Last updated: 2026-10-22
CS Kommunikationsbyrå AB, company reg. no. 5592612120, Rördromsvägen 3, 591 74 Borensberg, Sweden, is the data controller for the personal data processed within YourCoSite. Contact us at hej@cskb.se (the email address of CS Kommunikationsbyrå AB) with any questions.
| Category | Examples | Source |
|---|---|---|
| Account details | Name, email, phone, company | The Customer, at registration |
| Payment details | Billing address, payment history (card numbers are stored by Stripe, never by us) | Payment provider (Stripe) |
| Content on the customer's site | Texts, images, page structure | The Customer |
| Chat history with Millie | Messages the Customer writes to the assistant Millie and her replies (the latest 20 changes), and names of attached files | The Customer, when using the editor |
| Usage data | Logins, changes, support contacts | Automatically on use |
| Visitor data (web analytics) | Page views, device type, approximate location | Cookies/analytics tools, with consent |
Note on inspiration images: Screenshots or images the Customer uploads during onboarding as inspiration for the style and layout of the site (not intended to be used on the site) do not count as content on the customer's site and are not stored permanently. They are automatically deleted from storage as soon as they have been used to guide the design of the site, and never end up on the customer's own site or anyone else's.
We share data with subcontractors (data processors) who help us deliver the service: database and login (Supabase), cloud hosting and server operation (Vercel), payment solution (Stripe), an AI provider (Anthropic) that processes the texts, images and documents the Customer sends to Millie and the information needed to create and change the website, the image service Unsplash when the Customer searches for and selects stock photos, and any services for email sending, analytics or support. All processors are governed by data processing agreements (DPAs). We never sell personal data to third parties.
The Customer's data and site content are stored in a database at Supabase in Ireland (within the EU), and our server functions run at Vercel in Dublin. Some subcontractors, above all Anthropic (the AI provider behind Millie), Stripe and Unsplash as well as the companies behind Vercel and Supabase, are headquartered or may process data outside the EU/EEA, including in the USA. This applies in particular to the texts, images and documents the Customer sends to Millie, which are processed by Anthropic and may be processed outside the EU/EEA. For such transfers we ensure appropriate safeguards, for example the European Commission's standard contractual clauses (SCC) or that the recipient is certified under the EU–US Data Privacy Framework.
Account data is stored for as long as the account is active and is deleted or anonymised within 12 months after the subscription ends, unless the Swedish Accounting Act requires longer storage (7 years for accounting records).
The microphone button in the editor is optional. When the Customer uses it, speech recognition is handled by the browser (for example Google in Chrome, Apple in Safari, Microsoft in Edge), which may send the audio to its own provider to turn it into text. We do not receive or store any audio, only the text that ends up in the message box.
The chat history with Millie is saved only so that the Customer can see their latest changes on different devices. It contains the 20 latest changes, older messages are overwritten continuously, and it is deleted when the site or the account is deleted. The Customer should not write sensitive personal data in the chat. The chat may be included in the data export we provide on request.
The Customer has the right to request access to, rectification of, or erasure of their personal data, as well as the right to data portability and to object to certain processing. Contact hej@cskb.se (the email address of CS Kommunikationsbyrå AB). The Customer also has the right to lodge a complaint with a supervisory authority; in Sweden this is the Swedish Authority for Privacy Protection (IMY).
We use encryption (TLS) in transit, access restrictions and regular backups to protect the data against unauthorised access, loss or destruction.
A cookie is a small text file stored in your browser. YourCoSite uses cookies according to the categories below. Necessary cookies cannot be switched off because the service would not work otherwise; the other categories require active consent before they are activated, in accordance with the electronic communications act.
| Category | Purpose | Examples | Can be switched off |
|---|---|---|---|
| Necessary | Keeps you signed in, remembers cart/forms, security | Session cookie, CSRF protection | No |
| Functional | Remember settings such as language and the last edited page | Language choice, UI preferences | Yes |
| Analytics | Understand how visitors use the site in order to improve it | Page views, anonymised traffic statistics | Yes |
| Marketing | Show relevant ads and measure campaigns | Ad networks, retargeting pixels | Yes |
On the first visit a cookie banner is shown where the visitor can choose "Accept all", "Necessary only" or "Manage choices" to choose per category. The choice can be changed at any time via a link in the footer ("Cookie settings"). Consent is stored for 12 months, after which the visitor is asked again.
If analytics or marketing tools from third parties (for example Google Analytics, Meta) are activated on a customer's website, these are listed specifically in the cookie banner's detail view, with a link to the provider's own privacy policy.