that person’s role. The basis is our and our customers’ legitimate interest in business-to-business contact (Article 6(1)(f) GDPR). We hold details about your professional role only.

Who receives it: customers who choose to contact you, and the vendors in section 7.

How long: while the details are current and relevant for business contact. We erase them on request. When we find they are outdated, for example when an address stops working or you have left the employer, we stop using them for contact and keep only what is needed so that the outdated details are not collected or used again.

Saying no: you can object at any time and we will stop. Use qualifier.ai/opt-out, where we email you a link to confirm, or write to support@qualifier.ai. We then keep your email address on a block list, so that you are not added or contacted again. To have your other details erased as well, write to support@qualifier.ai.

We do not make decisions about you that have legal or similarly significant effects.

4. If you got an email from one of our customers

The company that wrote to you is the sender and is responsible for that contact. Every email can be unsubscribed from, and a reply asking to be left alone is enough. We stop that company’s emails to you through our service. To be removed from our database as well, see section 3.

5. If you are a customer or a user

What we hold: name, email address, company, billing address and VAT number, sign-in and usage data including IP address and browser, the content you create in the service, your messages to us and to Qai, and access tokens for the mail accounts and other tools you connect.

Why, and the legal basis: to provide the service and support (contract), to bill and keep accounts (legal obligation), to keep the service secure, improve it and tell you about it (legitimate interest). You can say no to marketing at any time.

How long: your account and what you created are deleted when the agreement has ended, as the data processing agreement states. If no one at a customer has signed in for 24 months, we email the customer’s users 2 months and again 2 weeks before the account is deleted; signing in keeps the account. We keep one contact person per customer for 24 months after that, to stay in touch about the service; you can say no at any time. Invoices, contracts and the records behind them are kept until the end of the seventh year after the financial year, under the Swedish Bookkeeping Act. Figures on how a customer has used the service, with no person named, are kept for the same time.

Google User Data

Additional restrictions apply to Google account data access:

• Data used only for providing email client functionality.
• No transfer to others, except to the vendors in section 7 that are needed to provide these functions, to comply with the law, or as part of a merger or acquisition.
• No use for advertising.
• Human access only with affirmative agreement, for security, legal compliance, or internal operations with aggregated/anonymized data.

Qualifier's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of information received from Google Workspace APIs will also adhere to the Google Workspace API User Data and Developer Policy.

We do not use Google user data to develop, improve or train AI or machine learning models, and the AI vendors in section 7 may not train their models on it.

Qai in Microsoft Teams and Slack

Qai is Qualifier's AI assistant. When an organization adds the Qai app to Microsoft Teams or Slack, Qualifier processes:

• Workspace identifiers: the Microsoft Entra tenant ID or Slack workspace ID, and the team, channel or chat Qai was added to.
• Member identifiers: the Teams or Slack user ID, display name and email address or sign-in name of members who message Qai, and the member list of a team or chat Qai is added to, so that Qai can connect members to their Qualifier account.
• Messages sent to Qai and Qai's replies, stored as chat history in the member's Qualifier account.

Qai acts only on messages sent directly to it or that mention it, and answers from the Qualifier account the member has connected. This data is used only to provide Qai, is not sold and is not used for advertising. Removing the app stops the processing; to have stored data deleted, contact us.

6. If you visit our website

We process your IP address, browser, language, referring site and the pages you visit, for security and statistics (legitimate interest). An IP address is personal data. If you use the chat on our website, we look up which country your IP address belongs to with IPinfo.

Our website's pages load three tools from third parties for every visitor, without asking first. They send your IP address, your browser and the pages you visit to Google or OpenAI, and Google Analytics and the OpenAI pixel can set cookies:

• Google Tag Manager (Google), which loads our other tags from googletagmanager.com.
• Google Analytics (Google), which counts visits, sign-ups, demo bookings and contact form messages, and shows us how the site is used.
• The OpenAI pixel (OpenAI), which measures whether visitors come from our ads with OpenAI and whether they then sign up, book a demo or contact us.

You can block them in your browser's settings: block cookies for qualifier.ai and cookies from third parties, or turn on tracking protection or a content blocker. Blocking all cookies may affect how the site works.

7. Who receives data

• Our customers, for the contacts they choose.
• Vendors that process data for us: servers and backups (Hetzner, in Finland and Germany), network protection (Cloudflare), key management and file storage (Google Cloud), AI language models (Anthropic, OpenAI, Google and Perplexity), email verification, email delivery, and data vendors. The current list is in Annex 3 of the data processing agreement (qualifier.ai/dpa).
• Brandfetch, which supplies the company logos shown in the app. Your browser fetches each logo straight from Brandfetch, so Brandfetch sees your IP address and the web address of the company whose logo is shown.
• Authorities, when the law requires it.

We do not sell personal data.

8. Data outside the EU/EEA

Our database and backups are stored in the EU. Some vendors, among them the AI vendors, process data in the United States, and a few in other countries outside the EU/EEA. Those transfers rest on a decision by the European Commission that the country or the recipient gives adequate protection, or on the Commission’s standard contractual clauses.

9. Your rights

You have the right to get a copy of your data, to have it corrected or erased, to have its use restricted, to object to it, and in some cases to receive it in a portable format. Write to support@qualifier.ai. We answer within one month and free of charge. You can also complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

10. Security

We protect personal data with technical and organisational measures, described in Annex 2 of the data processing agreement. No system can be guaranteed free from unauthorised access.

11. If the business changes hands

If Qualifier or its business is sold or merged, personal data may pass to the new owner, who must keep following this policy.

12. Changes

We update this policy when our processing changes. The date at the top shows the latest version.

Contact

QLFR AI AB
Drottninggatan 29
103 59 Stockholm, Sweden

Phone: +46 8-414 002 41
Email: support@qualifier.ai