Privacy policy
Last updated: 2026-10-07
1. Who we are
Benchless is a Swedish service that lets consultancies see what a decision means for them before they make it: hourly rate, engagements, hiring and dividends. We are the data controller for the personal data described in this policy. Reach us at benchless.app@gmail.com.
2. What we collect
Account data – when you sign up with our authentication provider (Clerk) we receive your email address, name and profile image.
Data you enter – exactly what you type into the engagement track: company, role, dates, fee, size and your own notes, plus tasks, time entries and simulations. Also the company roster: owners' and employees' names, birth year, ownership share, salaries, pension amounts and per-person salary tracks. No bank details and no integrations that pull anything from your inbox. Benchless generates a text specification of tracked work that you paste into your accounting software yourself. Benchless does not create or store invoices.
Automatic data – usage analytics (pages visited, features used), device and browser information, IP addresses for security, and error reports when something breaks.
3. Why, and on what legal basis
- Providing the service – storing and showing your engagement data is the product (contract, GDPR Art. 6(1)(b)).
- Security, error monitoring and product analytics – keeping the service working and improving it (legitimate interest, Art. 6(1)(f)).
- Legal obligations – where bookkeeping or other Swedish law requires it (Art. 6(1)(c)).
Honest note: during the beta, analytics run without a consent banner. We know, and a proper consent flow is on the roadmap. Until then, this policy is us telling you plainly what runs.
4. Where your data lives, and who processes it
Your primary data is stored on Supabase in eu-north-1 (Stockholm), and every query is scoped to the signed-in account. We use these processors:
| Service | Purpose | Data |
|---|---|---|
| Supabase | App database | Everything you enter, stored in eu-north-1 (Stockholm) |
| Clerk | Authentication | Email, name, profile image, sign-in metadata |
| Vercel | Hosting | Request logs, IP addresses |
| Stripe | Payments (dormant during the beta) | A customer identifier; no charges, no card data yet |
| PostHog, Vercel Analytics, Google Analytics | Product and usage analytics | Page views, feature usage, device and browser info |
| Sentry, Better Stack | Error tracking and logging | Error reports, technical logs |
| Arcjet | Bot and abuse protection | IP addresses, request fingerprints |
| Resend | Transactional email | Email address, message content |
| Discord | In-app feedback | Message text, page path, viewport size, browser user-agent, account email address |
Some of these providers are US-based. Where data leaves the EU/EEA, transfers are covered by Standard Contractual Clauses or the EU–US Data Privacy Framework.
5. Retention and deletion
We keep your data while your account is active. If you delete your account, your data is marked as deleted immediately and removed from our systems within a reasonable period. You can get a copy of your data at any time: email benchless.app@gmail.com – your data is yours.
6. Your rights
Under GDPR you can ask us to give you access to, correct, delete or hand over your personal data, and to restrict or object to how we process it. Email benchless.app@gmail.com and we will sort it out. You can also complain to Integritetsskyddsmyndigheten (IMY), the Swedish supervisory authority.
7. Changes
When this policy changes, we update this page and the date at the top. If a change is material, we will tell you in-app or by email.
8. Contact
Questions about privacy or your data: benchless.app@gmail.com.