About this policy
This privacy policy describes how SKALO AB (company reg. no. 556907-8677), "we", processes personal data in the Hamn service and on hamn.io.
You can reach us through the contact form at hamn.io/contact or by post to SKALO AB, Låskolvsgatan 4, 589 41 Linköping.
Our two roles
Hamn is a service for businesses that manage products, orders, stock, picking, packing and shipping. We therefore process personal data in two different roles:
- Controller: for data about the people who use Hamn at our customers, and about people who contact us.
- Processor: for data that our customers manage in Hamn about their own customers, such as names, addresses, phone numbers and email addresses in orders and shipments. We process that data on the customer’s instructions and under the data processing agreement with the customer. If you are a customer of a business that uses Hamn, please contact that business first.
What data we process
- Account data: name, email address, profile picture, role and permissions.
- Sign-in and security: sign-in events, sessions, IP address, browser and device information, and identities of warehouse devices.
- Technical information: error reports and logs created when the service is used.
- Communication: what you send us through the contact form, email or support.
- Customer data: orders, delivery addresses, products and other information our customers enter into Hamn or import through integrations.
Why we process the data
- To provide Hamn under the agreement with the customer: accounts, sign-in, permissions, order flows, integrations and shipping bookings. Legal basis: contract and our legitimate interest in delivering the service to the customer.
- To keep the service secure and working: detect unauthorized access, troubleshoot and fix errors. Legal basis: legitimate interest.
- To answer questions and provide support. Legal basis: legitimate interest.
- To meet legal requirements, such as bookkeeping rules. Legal basis: legal obligation.
We do not sell personal data and do not use it for advertising.
Providers that process data for us
We use providers (sub-processors) to run Hamn. They may only process data on our behalf and under agreements with us:
- Supabase: database, file storage and sign-in. Data is stored in Stockholm.
- Vercel: hosting of the website and web app, in Stockholm.
- Amazon Web Services: background jobs for integrations, queues and deliveries.
- Cloudflare: storage and delivery of product images.
- Sentry: error reporting.
- Google (Gemini) and OpenAI: generation and translation of product texts. These services receive product information, not order data.
- Our email provider: sending sign-in links, invitations and other system emails.
When a customer connects Hamn to other services, such as marketplaces, web shops, Sello or carriers like PostNord, DHL and Shipit, Hamn sends the data needed to that service on the customer’s behalf. The customer is responsible for its agreements with those services.
Transfers outside the EU/EEA
Some of our providers operate or have parent companies outside the EU/EEA, mainly in the United States. Where data is transferred there, it is based on the European Commission’s adequacy decision (EU–US Data Privacy Framework) or the European Commission’s standard contractual clauses.
How long we keep the data
- Account data is kept while the account exists and deleted when the account is closed, unless the law requires us to keep it longer.
- Customer data is kept according to the customer’s instructions and deleted after the agreement with the customer has ended.
- Logs, error reports and raw integration data are kept for a limited time, normally no more than 12 months.
- Bookkeeping records are kept for seven years as required by Swedish law.
Security
Traffic to and from Hamn is encrypted. Access to data is controlled per account and per permission directly in the database, and keys for customer integrations are stored encrypted. Only people who need it to run and support the service have access.
Your rights
You have the right to know what data we hold about you, to have incorrect data corrected, to have data deleted, to restrict processing, to object to processing based on legitimate interest, and to receive data you have given us in a machine-readable format (data portability).
Contact us through the contact form at hamn.io/contact or by post to SKALO AB, Låskolvsgatan 4, 589 41 Linköping to use your rights. If we process the data as a processor for a customer, we forward your request to that customer.
You can also lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.
Cookies
Hamn only uses cookies that are needed for the service to work. Read more in our cookie policy.
Changes
We may update this policy. The date of the latest change is shown at the top of the page. We inform customers in advance of significant changes.