How we handle your information

Expertise Legibility is the product and service. Very Good Communications International AB, organisation number 556596-6123 and VAT number SE556596612301, is the legal service provider and the data controller responsible for the personal data processed to deliver EL.

Registered address:
Bastemansgatan 15B
SE-276 60 Skillinge, Sweden

Contact: Contact@expertiselegibility.com
Telephone: +46 (0)10 808 67 44

Visits to this website, creating and using an account, purchasing an assessment, the questions you answer, the automated research we run, the report we produce, support correspondence and deletion of your assessment.

• Account and contact data. Your email address and the authentication data needed for sign-in with an email address and password.
• Assessment answers. The professional name you are assessed under, your role or professional description, the focus and market you choose, the organisations you name, and the public links you supply.
• Public professional information found during the assessment. Public pages, references and quoted extracts located by the AI-powered search systems we use, together with their web addresses.
• Assessment output. Scores, findings, evidence references and recommendations produced for you.
• Order and payment status. Whether an assessment has been paid for, the amount and currency, and the identifiers our payment provider gives us. We do not receive or store your full card details.
• Technical and security records. Short-lived session cookies that keep you signed in or give access to a report, records of prepared emails (template, recipient address and subject), rate-limiting records held as one-way hashes, and the ordinary request and error logs produced by our hosting platform.

We do not run advertising or analytics tracking on this site, and we do not use tracking or advertising cookies. The cookies we set are necessary for sign-in, report access and basic interface state.

Please do not include sensitive personal information (for example health, political, religious or trade-union information) in your answers. It is not needed for the assessment.

To carry out the assessment we search for and analyse publicly available professional information about you, the kind of material anyone could find on the open web. We record where each piece of information came from so you can check it yourself. We do not access private accounts, closed databases, credential registers or background-check sources.

EL uses third-party AI-powered search and analysis systems to look for, interpret and compare public professional information. The systems currently used are OpenAI, Google Gemini and Perplexity.

To perform the assessment you asked for, we transmit the professional identifiers and context needed for the search, typically your professional name, your stated focus, the organisations you named and the public links you supplied. We do not send your password or your payment details to these systems.

AI output is not verified fact. AI-generated and search results can be incomplete, outdated, inconsistent, incorrect or about a different person with a similar name. EL compares systems and applies evidence rules before something becomes a finding, but it cannot guarantee that AI-generated information is accurate.

• To deliver the assessment you bought: performance of our contract with you. This covers your account, your answers, the research, the report and support.
• To keep payment, accounting and tax records: compliance with our legal obligations.
• To keep the service secure and reliable: our legitimate interests in preventing abuse and fraud, limiting misuse, and diagnosing faults.
• Optional marketing email and any non-essential cookies: your consent, where consent is legally required. You can withdraw it at any time. We do not rely on consent as a general basis for delivering the service.

We share personal data only with providers that help us run EL:

• Lovable: application hosting and the managed database (currently hosted in the EU, Ireland region) where your account, assessment and report data is stored, including sign-in and authentication.
• Stripe: payment processing and payment records.
• OpenAI, Google Gemini and Perplexity: AI-powered search and analysis, as described in section 5.
• Resend: delivery of transactional service email, such as purchase confirmations, report notifications and withdrawal receipts. Resend receives the recipient address and the message itself.

We do not currently use a separate analytics product, error-monitoring service or object-storage provider. Report files are produced when you ask for a download and are not kept in a file store.

Some of our providers, in particular the AI systems described in section 5, may process personal data outside Sweden and the EEA. Where that happens, we rely on the transfer safeguards required by law under the relevant provider agreement.

To be inserted before commercial launch: The specific transfer mechanism relied on for each provider, once the signed data processing agreements have been reviewed. We do not name a mechanism we have not verified.

• Your assessment and report are scheduled for automatic deletion 30 days after the report is created. The deletion date is shown to you with the report.
• An unfinished assessment with no report is deleted 7 days after it was started.
• You can delete your assessment sooner yourself using the Delete my assessment now function. Deletion removes the data from the live database promptly. Daily platform backups taken before the deletion may still contain it until those backups age out on the platform schedule.
• The raw output returned by the AI systems is discarded as soon as your report exists.
• Short-lived access and session records expire within hours. Rate-limiting records, held as one-way hashes, are removed within 24 hours.
• Payment, accounting, security and deletion records that we must keep for legal reasons are retained for as long as the law requires. Our deletion and administration logs record that a deletion happened and contain no assessment content.

Under the GDPR you have the right to:

• be informed about, and get access to, the personal data we hold about you;
• have inaccurate data corrected;
• have data deleted where the law gives you that right;
• ask us to restrict processing, and to object to processing;
• receive your data in a portable form where that right applies;
• withdraw consent where our processing relies on consent.

To exercise a right, write to Contact@expertiselegibility.com. You can also complain to the competent supervisory authority. In Sweden that is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

EL uses automated, AI-supported analysis to prepare your assessment and the recommendations in your report. EL is an informational professional-development service. It does not make employment, credit, insurance, legal or other decisions about you, and it produces no decision with legal or similarly significant effects. What you do with the report is your choice.

We use access controls, encryption in transit, encryption at rest on our database platform, row-level access rules so that only you and authorised administrators can reach your assessment, short-lived one-time links for report access, and limits on how much data is kept and for how long. No online service can be completely secure, so we do not claim that it is.

If we change this policy we will update the date at the top of this page, and we will tell you where the law requires it.

Questions about privacy: Contact@expertiselegibility.com. See also our Terms of Service.