StugaWatch

Privacy policy

Last updated 9 October 2026

StugaWatch is run by Andy Hancock (sole trader), Skånes Fagerhult, Sweden, who is responsible for your personal data. Questions, or a request to see, correct or delete your data: hello@stugawatch.com.

What we collect

Only what's needed to look after your house and talk to you:

  • Your name, email, phone number, country and language.
  • Your house: where it is (map pin, address, property designation), details about it, and how keys and access work.
  • What you've ordered, our quotes, jobs, invoices and payments.
  • Messages with us by email, website chat, WhatsApp, Telegram, SMS and phone, including photos, voice messages and files you send. Phone calls are transcribed to text.
  • Visit reports and the photos taken at your house.
  • If you choose one, a secret word for identifying you on calls and chats. It's stored only in a form that can't be turned back into the word.
  • If you use RUT or ROT: your personnummer (or samordningsnummer), which Skatteverket requires on our claim, and the hours worked on each job.

Why

To answer your request and provide the service you've agreed to (contract); to keep the accounts and claim RUT/ROT deductions, as Swedish law requires (legal obligation); and to keep the service secure and working well (legitimate interest). No marketing, and your data is never sold.

If you use RUT or ROT, your personnummer is processed to claim the deduction for you (contract) and kept on the invoices (legal obligation).

AI assistant

An AI assistant (Claude, by Anthropic) answers messages and calls, translates, reads new orders and drafts visit reports. A person can see every conversation and makes the decisions that matter, such as bookings and prices outside the price list. No decision with legal effect is made by a machine alone.

Who else handles it

These services process data for us, each only for its part:

  • Hetzner (EU): the server the site and database run on.
  • Anthropic (USA): the AI assistant, translation and reports.
  • ElevenLabs (USA): speech recognition and the voice on phone calls and voice notes.
  • 46elks (Sweden): phone calls and SMS.
  • SMTP2GO (EU) and Google Workspace: sending and receiving email.
  • Stripe: online payments. Card details go straight to Stripe; we never see them.
  • WhatsApp (Meta) and Telegram, only if you contact us there; their own privacy policies also apply.
  • OpenStreetMap: the map on the order form, and the address search (what you type in the search box).

Where a service is outside the EU, the transfer relies on the safeguards that service provides under GDPR, such as the EU–US Data Privacy Framework or the EU's standard contractual clauses. If a job is done by one of our partner tradespeople, they get what they need for that job: your name, phone number, the address, access details and what's to be done.

How long

As long as you're a customer and your request needs it. Ask us and we'll delete your data, except records Swedish accounting law makes us keep for seven years (orders that were invoiced, invoices and payments). Phone calls are kept as text; while the phone service is being tuned, audio may be kept for up to two days to check the speech recognition, then it's deleted automatically. Photos, voice messages and files you send in a chat are kept for up to 12 months, then deleted automatically; ask us if you'd like them deleted sooner.

Your personnummer is stored encrypted and deleted automatically 13 months after your last RUT/ROT job is settled; you can also remove it on My StugaWatch at any time. It stays on the invoices, which accounting law makes us keep for seven years.

Tradespeople and partners

If you sign up at Work with StugaWatch, we keep what you give us: your name, company, organisation number (for a sole trader, your personnummer), F-skatt and VAT status, email, phone, languages, trades, certificates, where you're based and how far you'll travel, your prices, insurance, availability and what you write about yourself; and later the jobs you do and what we pay you.

  • Why: to decide whether to pass you work, match you to jobs near you and pay you (contract, and the steps before one), and to keep the accounts as Swedish law requires (legal obligation). Your organisation number is used only to check your F-skatt.
  • AI review: Claude, by Anthropic (USA), reads each sign-up and drafts a summary and suggested checks for Andy, who makes the decision. Your organisation number is left out. The transfer relies on the safeguards described above.
  • Email: your sign-up is emailed to Andy, and a confirmation to you, through SMTP2GO and Google Workspace. If you type your town instead of using the map, it is looked up on OpenStreetMap.
  • What customers see: nothing about you is published on the site. When you take a job, the customer is told who is coming.
  • How long: if we don't end up working together, your sign-up is deleted automatically 24 months after we last had contact, or sooner if you ask. Records of the jobs you've done and what we've paid you are kept for seven years, as Swedish accounting law requires.

The rights below are yours too.

Cookies

One cookie, needed for the site to work: it remembers an unfinished order, which website chat conversation is yours and whether you're signed in to My StugaWatch, for up to 30 days after your last visit. No tracking or advertising cookies, and no analytics.

Your rights

You can ask to see the data we hold about you, have it corrected or deleted, limit or object to how it's used, and get a copy to take elsewhere. Email hello@stugawatch.com. If you're unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.