Privacy Policy

Team Two AI AB is the controller for personal data we process about website visitors, prospects, account users, and billing contacts.

For the content our customers put into Team Two (documents, messages, and data that agents process), the customer is the controller and we act as their processor under our Data Processing Agreement. If your data is in a customer's workspace, please contact that organization first.

Contact and account data: name, work email, company, role, and login details.

Billing data: billing contact, company details, VAT number, and payment status. Card payments are handled by Stripe; we do not store full card numbers.

Usage and technical data: log data, IP address, browser type, and product usage events that help us run, secure, and improve the service.

Communications: messages you send us through the contact form, email, or support channels.

To provide the service and manage your account, based on our contract with your organization and our legitimate interest in serving its users.

To bill customers and keep accounting records, based on contract and our legal obligations under the Swedish Bookkeeping Act (bokföringslagen).

To keep the service secure, detect abuse, and fix problems, based on our legitimate interest.

To reply to inquiries and send relevant business communications to business contacts, based on our legitimate interest. You can opt out of marketing emails at any time.

To comply with legal requests and protect our rights, based on legal obligation and legitimate interest.

We share personal data with service providers that help us run Team Two, listed on our Sub-processors page, under contracts that require them to protect it.

We may disclose data to authorities when required by law. We do not sell personal data.

We store customer and account data in the EU, in AWS Stockholm (eu-north-1). Some providers, such as model providers and web search providers, process data in the United States. For those transfers we rely on the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU-US Data Privacy Framework.

Account data: for as long as the account is active, and up to 12 months after it closes.

Billing and accounting records: seven years, as required by the Swedish Bookkeeping Act.

Log data: up to 12 months, unless needed longer to investigate a security incident.

Inquiries from the contact form: up to 24 months after our last contact.

You have the right to access, correct, or delete your personal data, to restrict or object to processing, and to receive your data in a portable format. Where we rely on consent, you can withdraw it at any time.

To exercise your rights, email hello@tt2.ai. We reply within one month.

If you think we handle your data incorrectly, please contact us first. You also have the right to complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se, or to the data protection authority where you live or work.

Our website uses only cookies and similar storage that are needed for it to work, such as remembering your language choice. If we add analytics or marketing cookies, we will ask for your consent first and update this section.

The Team Two app uses cookies and local storage needed to keep you signed in.

We protect personal data with technical and organizational measures such as encryption in transit and at rest, tenant isolation, role-based access control, and audit logging. Our Security page describes these measures.

We may update this policy. The date at the top shows when it last changed. For material changes we will notify account holders.

Privacy questions: hello@tt2.ai.