Privacy Policy

Introduction

At Small Scale Labs AB ("Natively," "we," "our"), safeguarding your personal data is a top priority. This Privacy Policy outlines how we collect, use, and protect your information when you visit our website (natively.dev) or use our services. As a data controller, we operate in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Swedish Data Protection Act (Lag (2018:218) med kompletterande bestämmelser till EU:s dataskyddsförordning).

Why We Process Your Data

We process your personal data for specific, lawful purposes under the following legal bases:

To fulfill our contractual obligations when you sign up for or use our services
To comply with legal obligations (such as financial reporting or anti-fraud measures)
Based on our legitimate interests, such as platform improvement, fraud prevention, and user support
With your consent, particularly for non-essential cookies and marketing-related activities

Types of Information We Collect

Information You Provide Directly

Contact details (name, email address)
Billing and payment information (for paid subscriptions)
Account settings and user preferences

Automatically Collected Data

Technical identifiers (IP address, browser type, device information)
Usage logs (pages visited, time spent, actions performed)
Error and debugging information to maintain platform stability

Generated Content and Platform Data

Code, prompts, and other materials you create within our platform

Use of Cookies and Analytics

Our platform uses cookies and similar technologies to:

Maintain user sessions and authentication
Store preferences
Understand user behavior through analytics

You have control over non-essential cookies through our consent banner and browser settings. We use services such as PostHog and Google Analytics, both of which have their own privacy policies. You may opt out of Google Analytics through their browser add-on.

How We Use Your Information

The data we collect enables us to:

Operate and deliver the core functionality of our platform
Provide customer support and technical assistance
Enhance platform features and reliability
Train and improve our machine learning models (with exceptions for Enterprise plans)
Fulfill legal obligations and respond to regulatory requirements
Detect and prevent misuse or unauthorized access

Automated Decision-Making

We do not use personal data to carry out automated decision-making or profiling that produces legal effects or similarly significant consequences for you. If this changes in the future, we will update this policy accordingly.

Data Retention

We store personal data only for as long as necessary to fulfill its purpose or comply with legal requirements. For example:

Payment and billing information is retained for up to 7 years in accordance with Swedish accounting laws
Support-related data is kept for the duration of the support case and for a limited time afterward
Analytics data is retained based on platform settings and user preferences

When data is no longer needed, we securely delete or anonymize it.

Data Sharing and Subprocessors

Your data may be shared with trusted third-party providers who help us deliver our services. These providers are contractually obligated to protect your information in accordance with GDPR standards. If you use an Enterprise plan, additional safeguards and restrictions apply, as outlined in your agreement.

International Data Transfers

Some of our partners and subprocessors operate outside the EEA. When data is transferred internationally, we implement appropriate safeguards, such as:

Standard Contractual Clauses (SCCs) approved by the European Commission
Transfers to jurisdictions recognized as providing adequate data protection

Your Rights Under the GDPR

You have the following rights under the GDPR:

Access the personal data we hold about you
Request correction of incorrect or incomplete data
Request deletion of your data when legally permissible
Object to or restrict specific types of data processing
Receive your data in a portable format
Withdraw your consent at any time

To exercise these rights, please contact us at support@natively.dev. We aim to respond within 7 business days.

Data Security

We use robust security measures to protect your personal data, including:

Encryption in transit and at rest
Regular security audits and assessments
Role-based access controls for internal data access
Staff training on data protection and security best practices

User-Generated Content

Unless explicitly made public, all user-generated content remains private and accessible only to the account holder and authorized personnel required to provide support. If marked public, your content may be viewed or reused by others in accordance with platform features.

Children’s Data

Our services are not intended for individuals under 18. We do not knowingly collect personal data from minors.

Policy Updates

We may update this policy to reflect changes in our practices or legal requirements. Updated versions will be posted on our website with the revised effective date.

Supervisory Authority

If you have concerns about how your personal data is handled, you may file a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten): https://www.imy.se

Contact Information

Company: Small Scale Labs AB Email: support [at] natively.dev

For Inquiries:

Privacy and data requests: support@natively.dev
Job-related questions: careers@natively.dev
Legal concerns: support@natively.dev

Urgent requests regarding data breaches or privacy issues should be marked as "URGENT - Privacy Concern" in the subject line for fastest handling.

This Privacy Policy forms an integral part of our Terms of Service. By using our services, you acknowledge that you have read and understood this policy.