Privacy policy

Elitsäljare helps sellers understand their own sales skills and develop over time. To do that we store some data about you. This page says what we store, why, for how long, and what you can do about it.

We never sell your data on.

The data controller is Per Majak, as a private individual. There is no company behind Elitsäljare today.

If you have a question about your data, or want to use one of the rights further down, reach us at per@elitsaljare.se. Email is the only way to contact us.

When you take an assessment

• Your email address — to send you your result, and so you can find your way back to it.
• Name and company — so we can address you, and so your manager recognizes you if you invite one.
• Role, years in B2B sales and typical deal size — they affect how your result is interpreted.
• Your answers and your result — that is the service.
• IP address and browser — only to detect and limit automated submissions. The form is open to anyone, and that is the whole reason those two are stored.

When you have an account

• Your email address — it is your login. We also store when you proved the address is yours. If you change address we store the change: when it happened, which address you changed from and to, and whether you did it yourself or we did it for you. The list comes along when you download your data.
• Name, company, role, years in B2B sales and deal size — taken once from your most recent assessment, and yours to change after that under My account.
• The one-time codes we email you — of the code itself we store only a cryptographic digest, together with the address it was sent to, a digest of the client address the request came from, and the number of attempts.
• One login per device — a digest of the login key, a coarse device label along the lines of “Chrome · Windows”, and timestamps. Never the full browser string, and never an IP address. The label exists so you can recognize your own logins and end one you do not recognize.
• Your language choice — so the site, our emails and the texts we generate for you arrive in the right language.

We store no passwords, because we do not use any.

When you use the Elite Journey

• Your focus area, your activities, your weekly check-ins and your metrics — that is the development plan itself.
• Your own reflections — they are your notes. Your manager never sees them. Your AI coach does not use them.
• Your manager's weekly reviews and coaching notes about you — so the two of you can follow up together. You do see those.
• Your AI coach's latest suggestions, the basis they were built on — numbers from your Elite Journey, no free text — and your setting for your AI coach. Only the latest is kept: new suggestions replace the old ones.
• If you abandon a leg — that you did, when, and the reason you wrote, if you wrote one. The reason is optional and can be at most 500 characters. If you delete your account, all of this goes with it. If we anonymize your account, we remove the reason but keep that the leg was abandoned and when.

When somebody gets access to your Elite Journey

• Who you invited, or whose invitation you accepted, and what access they have.
• A request for the manager role, if you ask for one yourself, and the decision on it. If we set you up as a manager on a request from elsewhere — because your employer asked, for instance — we store it the same way: your address, that the role is approved, and when.
• That your manager has confirmed the terms for opening your individual view — when she did it, which version of the terms she read and in which language. We store no IP address and no free text alongside it.
• We store one row the first time your manager opens your Elite Journey — so we can answer you if you ask whether they have looked. The row says when it happened, which manager it was, and carries one-way references to your account and to the leg they opened. It carries neither your address, nor your name, nor any of the content. It is kept for 365 days, like other change trails — if they open the same leg again after more than a year, a new row is stored, and every leg in your Elite Journey gets its own. You do not see it yourself: if you ask us, we read it in our support view and answer you. The row is stored even if your account has been anonymized, because your manager's access remains and the question then matters more, not less.
• If you are a manager: the fact that you have reviewed a week or written a note is used to decide how detailed the AI coach's suggestions to the seller are — only that it happened and when. Nothing you wrote, and nothing about you, is sent to the AI provider.

When you give us feedback

You can give us feedback on your result, and — while you are signed in — from any page, using the small button in the corner. If you abandon a leg of your Elite Journey, we also ask you once why — you pick one of a few answers and can write what we could do better. All of this is voluntary, and the service works the same if you skip it.

