Privacy policy
Privacy Policy
This Privacy Policy explains what personal data we collect, why we collect it, how we protect it, and the choices you have regarding your information.
Last updated
July 2, 2026
1. Introduction
Welcome to Kleevo.
Your privacy is important to us. This Privacy Policy explains what personal data we collect, why we collect it, how we protect it, and the choices you have regarding your information.
Kleevo provides electronic document signing and related services for businesses and individuals.
By using Kleevo, you agree to the processing of personal data as described in this Privacy Policy.
2. Who is responsible for your data?
Codeberg Solutions AB (operating Kleevo)
Company: Codeberg Solutions AB
Organization number: 559457-5010
Registered address: Norra Kapellgatan 16A, 734 35 Hallstahammar, Sweden
Contact: support@kleevo.se
Website: https://kleevo.se
Codeberg Solutions AB operates the Kleevo document signing platform and is the data controller for personal data processed in connection with your Kleevo account and your use of our services.
When our customers upload documents containing personal data for signing, the customer is generally the data controller, while Codeberg Solutions AB acts as a data processor by processing that information on the customer's behalf.
3. What information do we collect?
Depending on how you use Kleevo, we may collect:
Account information
- Name
- Email address
- Company name
- Billing information
- Subscription details
Document information
When you upload a document for signing, we process:
- Document filename
- File size
- Number of pages
- SHA-256 document hash
- Signing status
- Audit events
The document itself is only retained for the period described in this policy.
Signer information
Depending on the signing method used, we may process:
- Name
- Email address
- Phone number, if applicable
- Signing method
- Signature timestamp
- IP address
- Device/browser information
For Swedish BankID signing we also process the information returned by the BankID service that is necessary to verify the identity of the signer.
Usage information
We automatically collect technical information such as:
- Browser type
- Operating system
- Device information
- IP address
- Pages visited
- Error logs
This information helps us improve and secure the service.
4. Why do we process your information?
We process personal data to:
- Create and manage your account
- Deliver document signing services
- Verify signatures
- Generate audit trails
- Send notifications and reminders
- Process payments
- Provide customer support
- Improve our services
- Detect fraud and abuse
- Comply with legal obligations
We never sell your personal data.
5. Legal basis for processing
Under the General Data Protection Regulation, GDPR, we process personal data based on one or more of the following legal grounds:
- Performance of a contract
- Legitimate interests
- Legal obligations
- Consent, where required
6. Document storage and retention
Kleevo is designed as a document signing platform, not a permanent document archive.
Uploaded documents are retained only for as long as necessary to complete the signing process.
After a document has been finalized and successfully delivered, it is securely deleted after the applicable retention period for your plan.
We retain only the information necessary to:
- Verify completed signing processes
- Maintain audit records
- Meet legal obligations
- Provide customer support
Retention periods may vary depending on your subscription plan.
7. Audit trails
Every completed signing process generates an audit trail.
The audit trail may contain:
- Upload time
- Invitation timestamps
- First document access
- Signing timestamps
- Signing method
- Reminder events
- Finalization time
The audit trail helps demonstrate the integrity of the signing process.
8. Security
Protecting your information is one of our highest priorities.
We use industry-standard security measures including:
- Encryption in transit, TLS
- Encrypted storage
- Access controls
- Continuous monitoring
- Secure cloud infrastructure
Only authorized personnel have access to systems containing customer data.
9. Third-party providers
We use carefully selected service providers to operate Kleevo.
These may include providers for:
- Cloud hosting
- File storage
- Email delivery
- SMS delivery
- Payment processing
- Identity verification, Swedish BankID
- Analytics
These providers only receive the information necessary to perform their services.
10. International data transfers
Where personal data is transferred outside the European Economic Area, EEA, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.
11. Cookies
Kleevo uses cookies and similar technologies to:
- Keep you signed in
- Remember your preferences
- Improve website performance
- Understand how the service is used
Where required by law, we ask for your consent before using non-essential cookies.
12. Your rights
Depending on your location and applicable law, you may have the right to:
- Access your personal data
- Correct inaccurate information
- Delete your personal data
- Restrict processing
- Object to processing
- Receive a copy of your data
- Withdraw consent where applicable
To exercise your rights, please contact us using the details below.
13. Data deletion
You may request deletion of your account at any time.
Please note that certain information may need to be retained where required by law, for accounting purposes, or to establish, exercise, or defend legal claims.
14. Children's privacy
Kleevo is intended for business use and is not directed at children under the age of 16.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
When significant changes are made, we will notify users through the website or by email where appropriate.
The latest version will always be available on our website.
16. Contact
If you have any questions regarding this Privacy Policy or how your personal data is processed, please contact:
Kleevo
Contact: support@kleevo.se
Website: https://kleevo.se
Summary
In short:
- We only collect the information necessary to provide the service.
- We never sell your personal data.
- Your documents are retained only as long as necessary.
- We protect your information using modern security practices.
- You remain in control of your personal information and your rights under applicable data protection laws.