Privacy policy
Last updated September 24, 2026
This policy describes how HAARP AB processes your personal data when you use Doris. We comply with the General Data Protection Regulation (GDPR).
Questions about how we process your personal data? Email [email protected].
Data controller
HAARP AB, organization number 556805-1055, is the controller for the processing of your personal data in Doris. You can reach us at [email protected].
The data we collect
Account details such as your email address, as well as the websites and analyses you work with and your history in the service.
Payment details are handled by our payment provider, Stripe. We never store your full card details.
Technical data needed to run and secure the service, such as cookies and IP address. Doris primarily analyzes what is already public on your website.
Anonymous visitor statistics about how our website is used, such as which pages are viewed, where the visit came from and the type of browser and device. They are collected without cookies, the IP address is not stored in the statistics and the data cannot be linked to you as a person.
Why we process it and the legal basis
To deliver and operate the service and your account, which we do to fulfill our agreement with you.
To handle payments and bookkeeping, on the basis of contract and legal obligation.
To improve, troubleshoot and protect Doris, on the basis of our legitimate interest.
Subprocessors we share data with
We use a few providers that process data on our behalf: Supabase (database and sign-in), Stripe (payment), Resend (sending email), Cloudflare (operating and protecting the website), Sentry (error reporting from the service) and OpenAI (the AI analysis of your website).
To measure how your website appears in search engines and AI assistants, we also use DataForSEO, Anthropic and Perplexity. We send them information about your website and your company, not about you as a person.
The visitor statistics for our own website are collected with the Umami tool on a self-hosted instance (um.merinfo.se), not with an external analytics company.
They may only process the data according to our instructions and under data processing agreements. We never resell your data.
Transfers outside the EU/EEA
Your data is primarily stored within the EU/EEA. Some subprocessors may process data outside the EU/EEA, and in that case it is done with safeguards such as the European Commission's standard contractual clauses.
How long we keep data
We keep your data for as long as you have an account with us. When you close your account, we delete your personal data, except what the law requires us to keep for a period of time, such as bookkeeping records.
Your rights
You have the right to know what data we hold about you, to have it corrected or erased, to restrict or object to the processing and to obtain your data (data portability).
Email [email protected] and we will help you. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) if you think we are processing your data incorrectly.
Changes
We may update this policy when the service or the legislation changes. If we make material changes, we will notify you.