• What you picked and what you wrote — which kind of feedback it is, and your own words.
• Which page you were on when you use the button in the corner — it is captured automatically, without us asking, so we know where in the service something needs to get better. We store which page it was, never the full web address.
• When you wrote it, and in which language — so we can put several answers side by side over time, and see whether one language version works less well than the other.
• Whether we may get in touch — a box you tick yourself, and it is not pre-ticked. If you tick it, we use your email address to reply about your feedback — nothing else. Leave it empty and we will not get in touch. The question after an abandoned leg has no such box, and we will not get in touch about your answer to it.

From the button in the corner and from the question after an abandoned leg we store no IP address and nothing about your browser. You are signed in when you use them, so we need neither.

Your answer to the question after an abandoned leg is not the reason you can write when you abandon it. The reason is stored on the leg and your manager sees it. Your answer to the question goes only to us, and we do not store which leg it was about.

Your manager never sees your feedback. We read it to develop the product. Do not write other people's names in the free-text box — we do not need them, and we are not asking for them.

When we email you

We email you when the service requires it: an acknowledgement when you have submitted an assessment, your result when it is ready, a one-time code when you ask for one, a welcome email when your account is created, and invitations and decisions when you or your manager invites somebody. That is email that belongs to the agreement, not marketing — the newsletter is a separate thing and needs your explicit yes.

We store the emails about your result and your development plan when they are sent to you — recipient, subject, content and time — so we can answer whether a message went out and what it said. The other emails, such as the acknowledgement, the one-time code and the welcome email, are not stored.

When you sign in, and when something goes wrong

When you ask for a one-time code we store one row about it: when you asked, whether it was for signing in or for changing your address, and a one-way reference to your account. We also store when the code left our server and how long that handover took — so we can answer whether a late code was our doing. And we store how it went: that you got in, or why the attempt was refused. The rows never carry your email address and never the code itself.

The row about a code request when you sign in says that somebody asked for a code for your account — not that it was you. Anyone can type an address, and the proof only exists once the code has been redeemed. On the rows where the proof does exist we do note that it was you: when a sign-in succeeds, and when you ask for a code to change your address while you are signed in. The row about the request and the row about the outcome are kept for 365 days, like other security events. The rows about the letter itself are kept for 90 days, like other calls to an outside service — after that it still says you asked for a code, but not when the letter left us.

We also store when a sign-in ends: when you sign out, when you sign out on every device — and then how many sign-ins ended — and when a sign-in reaches the 180-day limit and we end it ourselves. If a sign-in that has already ended is used again, we store that it was refused and whether it had been signed out or had expired, so that we can tell you why you were suddenly signed out. We store nothing when a sign-in simply lapses without being used again. When you press the button yourself, we note that it was you, the same way we do when you sign in. The two rows we write without you doing anything — when the limit is reached, and when an ended sign-in is refused — carry only a one-way reference to your account. None of the rows carries your address or the sign-in key, and all are kept for 365 days like the other rows about signing in.

Once you have redeemed the code and the address has changed we store one row about the change itself: when it happened, and that it was you who made it rather than an administrator on our side. The row carries neither of the two addresses — they are kept behind your sign-in and come along in your export. It is kept for 365 days, like other change trails.

We store one row about the event: when it happened, which error code it was, which part of the service it concerned, how long it took and which version of the code was running. The row carries a reference number you can quote if you contact us — and a one-way reference to your assessment, your Elite Journey or your account, which we can compute but never compute backwards. We never store your email address, your name, your answers, your result or your reflections in those rows.

If you change your name, company, role, years in B2B sales or deal size under My account, the change applies going forward. Assessments you have already taken keep the data that applied when you took them.

The reason is that an assessment is a measurement taken under given conditions. Role, experience and deal size shaped how that particular result was interpreted, and rewriting them afterwards would leave a result that contradicts its own conditions. If you want a result to reflect your new situation, take a new assessment.

We call this an assessment. Data protection law has its own word for it, and both apply: your answers are processed automatically to evaluate personal aspects about you — your work performance and your behavior as a seller. That is exactly what the law calls profiling, and it is more honest to write it out than to leave you to work it out.

