Privacy Policy

1. Data Controller

Onebolt AB is the data controller for personal data processed in connection with the website and platform unless otherwise stated. In customer relationships, Onebolt typically acts as a data processor on behalf of its customers.

2. Personal Data We Process

Depending on context, we may process the following categories of personal data:

• Name, email address, phone number
• Account credentials and identifiers
• Employment related information such as role, work history, schedules, time logs
• Payroll related inputs and outputs where configured by the customer
• Device information, IP address, and usage data
• Communications and support interactions

3. Purpose of Processing

We process personal data to:

• Provide, operate, and improve the Onebolt platform
• Enable workforce management, onboarding, payroll logic, and invoicing logic
• Communicate with users and customers
• Ensure security, prevent misuse, and comply with legal obligations
• Perform analytics using aggregated and anonymized data

4. Legal Basis

Processing is based on one or more of the following legal grounds:

• Performance of a contract
• Compliance with legal obligations
• Legitimate interests related to platform security and improvement
• Consent, where required

5. Data Retention

Personal data is retained only for as long as necessary for the purposes described above, unless longer retention is required by law or agreed with the customer.

6. Data Sharing

Personal data may be shared with:

• Authorized personnel within Onebolt
• Subprocessors such as hosting, analytics, and infrastructure providers
• Customers acting as employers or staffing companies
• Authorities where required by law

Onebolt does not sell personal data.

7. International Transfers

Personal data may be transferred outside the EU or EEA. Where applicable, appropriate safeguards such as standard contractual clauses are applied.

8. Security Measures

Onebolt applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

9. Data Subject Rights

Individuals have the right to:

• Access their personal data
• Request rectification or erasure
• Object to or restrict processing
• Request data portability
• Withdraw consent where applicable
• Lodge a complaint with a supervisory authority

Requests can be submitted using the contact details below.

10. Cookies

Onebolt uses cookies and similar technologies on the website. Below is a summary of the cookies we use:

You can manage your cookie preferences at any time by clicking the cookie settings in the consent banner.

11. Changes to This Policy

This Privacy Policy may be updated from time to time. The latest version is always available on the website.

12. Contact

For privacy related questions or requests, contact Onebolt using the details published on the website.