Privacy Policy

This Privacy Policy explains how Calejo Hybrid Intelligence AB ("Calejo", "we", "our" or "us") processes personal data when you: (a) visit our website, (b) communicate with us as a business contact or supplier, (c) work with us as a customer (such as a municipal utility), or (d) use our platform products.

• Calejo Hybrid Intelligence AB (Sweden), Organisation number 556473-6220
• Mellansjö 109, 925 92 Tärnaby, Sweden
• Email: info@calejo.ai

We use cookies and similar technologies only as described in our Cookie Policy. As of the effective date, our website does not set any non-essential (analytics or marketing) cookies and deploys no third-party advertising or tracking pixels by default. Any analytics or tracking we introduce in the future will be consent-gated.

If you have agreed to receive marketing or business materials from us, we use your business contact details for that purpose. You may unsubscribe at any time using the opt-out in any such communication or by contacting us.

You have the right to: access your personal data; have it rectified if inaccurate; have it erased; restrict our processing of it; object to processing based on legitimate interests; and, where applicable, receive a copy in a machine-readable, portable form.

To exercise any of these rights, email leonard@calejo.ai and reference "GDPR request". We will respond without undue delay and in any event within one month of receipt, as required by the GDPR. For access or erasure requests we may ask you to confirm your identity (for example by replying from the known business email address you use with us).

• Website visitor data: strictly-necessary cookies are session-only; any analytics data is retained for up to 14 months (consent-gated and auto-expiring).
• Business and B2B contact data: for the duration of the active relationship plus three years after last meaningful contact.
• Customer water and operational data: for the term of the applicable contract (plus a short wind-down, per the data retention policy) and in line with the contract.
• Invoices and accounting records: seven years, as required by Swedish accounting law.
• Security and access logs: twelve months.

Fuller detail is in our Data Retention Policy, maintained by the compliance-officer. We keep personal data only as long as necessary for the purposes described and delete or anonymise it afterwards.

Customer water data is stored on our infrastructure, which we operate as critical infrastructure with least-privilege access and encryption in transit. We do not sell personal data. We do not transfer personal data outside the EU/EEA except to the extent necessary to provide our services and subject to an appropriate transfer safeguard under GDPR Chapter V (such as Standard Contractual Clauses or an adequacy decision).

We use service providers to host and operate our website and platform. We do not engage sub-processors for customer personal data without prior written authorisation from the customer, as required by our data processing agreements.

For report review, the working tier of a draft environmental report — which contains plant performance data — is shared with our reviewing consultancy partner IPB Norr (a regional water consultancy, ipbnorr.se), acting as our sub-processor under a data processing agreement and only on the customer’s documented instructions, for that report-review purpose alone. This is not yet active: no plant data has been shared with this partner to date, and the customer’s prior written authorisation is required before any transfer.

Questions, requests or complaints about how we process personal data may be sent to leonard@calejo.ai or by post to the address above. If you are in the EU/EEA you also have the right to lodge a complaint with your local supervisory authority. Our lead supervisory authority is the Swedish authority for privacy protection, Integritetsskyddsmyndigheten (IMY).