Here is how it happens: you answer the questions in the form, the system computes scores per competency group, assigns you a profile and a level, and then has a language model write out what it means. The scores, the profile and the level are computed by machine from your answers — the same rules for everyone.

It only happens when you take an assessment yourself. What you can do about the result is under “What you can do” further down: you can download everything we have stored about you, including the AI texts we produced, and you can delete your account.

Parts of your result and your development plan are written by a language model at OpenAI Ireland Ltd (Ireland).

What is computed and what is written

The difference decides how to read what you see. Your scores per competency group, the radar they draw and which profile you get are computed by our own model — rules we wrote ourselves, the same for everyone. No AI is involved in that part. The running text is the language model's: how the profile is described and named on the result page, the strengths, the development areas, the summary, the plan, and in the Elite Journey the focus areas with their reasoning and activities, and your AI coach's suggestions, which update as you log. Your AI coach can also point you to material from our own resource library — books, models and exercises we chose and described. The titles and descriptions are ours and checked; the AI chooses among them and writes why.

We say it on the spot, not only here. On the result page, in the Elite Journey and in your manager's view there is a label reading “Phrased by AI” on the blocks the model wrote. What it means you read here, on this page — that is where the footer’s “How we use AI” leads. The marking sits on blocks, not on every sentence: a marked block can also hold a few words we wrote ourselves — headings and labels — in some places text you or your manager entered, and in your AI coach's suggestions descriptions from our resource library, marked as ours.

What we send there

What may be sent is a fixed list, not a judgement made case by case. Only four kinds of data leave the system:

• Values the system computed itself from your answers — scores per competency group, indicators and the level they produce.
• Text from our own model — profile names, labels, strengths, development areas and training tips, and descriptions from our resource library. They are identical for everyone with the same result.
• Text and values you or the AI wrote or entered inside the Elite Journey — titles of focus areas and activities, names of metrics you set up yourself, and the numbers you log: how many times you did an activity in a week, your targets and the values of your metrics. Your check-in notes and your reflections are not sent.
• Your answers per question, as numbers — and only for the internal quality check described below, never when your result page or your development plan is written.

The quality check on our model

Once a result has been produced, we may have the language model check that the result holds up against your answers. When we do, your answers per question are sent as numbers — the normalized value our calculation used, never free text — together with what the system computed.

The purpose is to find faults in the model, not to judge you. What comes back is a second opinion on the result: what the reviewer reads from your answers, and where it disagrees with our conclusion. It is produced for us who run the service and is read in our internal tool. It is never shown in your report, never shown to your manager, and never sent in an email — but because it is text about you, you get it if you download your data under My account.

These are still never sent: your email address, your name, your role, your years in B2B sales, your deal size and the links to your result and your Elite Journey — nor are the identifiers those links carry. The block sits in what gets assembled and sent, not in the instruction to the model, and it is checked automatically every time the code changes.

Your AI coach in the Elite Journey

The Elite Journey has an AI coach — an AI tool, not a person — that gives you suggestions based on what you log. The suggestions your AI coach writes are yours. Your manager does not see them, they are not used to evaluate you and they are never compared with anyone else's. Before your AI coach has written its first suggestions in a leg, it shows the advice from your plan — your manager sees that too, as before. You can turn your AI coach off whenever you like; then nothing is sent and its saved suggestions are deleted.

If no manager has reviewed a week or written a note in your Elite Journey in the last 14 days, and your current leg started more than 14 days ago, your AI coach gives you more detailed suggestions. We use only the fact that it happened and when — never what it says — and the AI provider is told only how detailed the suggestions should be, never why.

Your AI coach does not use your notes or reflections, and they are not sent to the AI provider. If we ever offer that, it will be a separate choice you turn on yourself — and this page will change first.

