Privacy Policy

Last updated: 3 November 2026

This policy describes how Republiken Kommunikation AB ("we") handles data in Decurio during the closed pilot. Questions: api@republiken.se.

Data we process

• Account details for users: name and email address, used to sign in to the portal.
• Advertising and analytics data from the accounts a user connects: account names, campaigns, ads, spend, results and similar reporting data. For Google Analytics 4 this is read-only reporting data.
• Access tokens issued by Meta, Google or LinkedIn when a user connects an account.
• Workspace content the user creates: notes, files, reports and logs of confirmed changes.

How we use it

Data is used only to provide the service to the user who connected the account: answering their questions, producing the reports they ask for and making the changes they confirm. We do not sell data, do not use it for advertising and do not share it with other users or customers.

Where data is stored

Each user's data is stored on a separate Decurio instance on servers operated by us in Sweden. Data from one customer is not shared with another customer's instance. Access tokens are stored encrypted and are never shown to the AI assistant.

A sign-in relay at auth.decurio.org, run on Cloudflare, receives the platform's redirect after sign-in and forwards it to the right instance. It does not store access tokens.

The AI model

The assistant uses Claude, a model from Anthropic PBC. Content the assistant needs to answer a request, including account data and workspace files, is sent to Anthropic for processing under the user's own Anthropic account and Anthropic's terms. We do not use data from connected accounts to train AI models.

Use of Google user data

Decurio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the features the user requests. It is not used for advertising, not sold, not transferred to others except as needed to provide the service or required by law, and not used to develop, improve or train generalized AI or machine learning models.

How long data is kept

Data is kept for as long as the user uses Decurio. A user can disconnect an account at any time in the portal, which removes its access token from the instance. When a user leaves the pilot or asks for deletion, we delete their workspaces, tokens and data as described on the Data Deletion page.

Your rights

Under the GDPR you can ask for access to, correction of or deletion of your personal data, and object to processing. Email api@republiken.se. You can also complain to the Swedish Authority for Privacy Protection (IMY).

Changes

We will update this page when the service changes and note the date above.