Privacy Policy

Last updated: 6 October 2026

Who we are

This website, incatech.se, is operated by INternational CArbide Technology – INCA AB, registered in Sweden under company registration number 556578-8287.

INCA is the data controller for the personal data described in this policy. We have not appointed a data protection officer, as we are not required to do so. Enquiries about this policy can be sent to the address above.

What this policy covers

This policy explains how we handle personal data when you visit incatech.se, use the INCA Think assistant or contact us. It applies to this website only. Where we link out to services operated by others, such as TikTok, those services are governed by their own policies, and we do not control what they collect.

The personal data we process

When you visit the site. Our hosting provider records technical information about requests to the server, which may include your IP address, the time of the request, the page requested, and information about your browser and device. This is necessary to deliver the site and to keep it secure.

Bot protection. Cloudflare, which delivers the site on behalf of our hosting provider, sets a cookie to tell people apart from automated traffic. It is strictly necessary to protect the site.

Visitor statistics. Our hosting provider, Lovable, measures overall traffic to the site: the number of visits, the pages viewed, how long visits last, where visits come from, the type of device and the country, based on your browser’s time zone. To tell one visit from another, it sets a cookie that expires after 30 minutes. Lovable states that it does not build profiles of visitors or follow them across separate visits. This cookie is set without asking for your consent first.

Web fonts. The typefaces used on this site are loaded from Google Fonts. Your browser therefore contacts Google when a page loads, and Google may receive your IP address. We do not use this for anything and receive no information from it.

When you use INCA Think. INCA Think is an AI assistant that answers questions about INCA from our published material. When you send a question, it is passed, together with the earlier messages in the same conversation, to Lovable’s AI service, which uses a model from Google to write the answer. Lovable keeps each question and answer for 90 days, so that we can troubleshoot the assistant and improve its answers. Please do not include personal information in your questions.

To limit how many questions can be asked, the site creates a random identifier when you send your first question. It is kept in your browser until you close the tab. On our side, it is stored only together with the number of questions sent per hour. It is not linked to your name, email address or IP address. Records older than 48 hours are deleted the next time the assistant is used.

Embedded content. The home page includes a Spotify player and a feed of our latest films from TikTok, provided by Elfsight. Both load when you visit the page, without asking for your consent first. Spotify sets its own cookies and may collect information about how you use the player, which Spotify can link to a Spotify account. Elfsight receives your IP address, operating system and browser type, keeps them for seven days to detect faults and misuse, and sets a cookie that counts views of the feed. The Spotify player also sends technical error reports to Sentry, an error-monitoring service in the United States. These services are governed by their own privacy policies.

When you use the contact form. We collect what you enter in the form: the subject of your enquiry, your message, your full name, your email address and, if you give it, your organisation. Your enquiry is stored in the site’s database in the EU (Ireland) and passed on to our email inbox, so that we can answer you. To limit how many enquiries can be sent, the site creates a random identifier when you send the form. It is kept in your browser until you close the tab, and stored together with your enquiry.

When you contact us. If you write to us or call us, we process your name, your contact details, and whatever else you choose to include in your message. We use this only to answer you and to handle the matter you raised.

We do not operate a customer account system, and we do not build profiles of visitors.

Cookies and similar technologies

The following are stored in your browser when you use this site.

• session-id – set by our hosting provider, Lovable, for visitor statistics. Expires after 30 minutes.
• __cf_bm – set by Cloudflare for bot protection. Strictly necessary. Expires after 30 minutes of inactivity.
• __dpl – set by our hosting provider, Lovable, as part of delivering the site.
• elfsight_viewed_recently – set by Elfsight to count views of the TikTok feed.
• Spotify cookies – set by Spotify when the player loads.
• inca-think-visitor – stored by this site in your browser’s session storage when you send your first question to INCA Think, to limit the number of questions. Removed when you close the tab.
• inca-contact-visitor – stored by this site in your browser’s session storage when you send the contact form, to limit the number of enquiries. Removed when you close the tab.

You can block or delete cookies in your browser settings. The site will still work, but the Spotify player and the TikTok feed may not.

Why we process it, and on what basis

Where we rely on legitimate interest, we have considered whether our interest is overridden by your rights. You may object to this processing at any time.

Who else sees it

We share personal data only with suppliers who process it to run the site, the assistant and our correspondence:

• Website hosting and INCA Think. Lovable hosts and serves this website, stores the site’s database in the EU (Ireland), measures visitor statistics and provides the AI service behind INCA Think. Lovable processes personal data on our behalf under its terms of service.
• Delivery and bot protection. Cloudflare, which delivers the site on behalf of Lovable.
• AI model. Google, which provides the model used by INCA Think through Lovable’s AI service.
• Email. Miss Hosting, which hosts our email on servers in Sweden.
• Web fonts. Google, which serves the typefaces used on this site.
• Embedded content. Spotify and Elfsight, which provide the player and the TikTok feed under their own terms.

We do not sell personal data and we do not share it for advertising.

We may disclose information where we are legally required to do so.

Transfers outside the EU and EEA

The site’s database is stored in the EU. Some data may nonetheless be processed outside the EU and EEA: by Cloudflare, by the AI service and model behind INCA Think, by Google Fonts, and by the providers of the embedded content.

Our hosting provider, Lovable, states that it transfers personal data outside the EU and EEA under the European Commission’s standard contractual clauses.

How long we keep it

• Correspondence is kept for 24 months after a matter is closed, so we can follow up and keep a record of what was agreed.
• Documentation that forms part of our accounting records is kept for seven years, as required by the Swedish Accounting Act.
• Server logs are kept for a limited period set by our hosting provider.
• Contact form enquiries are deleted from the site’s database after 30 days. The copy in our email inbox is kept as correspondence.
• INCA Think questions and answers are kept by Lovable for 90 days.
• INCA Think usage records are deleted once they are older than 48 hours, the next time the assistant is used.
• Technical data received by Elfsight is kept for seven days.

We delete or anonymise personal data when it is no longer needed.

Your rights

Under the General Data Protection Regulation you have the right to:

• ask for a copy of the personal data we hold about you
• have inaccurate data corrected
• have data erased in certain circumstances
• ask us to restrict how we use your data
• object to processing based on legitimate interest
• receive data you provided in a portable format, where applicable
• withdraw consent at any time, where processing is based on consent

Withdrawing consent does not affect anything done before you withdrew it.

To exercise any of these rights, write to info@incatech.se. We will respond within one month.

If you believe we handle your personal data incorrectly, you can complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten:

Security

We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access. Our hosting provider, Lovable, reports that it holds SOC 2 Type 2 and ISO/IEC 27001:2022 certification for its own services.

No transmission over the internet is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy. The date at the top shows when it was last changed. Material changes will be noted on this page.

Contact

Questions about this policy, or about how we handle your personal data: