Privacy Policy

Last updated: 30 October 2026

Who we are

This website, incatech.se, is operated by INternational CArbide Technology – INCA AB, registered in Sweden under company registration number 556578-8287.

INCA is the data controller for the personal data described in this policy. We have not appointed a data protection officer, as we are not required to do so. Enquiries about this policy can be sent to the address above.

What this policy covers

This policy explains how we handle personal data when you visit incatech.se, use the INCA Think assistant or contact us. It applies to this website only. Where we link out to services operated by others, such as TikTok, those services are governed by their own policies, and we do not control what they collect.

The personal data we process

When you visit the site. Our hosting provider records technical information about requests to the server, which may include your IP address, the time of the request, the page requested, and information about your browser and device. This is necessary to deliver the site and to keep it secure.

Visitor statistics. To see which pages are read and how the site is used, the site keeps its own visitor statistics, on the same server and in the same database as the rest of the site, without any external analytics service. When a page is shown, your browser tells our server the address of the page, any campaign tags in the link you followed (utm_source, utm_medium and utm_campaign, for example “linkedin”) and, if you came from another website, that website’s domain name (for example linkedin.com), never its full address. We also record when INCA Think is opened and when it receives a question (only whether it was answered or stopped by the usage limit, never the question or the answer), which document you open from one of our download links (such as a product sheet) and on which page, when you click our phone number or email address (only which of the two, and on which page), which of our films you open from the TikTok section on the home page (its place in the row and the film’s TikTok number), and, when you send the contact form, the subject you chose, never what you wrote.

To count unique visits per day, our server briefly uses your IP address and your browser type (the user agent your browser sends) together with a random value that is replaced every day, and turns them into a code. Only the code is stored with the records; your IP address and browser type are never stored. Records from the same day, IP address and browser share the code, which is how we can tell how many visits there were and whether a visit led to contact. The random value for the previous day is deleted, so the same visitor gets a new code the next day, and codes from different days cannot be linked to each other or traced back to you. No cookies are set and nothing is stored in your browser for this. Each record holds only the code, the details above and the time. The records are kept in the site’s database in the EU (Netherlands) and deleted after 13 months.

Web fonts. The typefaces used on this site are loaded from Google Fonts. Your browser therefore contacts Google when a page loads, and Google may receive your IP address. We do not use this for anything and receive no information from it.

When you use INCA Think. INCA Think is an AI assistant that answers questions about INCA from our published material. When you send a question, it is passed, together with the earlier messages in the same conversation, to OpenAI, whose model writes the answer. We do not store conversations. OpenAI states that data sent through its API is not used to train its models and is kept for up to 30 days to detect abuse. Please do not include personal information in your questions.

To limit how many questions can be asked, the site creates a random identifier when you send your first question. It is kept in your browser until you close the tab. On our side, it is stored only together with the number of questions sent per hour. It is not linked to your name, email address or IP address. Records older than 48 hours are deleted automatically. To protect the assistant, the contact form and the visitor statistics against automated misuse, the server also counts requests per IP address in memory for up to one hour; this is not stored.

Embedded content. The home page includes a Spotify player and a feed of our latest films from TikTok, provided by Elfsight. Both load when you visit the page, without asking for your consent first. Spotify sets its own cookies and may collect information about how you use the player, which Spotify can link to a Spotify account. Elfsight receives your IP address, operating system and browser type, keeps them for seven days to detect faults and misuse, and sets a cookie that counts views of the feed. The Spotify player also sends technical error reports to Sentry, an error-monitoring service in the United States. These services are governed by their own privacy policies.

Our TikTok account. To show our latest films, the site can also connect to INCA’s own TikTok account through TikTok’s official API. It then reads our account’s display name and the titles, links and cover images of our public films, and keeps the cover images on our own server. Visitors are never asked to sign in to TikTok, and no visitor data is sent to TikTok through this connection. If you select a film, it opens on TikTok, which is governed by TikTok’s own privacy policy.

When you use the contact form. We collect what you enter in the form: the subject of your enquiry, your message, your full name, your email address and, if you give it, your organisation. Your enquiry is stored in the site’s database in the EU (Netherlands) and sent to our email inbox, so that we can answer you. To limit how many enquiries can be sent, the site creates a random identifier when you send the form. It is kept in your browser until you close the tab, and stored together with your enquiry.

When you contact us. If you write to us or call us, we process your name, your contact details, and whatever else you choose to include in your message. We use this only to answer you and to handle the matter you raised.

We do not operate a customer account system, and we do not build profiles of visitors.

Cookies and similar technologies

The following are stored in your browser when you use this site.

• elfsight_viewed_recently – set by Elfsight to count views of the TikTok feed.
• Spotify cookies – set by Spotify when the player loads.
• inca-think-visitor – stored by this site in your browser’s session storage when you send your first question to INCA Think, to limit the number of questions. Removed when you close the tab.
• inca-contact-visitor – stored by this site in your browser’s session storage when you send the contact form, to limit the number of enquiries. Removed when you close the tab.
• tsr-scroll-restoration-v1_3 – stored by this site in your browser’s session storage as you move between pages, so that the back button returns you to where you were on the page. Removed when you close the tab.

You can block or delete cookies in your browser settings. The site will still work, but the Spotify player and the TikTok feed may not.

Why we process it, and on what basis

Where we rely on legitimate interest, we have considered whether our interest is overridden by your rights. You may object to this processing at any time.

Who else sees it

We share personal data only with suppliers who process it to run the site, the assistant and our correspondence:

• Website hosting. Railway hosts and serves this website and stores the site’s database in the EU (Netherlands). Railway processes personal data on our behalf under its terms of service.
• AI model. OpenAI, which provides the model used by INCA Think. Questions are processed in the United States.
• Contact form email. Resend, which delivers enquiries from the contact form to our email inbox.
• Email. Miss Hosting, which hosts our email on servers in Sweden.
• Web fonts. Google, which serves the typefaces used on this site.
• Embedded content. Spotify and Elfsight, which provide the player and the TikTok feed under their own terms.

We do not sell personal data and we do not share it for advertising.

We may disclose information where we are legally required to do so.

Transfers outside the EU and EEA

The site and its database are hosted in the EU. Some data may nonetheless be processed outside the EU and EEA: by OpenAI when INCA Think answers a question, by Resend when a contact form enquiry is delivered, by Google Fonts, and by the providers of the embedded content. These suppliers state that they transfer personal data outside the EU and EEA under the European Commission’s standard contractual clauses.

How long we keep it

• Correspondence is kept for 24 months after a matter is closed, so we can follow up and keep a record of what was agreed.
• Documentation that forms part of our accounting records is kept for seven years, as required by the Swedish Accounting Act.
• Server logs are kept for a limited period set by our hosting provider.
• Visitor statistics are deleted automatically after 13 months. The daily random value used to count unique visits is deleted once the day is over.
• Contact form enquiries are deleted from the site’s database after 30 days. The copy in our email inbox is kept as correspondence.
• INCA Think questions and answers are not stored by us. OpenAI keeps them for up to 30 days to detect abuse.
• INCA Think usage records are deleted automatically once they are older than 48 hours.
• Technical data received by Elfsight is kept for seven days.

We delete or anonymise personal data when it is no longer needed.

Your rights

Under the General Data Protection Regulation you have the right to:

• ask for a copy of the personal data we hold about you
• have inaccurate data corrected
• have data erased in certain circumstances
• ask us to restrict how we use your data
• object to processing based on legitimate interest
• receive data you provided in a portable format, where applicable
• withdraw consent at any time, where processing is based on consent

Withdrawing consent does not affect anything done before you withdrew it.

To exercise any of these rights, write to info@incatech.se. We will respond within one month.

If you believe we handle your personal data incorrectly, you can complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten:

Security

We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access. All traffic to the site is encrypted, and our suppliers report that they hold SOC 2 Type 2 certification for their own services.

No transmission over the internet is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy. The date at the top shows when it was last changed. Material changes will be noted on this page.

Contact

Questions about this policy, or about how we handle your personal data: