Privacy policy
Last updated: 11 November 2026
This explains how Scale Up Accounting AB handles personal data when you visit scaleaccounting.se, send us a message or use our app for freelancers.
1. Data controller
Scale Up Accounting AB, reg. no. 559210-3955, Malmö, Sweden. Contact: info@scaleaccounting.se.
2. What data we process
| When | Data |
|---|---|
| You send the “Request access” form | Name, email, phone (optional), what you do, whether you have a client, roughly how much you invoice. Your IP address is only stored encrypted (as a code) to stop spam. |
| You have an account in the app | Name, personal identity number, address, email, phone, bank account, tax details (tax table, adjustment decision), language. |
| You work through us | Your assignments, clients, hours and amounts, invoices, salary, tax and employer contributions, payouts. |
| Your clients | Details you enter about the client: name, company or personal identity number (private person, e.g. for RUT/ROT), address, email, contact person, and for ROT the property designation or housing association and apartment number. |
| Logging in with BankID | Name and personal identity number from BankID, to identify you. |
We also keep emails and other messages between you, your clients and us.
If you fall ill or are injured during an assignment, we also handle medical certificates and work injury reports. These are health data, which have extra protection. Only the people at Scale who run your payroll can see them, and we use them only for sick pay and the reports the law requires.
Where the data comes from: you give most of it yourself in the app. Some comes from others: your client (e.g. contact details and payments), Skatteverket via Spiris (tax table and adjustment decision), BankID (name and personal identity number when you log in) and the Swedish Enforcement Authority, Kronofogden (if a salary garnishment order concerns you).
3. Why we process the data, and on what legal basis
- Answering your message and inviting you to the app: our legitimate interest in answering enquiries.
- Employing you, invoicing your clients and paying your salary: to perform the employment contract with you and the contract with the client.
- Bookkeeping, payroll reporting to Skatteverket (AGI), tax deduction, RUT/ROT claims: legal obligation (including the Swedish Bookkeeping Act and the Tax Procedure Act).
- Sick pay, work injuries, information to Försäkringskassan (the Social Insurance Agency) and salary garnishment from Kronofogden: our legal obligations as an employer. We process health data only to meet obligations under employment law.
- Helping you and your clients when you contact us: to perform the contracts, and our legitimate interest in answering questions and complaints.
- Security and preventing misuse (login, spam protection, logs): our legitimate interest in keeping the service secure.
We never sell your data or use it for advertising.
4. Who receives the data
- Visma Spiris (bookkeeping, invoicing and payroll), Supabase (database and login, stored in Stockholm), Idura (login and identification with BankID), Lovable (running the website and the app), Websupport (email): suppliers who process the data on our behalf, under data processing agreements.
- Authorities when the law requires it: Skatteverket (salary, tax, employer contributions and RUT/ROT claims), Försäkringskassan and Kronofogden.
- Your client: the invoice, with your name as the person who did the work.
- Our bank (Nordea): to pay your salary.
5. Data outside the EU/EEA
We store the data within the EU/EEA. If a supplier ever processes data outside the EU/EEA, it is done with the protection the GDPR requires, for example the EU Commission's standard contractual clauses.
6. How long we keep the data
- Messages from the form: 12 months if you do not become employed through us.
- App account: as long as you work through us, then as long as needed to finish salary and invoices.
- Salary and bookkeeping records: seven years after the end of the calendar year in which the financial year ended, as the Bookkeeping Act requires.
7. How we protect the data
Only the people at Scale who need the data for their work can reach it, and each of them sees only what their task requires. All traffic to the website and the app is encrypted. The database is in Stockholm, and sensitive details such as your personal identity number and bank account are only partly shown in the app.
8. Your rights
You can ask to see the data we hold about you, have incorrect data corrected, have data deleted when we no longer have to keep it, restrict processing, object to processing based on our legitimate interest, and receive the data you gave us in a readable format. Write to info@scaleaccounting.se. We answer within one month and may need to confirm that it really is you before we share anything.
You can also complain to the Swedish Authority for Privacy Protection (IMY), imy.se.
9. Cookies
The website uses no tracking or advertising cookies. The app only uses what is needed to keep you logged in and remember your language.
10. Changes
We update this policy when something changes. The latest date is shown at the top. If we change something important, we tell freelancers with an account by email beforehand.
