Who is responsible

BI Partner AB (Sweden) is the data controller for personal data processed through openbis.tech, except where we act as a processor for data you upload on behalf of your own users — in which case you are the controller and we process it under your instructions.

What we collect

• Account data: name, email, organisation, and authentication identifiers needed to sign you in and manage your tenant.
• Billing data: handled by Paddle, our merchant of record. Paddle collects payment and tax details as the seller of record; we receive only the subscription status and non-sensitive metadata needed to grant access.
• Usage data: logs and operational telemetry used to run, secure, and improve the service.
• Content you provide: the documents, warehouse data, and other content you put into your tenant. This is isolated per tenant and processed to provide the service.

How we use it

To provide and secure the platform, authenticate users, process subscriptions, meet legal obligations, and improve the service. We do not sell personal data. We do not use one tenant's content to serve another.

Legal bases (GDPR)

We process personal data on the bases of contract performance (providing the service you subscribe to), legitimate interests (securing and improving the platform), legal obligation (tax and accounting), and consent where required.

Sub-processors

We use a small set of sub-processors to operate the service — including Paddle (payments and tax as merchant of record), our cloud hosting provider, and authentication tooling. A current list is available on request.

Your rights

Under the GDPR you may request access, correction, deletion, portability, or restriction of your personal data, and may object to certain processing. Contact us to exercise these rights; you also have the right to lodge a complaint with a supervisory authority (in Sweden, the IMY).

Retention

We keep personal data only as long as needed to provide the service and meet legal obligations. Tenant content is deleted or returned on request after account closure, subject to legal retention requirements.

Contact

Privacy questions or requests: reach us through the contact channels on openbis.tech.