Links in the resource library lead to other websites, for example the publisher's page about a book. We send nothing about you there; the website sees a visit, as with any link you follow. We never link to stores and have no affiliate or paid links. We check the links automatically, and a link that has not passed our check in the last six weeks is not shown.

What the agreement with OpenAI says

• OpenAI may use the content only to provide the service to us, to comply with the law, to enforce their own policies and to prevent abuse.
• The content is not used to develop or improve their services unless we explicitly agree to it. We have not. That is a term of the agreement, not a policy they can change on their own.
• When the agreement ends, OpenAI deletes all content from their systems within thirty days, unless the law requires them to keep it.
• We own what the model writes, and we keep the rights to what we send in.

The agreement names preventing abuse as a permitted purpose, but it states no period for how long a single call is kept for it. We do not know that period, so we do not claim one.

What the AI text is not

It is written by a language model from numbers, and it can be wrong — it can emphasize something you do not recognize in yourself, and it can sound more certain than the material allows. It describes a pattern in your answers. It is not a judgment of you as a person, and it says nothing about your ability outside what the form asked about. It suggests, you decide — in the Elite Journey you are the one who picks the focus area among the suggestions.

An automatically generated result is material for your own development. It makes no decisions about you. The result is not built for recruitment or hiring decisions, and we do not offer it for that today. If we ever do, it will only be with your explicit consent and after this page has been changed — so you can read what applies before you say yes.

• Running the assessment, showing the result, running the Elite Journey and your account — we are performing the contract you enter into when you use the service. That includes contacting you about the account itself, for example before we delete it.
• Sending login codes and keeping you signed in — the same contract. Without the login there is no account to reach.
• Detecting and limiting automated submissions (IP address and browser) — our legitimate interest in a form that works and does not fill up with bots.
• Storing the emails we sent — our legitimate interest in being able to answer what was sent to you, and when.
• Troubleshooting, recording sign-ins, address changes and when your manager opens your Elite Journey, answering your questions and detecting abuse — our legitimate interest in the service working, in being able to see what happened when it did not, and in being able to tell you whether and when somebody signed in to your account, changed its address or opened your Elite Journey.
• Giving a manager access to your Elite Journey — your consent. Usually you start it yourself: you invite your manager, or you approve a request. There is one exception, and it is more honest to write it out than to let the sentence be simpler than the reality. If your manager invited you to the service before you had taken your first assessment, they get the access the moment the invitation is sent. We send you an email telling you who it is, but you do not get to say no first — and you can take the access back only once your Elite Journey has been created. We still treat this as consent rather than as part of the contract, because the other party is your own manager, and that imbalance should resolve in your favor, not ours.
• Newsletters, product updates and offers from selected partners — your consent, which you can withdraw at any time. You tick the boxes yourself, and neither is ticked for you.
• Keeping the answers and the result after an anonymization — our legitimate interest in being able to review and improve the model. When we anonymize an account we remove what points to you, but we keep the answers themselves and the result they produced. They no longer carry your name or your address.
• Reading your feedback to improve the product — our legitimate interest in knowing whether the service works. You choose whether to answer. Getting in touch about your feedback is a separate thing and rests on your consent — the box you tick as you write.

We do not delete anything automatically. If you have not used the service for 24 months, we may delete or anonymize your account, your assessments and your Elite Journey — but a person here decides that, account by account, and we email you at least 30 days beforehand. If you sign in, everything stays. You can download everything we have stored about you, or delete the account, at any time under My account.

Anonymizing takes away more than the name. We remove your address and your name, your reflections, your manager's reviews and coaching notes about you, your free-text answers, the feedback you have given from the button in the corner and after an abandoned leg, the AI's texts about your assessment, your AI coach's suggestions and your setting for it, your logins and the words you wrote yourself — the titles of your focus areas, activities and metrics, the notes from your check-ins, the reasons you gave when you asked to move on to the next phase or for a new leg, your manager's reason for turning down a new leg and the reason you wrote if you abandoned a leg. What stays is the account row, the numbers, the assessment answers and the result, the development plan the AI wrote for you — and the frame of your Elite Journey: how many focus areas and activities you had, which phases you went through and when, and whether a leg was abandoned. The plan was written from your result and without your name, but we have not read through every plan, so we are not promising that none of them names a person.

