Privacy Policy

Last updated: 2026-05-17 | Controller: Compuute AB (org.nr 559374-5606)

1. Who We Are

Compuute AB, a Swedish limited company, operates the Lead Enrichment API at https://leads.compuute.se. Contact: daniel@compuute.se

2. What Data We Collect

From API customers: email address (at registration), API usage logs (endpoint, leads returned, timestamp), payment data processed by Stripe.

Lead data we enrich and sell: publicly available company information including company names, websites, funding information, technology signals, and estimated firmographics. This may include names of founders and executives sourced from public records (ProductHunt, GitHub, SEC EDGAR, news RSS).

3. Legal Basis (GDPR Article 6)

Contract (Art. 6(1)(b)): Processing your email and usage data to provide the API service.
Legitimate Interest (Art. 6(1)(f)): Collecting and enriching publicly available B2B company data for sales intelligence purposes. Data subjects are companies and their public representatives — not private individuals.
Legal Obligation (Art. 6(1)(c)): Retaining transaction records as required by Swedish law.

4. How We Use Your Data

Authenticating API requests and enforcing usage quotas
Processing payments via Stripe
Improving data quality and enrichment accuracy
Sending transactional emails (API key delivery, billing receipts)

We do not sell your personal data. We do not use your data for advertising.

5. Data Retention

API keys and usage logs: retained for the duration of your account plus 12 months
Payment records: 7 years (Swedish Bookkeeping Act)
Lead data: refreshed every 30 days; stale data archived after 90 days

6. Third-Party Processors

Processor	Purpose	Location
Anthropic	AI-powered lead enrichment	USA (SCCs)
Supabase	Database storage	EU (AWS eu-west-1)
Railway	API hosting	USA (SCCs)
Stripe	Payment processing	USA (SCCs)
Upstash	Rate limiting (Redis)	EU (eu-west-1)

USA transfers are covered by Standard Contractual Clauses (SCCs) under GDPR Chapter V.

7. Your Rights (GDPR)

As an EU resident you have the right to: access your data, correct inaccuracies, request erasure, restrict processing, data portability, and object to processing based on legitimate interest.

Submit requests to daniel@compuute.se. We respond within 30 days. You may also lodge a complaint with Integritetsskyddsmyndigheten (IMY).

8. Cookies

The API itself sets no cookies. The /docs page (Swagger UI) may use local storage for UI preferences only — no tracking.

9. Changes

We will notify registered users by email of material changes at least 14 days in advance.