What is left no longer points you out — but we are not promising that it cannot be traced back. The account row stays, your assessment answers are still attached to it, and it is still connected to the managers who have had access to your Elite Journey. We leave that last link in place on purpose: it is what makes your manager see “Removed account” in the team list instead of your row quietly disappearing — and the same action can be taken on a manager's account, where those links carry other people's access. So someone who can read the database can still find the way back to you. If you are a manager, the row recording that you confirmed the terms also stays: it carries no name, no address and no free text, and it is the record that you confirmed the terms on which the access could be used during the time you were active.

Four things do have a fixed period:

• Logins last 30 days from the last time they were used, and 180 days at most in total. They end immediately when you sign out.
• One-time codes are valid for fifteen minutes. The row is cleared once it is more than a day old, the next time a code is requested for the same address.
• Operational events — the rows we write when you sign in, when something fails, when somebody is refused access, when your manager opens your Elite Journey, or when you or we change something on your account. Error rows and calls to outside services are kept for 90 days, security events and change trails for 365 days, and technical process events for 30 days. A nightly job removes them.
• Backups — see below. That is the one place where something really is deleted on a schedule.

The backups, which a policy must not leave out

We back up the database every night. If you delete your account, the data disappears immediately from the database the service runs against — but it stays in the backups until those backups rotate out. We keep fourteen daily copies, eight weekly copies and twelve monthly copies, so a piece of data can remain in a monthly copy for up to twelve months after you deleted it.

The copies exist only so the service can be restored after a failure. They are not read for any other purpose.

• You, under My account.
• A manager you invited, whose invitation you accepted, or who invited you to the service. You always see who it is — with one exception: if your manager's own account has been anonymized, you see “Removed account” instead of the address, because the address is no longer here. You can take the access back from your Elite Journey — and if your manager invited you before you had taken your first assessment, that option is there from the moment the Elite Journey is created. Your manager can also end their own access, and we end it if we revoke that person's manager role. Your manager sees your result, your focus area and how you followed it — but never your reflections. If you abandon a leg, your manager sees that it was abandoned, when it happened and the reason you wrote, if you wrote one. Before she can open your individual view she has to confirm that the access is used for coaching and development, and is not used as a basis for recruitment, selection, promotion or other employment decisions. If she does not, she still sees that you are on her team, where you are on your journey and what is waiting for her — but neither your profile, your competency group scores nor your individual view.
• Us, who run the service — to run and follow up the service, to troubleshoot, and when you have asked for help. We get a notification when you have taken an assessment, when a leg of your Elite Journey is created and when you send feedback using the button in the corner. The assessment notification contains your email address and your result; the leg notification contains your email address and the time; the feedback notification contains neither your address nor what you wrote — only which kind of feedback it is, which page it is about, the time and a link to the row in our admin panel. We also have a support view where we can see a timeline of what the system did for you — times, when you have signed in, when your manager opened your Elite Journey, error codes and which emails went out. It never shows your answers, your result, your reflections or the contents of an email. Every time one of us opens it, a row is written about that. We also keep a list of accounts that have not been used for a long time — a masked address and the times — which we use when deciding whether an account should be removed. That list also writes a row every time it is opened.
• We who run the service read the feedback you give — but never your manager, and never another seller. Every time one of us opens the feedback list, a row is written about that. If you ticked the box saying we may get in touch, we also see your email address beside what you wrote; if you did not, we do not see it.

And whoever has your result link. A result is reached through a long, random address. Anyone holding that link can open the result — so treat it the way you treat any private link, and forward it only to someone you want to see it.

Three suppliers process data on our behalf

• Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany — hosting and storage. The servers that run the service are in Helsinki, Finland, and the database backups are stored in Falkenstein, Germany. We have signed a data processing agreement under Article 28 of the GDPR, with an appendix listing approved subprocessors.
• Brevo (Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France) — sends the service's emails, and therefore receives your email address and the contents of those emails. A data processing agreement under GDPR Article 28 is in place, as part of their terms of use.
• OpenAI Ireland Ltd, Ireland — generates the texts described above. The agreement is with the Irish entity precisely because you are in the EEA.

Transfers outside the EU/EEA

Hetzner processes the data within the EEA — the server is in Helsinki and the backups in Falkenstein.

Two of the recipients process outside the EEA. Brevo, which sends our email, states in its own privacy policy that data may be transferred to, among others, the United States and India, and that it ensures an adequate level of protection through appropriate safeguards. Its US entity is also certified under the EU–US Data Privacy Framework. What Brevo receives from us is the recipient address and the content of the message — no answers, no results.

And the AI calls: to the extent OpenAI Ireland Ltd transfers data outside the EEA, it does so on Standard Contractual Clauses or an adequacy decision under Article 45.

• See everything we have stored about you. Download it yourself under My account. You get a machine-readable file with the account, your assessments in full, your whole Elite Journey with focus areas, activities, check-ins, metrics and reflections, your AI coach's suggestions and your settings for it, the AI text we produced about you — your report, your development plan, the quality check on our model and the instructions we sent to the model — the feedback you have given from the button in the corner and after an abandoned leg, and your logins.
• Correct what is wrong. Change name, company, role, experience and deal size under My account. Read the section on past assessments above — those changes apply going forward.
• Change your email address. Under My account. We send a code to the new address, and the change happens only once you redeem it — that way we know the mailbox is yours. The address is updated on your past assessments and on your Elite Journey at the same time, so everything stays connected and so a deletion finds all of it. Your old address gets an email telling you the change happened. An invitation already sent to the old address cannot be redeemed afterwards — whoever invited you has to send a new one.
• Delete everything. Delete the account under My account. That removes the account, your assessments, your Elite Journey, your reflections, the feedback you have given, your logins and the emails we logged to you. It cannot be undone. Read about the backups above. There is one exception, and it is more honest to write it out than to let the word "everything" be simpler than reality. Our operational events — the rows that say you signed in, that something failed, that your manager opened your Elite Journey or that somebody was refused access — are not deleted but made anonymous. We remove the link to you and everything they contained. What remains is a time, a code for what happened and which part of the service it concerned. Nobody can read out of them that they were about you. We keep them so we can see patterns in security events over time, and they are pruned on a schedule like everything else in the list above.
• Withdraw a consent. Write to per@elitsaljare.se and we will take you off the mailings.
• Take a manager's access back. From your Elite Journey, where the manager invitations are.
• Object to the processing, or ask for it to be restricted. Write to us and we will consider it.
• Complain. You have the right to complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY).

We answer within a month.

We use one single cookie, and only once you are signed in: es_session, which keeps you signed in. It cannot be read by scripts in the browser (HttpOnly), travels only over an encrypted connection (Secure) and is not sent along with requests other sites make to us (SameSite=Lax). It holds nothing about you except a random key.

Your language choice lives in the browser's own storage, not in a cookie.

We use no marketing tracking and share nothing with ad networks.

We measure page visits, not you. The analytics tool is Plausible and it runs on our own server — nothing goes to an outside party. It sets no cookie, stores no IP address, and the identifier it uses to count unique visits is replaced every day. A visit yesterday cannot be linked to a visit today, not even by us.

What is stored is which page was shown, where you came from, an approximate country, and what kind of browser and device it was. We keep it for at most 24 months, so we can compare one year with the previous one.

If we change something that matters to you, we tell you beforehand, by email or in the service.